last executing test programs: 6m35.319758026s ago: executing program 0 (id=881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000040)="5a181e9f51242cb3d81414ef4a74", 0xe, 0x90, &(0x7f0000000000)={0x11, 0x8, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x400, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="9a58", 0x2}], 0x1}}], 0x3, 0x608d8d0) fcntl$setown(0xffffffffffffffff, 0x8, r3) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)) ioctl$sock_bt_hci(r6, 0x400448e7, &(0x7f0000000180)="e52b") 6m33.930908967s ago: executing program 0 (id=884): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x200000001000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0xffff7fff, 0x2, 0x1, 0x0, 0x5}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000840)={0x1, 0x0, [{0x30000, 0x0, 0x0}]}) getpgid(r1) sendmmsg$inet(r0, &(0x7f0000003240), 0x0, 0x4000800) syz_ublk_setup_io_uring(0xfbb, 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) syz_ublk_setup_io_uring(0x3bf1, &(0x7f00000004c0)={0x0, 0x4e2f, 0x2, 0x0, 0x3}, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)) 6m28.138647453s ago: executing program 0 (id=898): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 6m24.226091305s ago: executing program 0 (id=902): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 6m23.342234131s ago: executing program 0 (id=906): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) 6m22.613095423s ago: executing program 0 (id=911): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f00007ec000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x601c2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_open_dev$evdev(&(0x7f0000000340), 0x6, 0x391083) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001a00)={'filter\x00', 0x0, 0x3, 0x1000, [0x5, 0x6, 0x0, 0x455f, 0xd7d, 0xad12], 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000a00)=""/4096}, &(0x7f0000001a80)=0x78) 6m7.330382481s ago: executing program 32 (id=911): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f00007ec000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x601c2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000000c0), 0x4000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) syz_open_dev$evdev(&(0x7f0000000340), 0x6, 0x391083) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000001a00)={'filter\x00', 0x0, 0x3, 0x1000, [0x5, 0x6, 0x0, 0x455f, 0xd7d, 0xad12], 0x3, &(0x7f00000002c0)=[{}, {}, {}], &(0x7f0000000a00)=""/4096}, &(0x7f0000001a80)=0x78) 1m39.021079336s ago: executing program 5 (id=1285): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000200)='mnt\x00', 0x128) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) close(0x3) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x1, 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000099ae9008"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="000000000000000085000000250000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x200000, 0x2, 0x0, 0x1d3}) 1m35.424682553s ago: executing program 5 (id=1288): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000003380), 0x0, 0x100, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x6800c101}, 0x40000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c) dup(r4) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) dup2(r3, r3) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3e07b7b9}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x9, 0x4, 0xffffffff, 0xe7, 0xd]}, 0x0) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/35, 0x23}, 0x7}], 0x40000cb, 0x12141, 0x0) 1m33.064538548s ago: executing program 5 (id=1294): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 1m29.570394606s ago: executing program 5 (id=1299): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 1m21.993028371s ago: executing program 5 (id=1302): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x140060c1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}], 0x1, 0x40) 1m18.452854338s ago: executing program 5 (id=1306): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r2 = fsopen(&(0x7f0000000240)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x401, 0x87) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x489, 0x0, 0x100000005}]}) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r8, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') io_submit(0x0, 0xfffffffffffffead, 0x0) 1m2.663368665s ago: executing program 33 (id=1306): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) r2 = fsopen(&(0x7f0000000240)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x401, 0x87) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x489, 0x0, 0x100000005}]}) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r8, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r10, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="159804000300000008000d000100000008001b00"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) socket(0x46, 0xa, 0x2feb) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0xfffffffffffffdb5, &(0x7f0000000080)='\x00\xc9\xf5\x00\x00\x00\x00\x00\x00\x00+\x1ct\xc6\fr\xbaU\xc1\xb2\xd2\xde\xbfk\xc0\x18\x94\xc5&\xec\x03\xa0w\"E\xc9\xf2,K4\x10\xc8\x8cuj\xd3\xf0\xb3\xa9f\xf7\xb7\x17\xdf\xca\xac\x8b\x81K\t\x14^\xc3\xb7<\xa1\x15\v4\xd0\xbe\xa8\x01\x00<:-Y\n<\x1d\xb2\xe0kU\xc0\xc1\x14') io_submit(0x0, 0xfffffffffffffead, 0x0) 30.591347718s ago: executing program 2 (id=1357): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) shutdown(r4, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0x1, 0x20000000, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0xfea8, 0xa) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) close(r5) socket(0x15, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) openat$6lowpan_control(0xffffff9c, 0x0, 0x2, 0x0) 29.193236041s ago: executing program 4 (id=1359): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 27.192124901s ago: executing program 2 (id=1363): socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 24.396327158s ago: executing program 4 (id=1366): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 22.57805916s ago: executing program 2 (id=1368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) 21.166710526s ago: executing program 3 (id=1369): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 21.108481258s ago: executing program 2 (id=1370): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) 20.931683756s ago: executing program 4 (id=1372): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 19.784558256s ago: executing program 3 (id=1373): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 16.751737993s ago: executing program 3 (id=1375): gettid() mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r1 = syz_open_procfs(r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) read$FUSE(r1, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f00000040c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x1214082, &(0x7f0000000240)={[{@creator={'creator', 0x3d, "ceca8a6a"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@uid={'uid', 0x3d, r3}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {}, {@type={'type', 0x3d, "e523729b"}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) getsockopt(0xffffffffffffffff, 0x1fc, 0x9, &(0x7f00000002c0)=""/201, 0x0) mlock(&(0x7f0000ff3000/0xd000)=nil, 0xd000) mincore(&(0x7f0000cda000/0x4000)=nil, 0x4000, &(0x7f0000000280)=""/204) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x9, {"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", 0x35e}}, 0x1006) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = eventfd(0x0) io_setup(0x7, &(0x7f0000000080)=0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) io_submit(r8, 0x1, &(0x7f0000000b80)=[&(0x7f0000000580)={0x0, 0x0, 0x8, 0x0, 0x0, r7, &(0x7f0000000480)="1cb05f0b1e18e84d", 0x8}]) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x0, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) 15.458349375s ago: executing program 1 (id=1376): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 15.427913021s ago: executing program 3 (id=1377): socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) 14.296575768s ago: executing program 1 (id=1378): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 12.232083302s ago: executing program 1 (id=1379): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 12.046233631s ago: executing program 3 (id=1380): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 11.176418844s ago: executing program 4 (id=1381): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 11.105637199s ago: executing program 1 (id=1382): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 10.142715971s ago: executing program 2 (id=1383): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000040)='+\xd1@\x00', &(0x7f0000000240)='overlay\x00', 0x7}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r4, r5]}}], 0x18, 0xcc040}, 0x26048040) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x4, 0x9, 0x20ff, 0x1, 0xe395, 0xd615, 0x9, 0x2, 0x9, 0x8000, 0xffffffff, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 9.739252705s ago: executing program 1 (id=1385): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 7.250523738s ago: executing program 3 (id=1386): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r6, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 5.644475375s ago: executing program 2 (id=1387): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f0000006300), 0x2000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 5.61873673s ago: executing program 4 (id=1388): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000300)={0x28000800, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) r4 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) 4.064799756s ago: executing program 1 (id=1389): read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0xfc, 0x4, 0xe9, 0x7, 0x1, 0x0, 0x0, 0x6, 0x9}, {0x0, 0x0, 0x0, 0x40, 0x10, 0x6, 0xfd, 0xfc, 0x1, 0xfd, 0x47}, {0x3, 0xa, 0x22, 0x8, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8000000001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006300), 0x2000, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x102) write$cgroup_int(r5, &(0x7f0000000040)=0x8000000001cb, 0x12) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 0s ago: executing program 4 (id=1390): socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x8, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0x8}}}}}}, 0x0) kernel console output (not intermixed with test programs): TA feature is enabled [ 341.484318][ T6277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 341.492115][ C1] gadgetfs: connected [ 342.207209][ T6277] gadgetfs: disconnected [ 342.360133][ T6974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.376941][ T6974] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.555544][ T6985] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 343.033525][ T6987] loop1: detected capacity change from 0 to 2048 [ 343.084048][ T6987] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.018913][ T6998] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 344.555327][ T6320] EXT4-fs (loop1): unmounting filesystem. [ 344.906845][ T6999] xt_CT: No such helper "snmp" [ 345.305410][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 345.396661][ T7006] xt_CT: No such helper "snmp" [ 345.900668][ T7019] binder: 7018:7019 ioctl c0306201 0 returned -14 [ 345.909148][ T7019] rdma_rxe: rxe_register_device failed with error -23 [ 345.916218][ T7019] rdma_rxe: failed to add lo [ 346.639337][ T7033] loop4: detected capacity change from 0 to 512 [ 346.650622][ T7033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 347.196897][ T7033] EXT4-fs (loop4): 1 truncate cleaned up [ 347.317238][ T7033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.444951][ T7041] netlink: 'syz.1.553': attribute type 27 has an invalid length. [ 348.264095][ T7039] xt_CT: No such helper "snmp" [ 348.329924][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 349.247732][ T7065] loop4: detected capacity change from 0 to 512 [ 349.285577][ T7065] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 349.485142][ T7066] xt_CT: No such helper "snmp" [ 349.516288][ T7065] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 349.531097][ T7065] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.380340][ T7085] loop2: detected capacity change from 0 to 128 [ 351.430797][ T7085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 351.441019][ T7085] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 351.894193][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 352.455346][ T7093] xt_CT: No such helper "snmp" [ 353.429341][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 354.654800][ T7121] xt_CT: No such helper "snmp" [ 354.951336][ T7125] xt_CT: No such helper "snmp" [ 356.208457][ T7145] loop3: detected capacity change from 0 to 1024 [ 357.027893][ T7161] loop3: detected capacity change from 0 to 512 [ 357.055643][ T7161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.162212][ T7166] futex_wake_op: syz.1.579 tries to shift op by 144; fix this program [ 357.209481][ T7155] xt_CT: No such helper "snmp" [ 357.842771][ T7161] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 357.887882][ T7161] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.370873][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 359.653196][ T7183] xt_CT: No such helper "snmp" [ 359.885967][ T4345] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 360.119600][ T4345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.251091][ T4345] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 360.395569][ T4345] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 360.520684][ T4345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.720349][ T4345] usb 1-1: config 0 descriptor?? [ 360.912778][ T4345] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 361.005175][ T4345] dvb-usb: bulk message failed: -22 (3/0) [ 361.186066][ T26] audit: type=1326 audit(1790276409.978:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.210180][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.217253][ T7196] xt_CT: No such helper "snmp" [ 361.229255][ T26] audit: type=1326 audit(1790276410.020:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.229839][ T4345] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 361.253164][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.259765][ T26] audit: type=1326 audit(1790276410.020:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.293086][ T26] audit: type=1326 audit(1790276410.020:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.317010][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.324548][ T26] audit: type=1326 audit(1790276410.073:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.348800][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.357420][ T26] audit: type=1326 audit(1790276410.073:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.381361][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.397043][ T4345] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 361.406968][ T26] audit: type=1326 audit(1790276410.073:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.415058][ T4345] usb 1-1: media controller created [ 361.430896][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.451234][ T26] audit: type=1326 audit(1790276410.073:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.475214][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.494642][ T4345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.517311][ T26] audit: type=1326 audit(1790276410.073:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.541219][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.586123][ T26] audit: type=1326 audit(1790276410.073:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7202 comm="syz.2.587" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488c19e159 code=0x7ffc0000 [ 361.591973][ T4345] dvb-usb: bulk message failed: -22 (6/0) [ 361.634585][ T4345] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 361.650751][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 361.763234][ T4345] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 362.126124][ T4345] dvb-usb: schedule remote query interval to 150 msecs. [ 362.197841][ T4345] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 362.603315][ T6277] dvb-usb: bulk message failed: -22 (1/0) [ 362.609863][ T6277] dvb-usb: error while querying for an remote control event. [ 362.667449][ T7212] loop4: detected capacity change from 0 to 128 [ 362.802884][ T6277] usb 1-1: USB disconnect, device number 7 [ 363.284179][ T6277] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 363.412889][ T7214] xt_CT: No such helper "snmp" [ 363.578532][ T7226] futex_wake_op: syz.4.593 tries to shift op by 144; fix this program [ 365.171045][ T7229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 365.578666][ T7240] siw: device registration error -23 [ 366.471037][ T7246] autofs4:pid:7246:autofs_fill_super: called with bogus options [ 366.903252][ T7252] xt_CT: No such helper "snmp" [ 366.984084][ T7246] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.993616][ T7246] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 367.144425][ T7265] loop1: detected capacity change from 0 to 512 [ 367.145130][ T7264] netlink: 'syz.4.599': attribute type 27 has an invalid length. [ 367.155007][ T7246] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 369.098793][ T4289] Bluetooth: hci0: command 0x0c1a tx timeout [ 369.116691][ T7246] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.146142][ T7265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 369.169177][ T7246] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 369.187309][ T7246] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 369.205214][ T7282] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 369.213771][ T7246] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.219788][ T7246] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 369.229248][ T7282] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'. [ 369.250419][ T7246] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 369.264792][ T7265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 369.274067][ T7265] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.280985][ T7246] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.317322][ T7246] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 369.413071][ T7246] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 369.446530][ T7246] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.457953][ T7246] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 369.470464][ T7246] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 370.237846][ T7290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.605'. [ 370.782844][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 370.789291][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 370.789304][ T26] audit: type=1326 audit(1790276419.648:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.0.607" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd89939e159 code=0x0 [ 370.818631][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.827373][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.019717][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 371.115124][ T4289] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.172408][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.364440][ T4287] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.412464][ T26] audit: type=1800 audit(1790276420.656:226): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="syzkaller0" dev="sda1" ino=2050 res=0 errno=0 [ 371.449821][ T4287] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.827911][ T7313] UBIFS error (pid: 7313): cannot open "", error -22 [ 372.850712][ T7313] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 373.077163][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 373.305757][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 373.381905][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 373.387955][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 373.922313][ T6320] EXT4-fs (loop1): unmounting filesystem. [ 378.091622][ T7348] siw: device registration error -23 [ 378.133297][ T7349] netlink: 'syz.2.617': attribute type 12 has an invalid length. [ 380.186057][ T7360] loop3: detected capacity change from 0 to 512 [ 380.239404][ T7360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 380.276394][ T7360] ext4: Unknown parameter 'fsname' [ 381.200170][ T7371] loop4: detected capacity change from 0 to 128 [ 382.222988][ T7373] binder: 7366:7373 ioctl c0306201 0 returned -14 [ 382.245634][ T7373] rdma_rxe: rxe_register_device failed with error -23 [ 382.253085][ T7373] rdma_rxe: failed to add lo [ 383.298305][ T7371] EXT4-fs: error -4 creating inode table initialization thread [ 383.310019][ T7371] EXT4-fs (loop4): mount failed [ 384.605483][ T7389] loop3: detected capacity change from 0 to 256 [ 384.612285][ T7390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.612859][ T7389] exfat: Deprecated parameter 'namecase' [ 384.626158][ T7389] exfat: Deprecated parameter 'namecase' [ 384.644636][ T7389] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 384.705338][ T7386] block device autoloading is deprecated and will be removed. [ 385.447848][ T7382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.281811][ T7403] xt_CT: No such helper "snmp" [ 387.263702][ T7423] loop4: detected capacity change from 0 to 1024 [ 387.275250][ T26] audit: type=1326 audit(1790276437.371:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 387.396093][ T26] audit: type=1326 audit(1790276437.371:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 387.446691][ T7428] loop1: detected capacity change from 0 to 512 [ 387.479387][ T26] audit: type=1326 audit(1790276437.371:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 387.500048][ T7429] loop2: detected capacity change from 0 to 512 [ 387.504578][ T26] audit: type=1326 audit(1790276437.371:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 387.544708][ T26] audit: type=1326 audit(1790276437.371:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 387.568947][ T7429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 387.762808][ T7428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.899092][ T7429] EXT4-fs (loop2): 1 truncate cleaned up [ 387.954909][ T7429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 388.122498][ T7428] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 388.134064][ T26] audit: type=1326 audit(1790276437.371:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 388.200473][ T7428] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.222216][ T26] audit: type=1326 audit(1790276437.371:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 388.429497][ T26] audit: type=1326 audit(1790276437.371:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 388.764143][ T26] audit: type=1326 audit(1790276437.413:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 388.916598][ T26] audit: type=1326 audit(1790276437.413:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7417 comm="syz.0.633" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89939e159 code=0x7ffc0000 [ 388.972750][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 388.982252][ T6320] EXT4-fs (loop1): unmounting filesystem. [ 390.806632][ T7460] block device autoloading is deprecated and will be removed. [ 392.501605][ T7468] loop2: detected capacity change from 0 to 512 [ 392.622647][ T7469] loop4: detected capacity change from 0 to 256 [ 392.633950][ T7469] exfat: Deprecated parameter 'namecase' [ 392.639802][ T7469] exfat: Deprecated parameter 'namecase' [ 393.324580][ T7469] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 393.383528][ T7468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 394.451680][ T7468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 394.469810][ T7468] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.549829][ T7475] xt_CT: No such helper "snmp" [ 394.911935][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 394.911971][ T26] audit: type=1326 audit(1790276445.382:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7485 comm="syz.4.648" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b7319e159 code=0x0 [ 395.336099][ T7480] xt_CT: No such helper "snmp" [ 395.747269][ T7501] loop4: detected capacity change from 0 to 512 [ 395.841956][ T7501] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 395.869119][ T26] audit: type=1326 audit(1790276446.390:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 395.980662][ T7501] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 396.044112][ T7501] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.055195][ T26] audit: type=1326 audit(1790276446.432:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 396.378327][ T26] audit: type=1326 audit(1790276446.432:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 396.563472][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 396.609969][ T7509] ipt_REJECT: TCP_RESET invalid for non-tcp [ 397.000892][ T26] audit: type=1326 audit(1790276446.432:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 397.064109][ T26] audit: type=1326 audit(1790276446.432:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 397.106510][ T7513] loop3: detected capacity change from 0 to 512 [ 397.123073][ T26] audit: type=1326 audit(1790276446.432:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 397.196113][ T7513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 397.215611][ T26] audit: type=1326 audit(1790276446.432:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 397.362732][ T7513] EXT4-fs (loop3): 1 truncate cleaned up [ 397.461556][ T7522] netlink: 'syz.2.653': attribute type 8 has an invalid length. [ 399.632409][ T7513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 402.259174][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.658'. [ 402.540929][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 402.594068][ T26] audit: type=1326 audit(1790276446.432:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 402.718993][ T26] audit: type=1326 audit(1790276446.432:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 403.039362][ T7542] netlink: 316 bytes leftover after parsing attributes in process `syz.1.661'. [ 403.186392][ T26] audit: type=1326 audit(1790276446.432:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 404.534964][ T26] audit: type=1326 audit(1790276446.463:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 404.559779][ T26] audit: type=1326 audit(1790276446.495:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 404.651180][ T26] audit: type=1326 audit(1790276446.495:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 404.776843][ T26] audit: type=1326 audit(1790276446.495:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fe94c35e98e code=0x7ffc0000 [ 404.879870][ T26] audit: type=1326 audit(1790276446.547:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe94c35e98e code=0x7ffc0000 [ 404.955836][ T26] audit: type=1326 audit(1790276446.547:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 405.032979][ T7547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.042459][ T26] audit: type=1326 audit(1790276446.547:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7496 comm="syz.1.650" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94c39e159 code=0x7ffc0000 [ 405.158738][ T7547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.449087][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 405.481353][ T7555] gadgetfs: bound to dummy_udc driver [ 405.688644][ T7564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.775153][ T5445] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 406.591255][ C0] gadgetfs: connected [ 406.598383][ T7553] gadgetfs: suspended from state 3 [ 406.631919][ T7553] gadgetfs: disconnected [ 406.879125][ T7573] loop3: detected capacity change from 0 to 512 [ 407.509353][ T7573] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 407.567232][ T7573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 407.594458][ T7573] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.799900][ T7593] loop4: detected capacity change from 0 to 512 [ 409.908671][ T7593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 410.094269][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 410.113782][ T7593] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.671: bad orphan inode 131083 [ 410.801010][ T7595] xt_CT: No such helper "snmp" [ 410.905061][ T7593] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 412.403408][ T7626] loop2: detected capacity change from 0 to 512 [ 412.411993][ T7626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 413.205906][ T7626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 413.234091][ T7626] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.503778][ T7638] binder: 7632:7638 ioctl c0306201 0 returned -14 [ 413.857495][ T7638] rdma_rxe: rxe_register_device failed with error -23 [ 413.865147][ T7638] rdma_rxe: failed to add lo [ 414.362748][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 414.829089][ T7654] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 415.084329][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.693'. [ 415.345193][ T7645] kernel profiling enabled (shift: 7) [ 416.646056][ T7666] loop4: detected capacity change from 0 to 512 [ 417.587535][ T7666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.655998][ T7674] futex_wake_op: syz.3.687 tries to shift op by 144; fix this program [ 418.669659][ T7674] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 418.825714][ T7666] EXT4-fs (loop4): 1 truncate cleaned up [ 418.885004][ T7666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 419.844394][ T7685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 420.150237][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 420.332175][ T7689] syz.4.691: attempt to access beyond end of device [ 420.332175][ T7689] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 420.450442][ T7694] tmpfs: Unknown parameter 'quota' [ 420.757799][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 420.757814][ T26] audit: type=1326 audit(1790276472.522:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.045944][ T26] audit: type=1326 audit(1790276472.575:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.120582][ T26] audit: type=1326 audit(1790276472.585:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.145074][ T26] audit: type=1326 audit(1790276472.606:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.230446][ T26] audit: type=1326 audit(1790276472.617:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.261993][ T26] audit: type=1326 audit(1790276472.627:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.286482][ T26] audit: type=1326 audit(1790276472.627:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.319720][ T26] audit: type=1326 audit(1790276472.638:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.440719][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 421.464011][ T26] audit: type=1326 audit(1790276472.669:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 421.509911][ T26] audit: type=1326 audit(1790276472.690:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7690 comm="syz.3.692" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff22bd9e159 code=0x7ffc0000 [ 422.494512][ T7714] binder: 7711:7714 ioctl c0306201 0 returned -14 [ 422.512450][ T7714] rdma_rxe: rxe_register_device failed with error -23 [ 422.519920][ T7714] rdma_rxe: failed to add lo [ 425.643558][ T7750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.891304][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 425.891389][ T26] audit: type=1326 audit(1790276477.898:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.3.707" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22bd9e159 code=0x0 [ 427.521673][ T7769] loop2: detected capacity change from 0 to 512 [ 428.825458][ T7769] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 428.844682][ T7775] netlink: 36 bytes leftover after parsing attributes in process `syz.4.711'. [ 428.940384][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.947086][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 428.995222][ T7769] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 429.010395][ T7769] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.138939][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.718'. [ 431.163655][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.710'. [ 431.334872][ T7806] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 432.768996][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 432.804680][ T7820] xt_CT: No such helper "snmp" [ 433.827524][ T7834] loop4: detected capacity change from 0 to 512 [ 433.934499][ T7834] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 434.042127][ T7834] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 434.059519][ T7834] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.208084][ T7839] xt_CT: No such helper "snmp" [ 434.252463][ T7842] xt_CT: No such helper "snmp" [ 436.522761][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 436.549268][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 436.633823][ T7869] ceph: No mds server is up or the cluster is laggy [ 436.654260][ T7872] loop2: detected capacity change from 0 to 512 [ 436.922895][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 436.928994][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 436.937768][ T7872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 436.997640][ T7872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 437.052802][ T7872] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.033676][ T7883] xt_CT: No such helper "snmp" [ 438.092225][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 438.104965][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 439.155641][ T7902] xt_CT: No such helper "snmp" [ 439.165548][ T7898] xt_CT: No such helper "snmp" [ 439.182240][ T7895] xt_CT: No such helper "snmp" [ 439.468489][ T7923] loop2: detected capacity change from 0 to 512 [ 439.499311][ T7923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 439.625759][ T7923] EXT4-fs (loop2): 1 truncate cleaned up [ 439.631909][ T7923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 441.279388][ T7921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 441.367193][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 441.494339][ T7921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.609854][ T7941] loop2: detected capacity change from 0 to 512 [ 441.674921][ T7941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 441.799538][ T7941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 441.850831][ T7941] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.010938][ T7948] xt_CT: No such helper "snmp" [ 444.894813][ T7971] xt_CT: No such helper "snmp" [ 444.946855][ T7976] xt_CT: No such helper "snmp" [ 446.248984][ T7998] xt_CT: No such helper "snmp" [ 448.549407][ T8014] xt_CT: No such helper "snmp" [ 448.565000][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 449.901512][ T8030] xt_CT: No such helper "snmp" [ 450.135461][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'. [ 450.220012][ T8037] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 450.361609][ T8038] xt_CT: No such helper "snmp" [ 451.171155][ T8046] xt_CT: No such helper "snmp" [ 451.811312][ T8056] xt_CT: No such helper "snmp" [ 452.309790][ T8071] loop4: detected capacity change from 0 to 512 [ 452.332486][ T8071] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 452.507902][ T8071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 452.604911][ T8071] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.452992][ T8084] xt_CT: No such helper "snmp" [ 453.483547][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 453.534052][ T8078] device macsec0 entered promiscuous mode [ 456.448965][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 456.478357][ T8100] xt_CT: No such helper "snmp" [ 459.577027][ T8118] xt_CT: No such helper "snmp" [ 460.613124][ T8147] syz.2.794: attempt to access beyond end of device [ 460.613124][ T8147] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 460.628823][ T8129] xt_CT: No such helper "snmp" [ 463.218383][ T8144] xt_CT: No such helper "snmp" [ 466.608588][ T8184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.087335][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 467.507300][ T8178] xt_CT: No such helper "snmp" [ 468.171594][ T8181] team0: Port device team_slave_0 removed [ 469.737384][ T8208] xt_CT: No such helper "snmp" [ 469.774354][ T8215] xt_CT: No such helper "snmp" [ 469.996285][ T8222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 470.072866][ T8222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 470.309949][ T8230] xt_CT: No such helper "snmp" [ 471.592336][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 475.368144][ T8298] using random self ethernet address [ 475.386113][ T8298] using random host ethernet address [ 475.612646][ T8299] xt_CT: No such helper "snmp" [ 475.678342][ T8289] xt_CT: No such helper "snmp" [ 475.779138][ T8308] xt_CT: No such helper "snmp" [ 477.249243][ T8323] syz.1.826: attempt to access beyond end of device [ 477.249243][ T8323] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 477.571354][ T8332] tmpfs: Unknown parameter 'quota' [ 482.862966][ T8379] xt_CT: No such helper "snmp" [ 484.105873][ T8388] xt_CT: No such helper "snmp" [ 487.011674][ T8407] ceph: No mds server is up or the cluster is laggy [ 487.223586][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 487.462894][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.471053][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 487.745939][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 488.098169][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 488.120087][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 489.530232][ T8445] device-mapper: ioctl: Empty message received. [ 489.784667][ T8442] Bluetooth: ISO socket layer initialized [ 491.205962][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 491.261898][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 491.370927][ T8462] ceph: No mds server is up or the cluster is laggy [ 491.430453][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 491.540882][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 491.914867][ T4345] libceph: connect (1)[c::]:6789 error -101 [ 491.920946][ T4345] libceph: mon0 (1)[c::]:6789 connect error [ 493.831071][ T8478] netlink: 36 bytes leftover after parsing attributes in process `syz.3.857'. [ 495.471778][ T33] libceph: connect (1)[c::]:6789 error -101 [ 495.482348][ T8493] ceph: No mds server is up or the cluster is laggy [ 495.514688][ T33] libceph: mon0 (1)[c::]:6789 connect error [ 495.927047][ T33] libceph: connect (1)[c::]:6789 error -101 [ 495.933122][ T33] libceph: mon0 (1)[c::]:6789 connect error [ 497.607873][ T8505] xt_CT: No such helper "snmp" [ 497.708052][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 499.243666][ T8525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.463092][ T8517] team0: Port device team_slave_0 removed [ 500.425099][ T8589] ceph: No mds server is up or the cluster is laggy [ 500.441927][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 500.450865][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 501.057160][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 501.106197][ T8602] tipc: Enabling of bearer rejected, failed to enable media [ 501.421195][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 501.724556][ T8611] futex_wake_op: syz.1.871 tries to shift op by 144; fix this program [ 503.487858][ T8279] libceph: connect (1)[c::]:6789 error -101 [ 503.506061][ T8638] ceph: No mds server is up or the cluster is laggy [ 503.534770][ T8279] libceph: mon0 (1)[c::]:6789 connect error [ 503.822227][ T8643] device-mapper: ioctl: Empty message received. [ 503.890975][ T8634] xt_CT: No such helper "snmp" [ 505.912233][ T8670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.995570][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 509.020904][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 509.027434][ T8683] ceph: No mds server is up or the cluster is laggy [ 510.600387][ T8702] xt_CT: No such helper "snmp" [ 513.470255][ T8721] usb0: HOST MAC ca:fa:45:34:25:6d [ 513.583560][ T8721] usb0: MAC 4a:32:30:ce:bc:52 [ 514.023421][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 514.030384][ T4315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 514.075683][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 514.170657][ T8745] ceph: No mds server is up or the cluster is laggy [ 514.270390][ T4315] usb 1-1: Dual-Role OTG device on HNP port [ 515.495058][ T4315] usb 1-1: New USB device found, idVendor=0000, idProduct=0104, bcdDevice= 6.01 [ 515.660090][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.703084][ T4319] libceph: connect (1)[c::]:6789 error -101 [ 515.710448][ T4319] libceph: mon0 (1)[c::]:6789 connect error [ 516.054820][ T4315] cdc_ncm 1-1:1.2: MAC-Address: ca:fa:45:34:25:6d [ 516.198759][ T4315] cdc_ncm 1-1:1.2 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), ca:fa:45:34:25:6d [ 517.620822][ T8771] syz.0.902: attempt to access beyond end of device [ 517.620822][ T8771] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 518.078357][ T8783] syz.0.906: attempt to access beyond end of device [ 518.078357][ T8783] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 524.638337][ T8825] syz.1.916: attempt to access beyond end of device [ 524.638337][ T8825] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 524.818981][ T8827] tmpfs: Unknown parameter 'quota' [ 526.496788][ T8831] syz.3.917: attempt to access beyond end of device [ 526.496788][ T8831] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 528.325084][ T8835] syz.1.919: attempt to access beyond end of device [ 528.325084][ T8835] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 528.481701][ T8836] tmpfs: Unknown parameter 'quota' [ 537.367232][ T8891] syz.2.929: attempt to access beyond end of device [ 537.367232][ T8891] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 537.615697][ T8899] futex_wake_op: syz.3.931 tries to shift op by 144; fix this program [ 538.606298][ T8904] syz.2.934: attempt to access beyond end of device [ 538.606298][ T8904] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 539.558630][ T8920] tmpfs: Unknown parameter 'quota' [ 539.903744][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 542.176858][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.188328][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.197377][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.205946][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.214198][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 542.225461][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.744501][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.791322][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.806961][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.817483][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.851000][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 543.859493][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.888556][ T8576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.049026][ T8923] lo speed is unknown, defaulting to 1000 [ 545.083739][ T8923] lo speed is unknown, defaulting to 1000 [ 545.195033][ T8576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.335031][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 546.338491][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 546.347612][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 546.389561][ T8964] syz.2.945: attempt to access beyond end of device [ 546.389561][ T8964] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 546.692369][ T8576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.779382][ T8976] syz.1.951: attempt to access beyond end of device [ 546.779382][ T8976] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 547.454478][ T8987] tmpfs: Unknown parameter 'quota' [ 548.328196][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 549.774869][ T8992] xt_CT: No such helper "snmp" [ 550.123904][ T8576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.231348][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 550.579567][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 552.890154][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 553.015305][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 553.172878][ T9026] syz.2.958: attempt to access beyond end of device [ 553.172878][ T9026] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 554.736694][ T9046] xt_CT: No such helper "snmp" [ 555.167624][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.174929][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.269807][ T8923] device bridge_slave_0 entered promiscuous mode [ 555.402194][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.434587][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.507838][ T8923] device bridge_slave_1 entered promiscuous mode [ 555.581011][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.600833][ T9069] xt_CT: No such helper "snmp" [ 555.649309][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.593488][ T9094] syz.4.970: attempt to access beyond end of device [ 557.593488][ T9094] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 557.640727][ T8923] team0: Port device team_slave_0 added [ 557.664934][ T8923] team0: Port device team_slave_1 added [ 557.713291][ T9099] tmpfs: Unknown parameter 'quota' [ 558.163152][ T9109] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'. [ 558.443194][ T9109] netlink: 84 bytes leftover after parsing attributes in process `syz.4.973'. [ 558.538626][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.546328][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.585065][ T8923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.703333][ T8923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.723030][ T8923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.280985][ T8923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.517886][ T9117] xt_CT: No such helper "snmp" [ 560.398977][ T8923] device hsr_slave_0 entered promiscuous mode [ 560.420160][ T9137] fuse: Bad value for 'fd' [ 560.429281][ T8923] device hsr_slave_1 entered promiscuous mode [ 560.438591][ T8923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.475387][ T8923] Cannot create hsr debugfs directory [ 560.882675][ T9155] zram0: detected capacity change from 0 to 65536 [ 561.666345][ T9145] xt_CT: No such helper "snmp" [ 564.393036][ T9172] xt_CT: No such helper "snmp" [ 566.064965][ T9196] xt_CT: No such helper "snmp" [ 566.225048][ T9205] syz.3.991: attempt to access beyond end of device [ 566.225048][ T9205] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 566.294989][ T8923] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 566.374966][ T9208] tmpfs: Unknown parameter 'quota' [ 566.638052][ T8923] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 568.272219][ T9212] 9pnet_virtio: no channels available for device syz [ 568.283282][ T8923] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 569.239837][ T8923] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 569.437321][ T9221] syz.1.986: attempt to access beyond end of device [ 569.437321][ T9221] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 569.491616][ T8576] device hsr_slave_0 left promiscuous mode [ 569.503109][ T9224] syz.2.995: attempt to access beyond end of device [ 569.503109][ T9224] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 569.521117][ T8576] device hsr_slave_1 left promiscuous mode [ 569.591207][ T9229] tmpfs: Unknown parameter 'quota' [ 569.624134][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.982327][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.072247][ T9238] tmpfs: Unknown parameter 'quota' [ 573.234358][ T9230] xt_CT: No such helper "snmp" [ 573.324671][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.491315][ T9226] xt_CT: No such helper "snmp" [ 573.577244][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.587832][ T8576] device bridge_slave_0 left promiscuous mode [ 573.596648][ T8576] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.758157][ T8576] device veth1_macvtap left promiscuous mode [ 573.791031][ T8576] device veth0_macvtap left promiscuous mode [ 573.816251][ T8576] device veth1_vlan left promiscuous mode [ 573.942498][ T8576] device veth0_vlan left promiscuous mode [ 577.204327][ T8576] team0 (unregistering): Port device team_slave_1 removed [ 577.282158][ T8576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.360302][ T8576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.495419][ T9279] xt_CT: No such helper "snmp" [ 577.798931][ T8576] bond0 (unregistering): Released all slaves [ 578.117317][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.154818][ T9287] syz.1.1003: attempt to access beyond end of device [ 578.154818][ T9287] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 578.325932][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 578.679949][ T9294] ceph: No mds server is up or the cluster is laggy [ 578.689722][ T33] libceph: connect (1)[c::]:6789 error -101 [ 579.827503][ T33] libceph: mon0 (1)[c::]:6789 connect error [ 580.501299][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 580.528501][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.534592][ T9292] tmpfs: Unknown parameter 'quota' [ 580.669630][ T9302] kAFS: No cell specified [ 582.141772][ T33] libceph: connect (1)[c::]:6789 error -101 [ 582.198768][ T33] libceph: mon0 (1)[c::]:6789 connect error [ 582.359120][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 582.389227][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.403667][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 582.519964][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.756197][ T4261] libceph: connect (1)[c::]:6789 error -101 [ 583.077614][ T4261] libceph: mon0 (1)[c::]:6789 connect error [ 583.082124][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.090921][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.309491][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 583.322992][ T9306] syz.3.1007: attempt to access beyond end of device [ 583.322992][ T9306] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 583.374324][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 583.491360][ T9308] tmpfs: Unknown parameter 'quota' [ 585.102893][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 585.254045][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.261244][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.269251][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.307642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.317171][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.328463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.338588][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.347946][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.357093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.365979][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.374898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.383516][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.392131][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.480072][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.027410][ T9332] syz.4.1013: attempt to access beyond end of device [ 588.027410][ T9332] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 588.204856][ T9335] tmpfs: Unknown parameter 'quota' [ 589.046305][ T9345] xt_CT: No such helper "snmp" [ 589.606198][ T9338] xt_CT: No such helper "snmp" [ 590.136333][ T9362] syz.4.1018: attempt to access beyond end of device [ 590.136333][ T9362] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 591.035147][ T9373] syz.1.1020: attempt to access beyond end of device [ 591.035147][ T9373] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 593.291727][ T9381] tmpfs: Unknown parameter 'quota' [ 593.503859][ T9388] syz.2.1024: attempt to access beyond end of device [ 593.503859][ T9388] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 596.806873][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 596.822825][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 596.831991][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 596.841474][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 596.849775][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 596.857272][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 597.029633][ T9405] xt_CT: No such helper "snmp" [ 597.113298][ T9409] lo speed is unknown, defaulting to 1000 [ 597.143595][ T9409] lo speed is unknown, defaulting to 1000 [ 598.307005][ T9438] syz.2.1034: attempt to access beyond end of device [ 598.307005][ T9438] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 598.948147][ T4287] Bluetooth: hci5: command 0x0409 tx timeout [ 599.034571][ T9447] tmpfs: Unknown parameter 'quota' [ 601.079696][ T4287] Bluetooth: hci5: command 0x041b tx timeout [ 602.653325][ T9310] libceph: connect (1)[c::]:6789 error -101 [ 602.676407][ T9310] libceph: mon0 (1)[c::]:6789 connect error [ 603.019212][ T9440] ceph: No mds server is up or the cluster is laggy [ 603.167607][ T4287] Bluetooth: hci5: command 0x040f tx timeout [ 604.030673][ T9456] syz.1.1035: attempt to access beyond end of device [ 604.030673][ T9456] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 604.223227][ T9459] tmpfs: Unknown parameter 'quota' [ 604.493160][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 604.499531][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 605.100743][ T4287] Bluetooth: hci5: command 0x0419 tx timeout [ 606.201064][ T9466] syz.3.1037: attempt to access beyond end of device [ 606.201064][ T9466] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 608.291954][ T9471] tmpfs: Unknown parameter 'quota' [ 608.936594][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 609.485364][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1039'. [ 610.368282][ T9500] 9pnet_virtio: no channels available for device syz [ 611.429303][ T9485] xt_CT: No such helper "snmp" [ 613.074646][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1045'. [ 613.671193][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 613.687867][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 613.793983][ T9526] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1045'. [ 613.969487][ T9528] ceph: No mds server is up or the cluster is laggy [ 614.007304][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 614.600819][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 614.828848][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.594996][ T4320] libceph: connect (1)[c::]:6789 error -101 [ 615.610080][ T4320] libceph: mon0 (1)[c::]:6789 connect error [ 615.684814][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.984714][ T9409] device bridge_slave_0 entered promiscuous mode [ 617.393423][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.425083][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.436087][ T9409] device bridge_slave_1 entered promiscuous mode [ 617.515704][ T9554] tmpfs: Unknown parameter 'quota' [ 617.534209][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.556278][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.093341][ T6279] libceph: connect (1)[c::]:6789 error -101 [ 618.143668][ T6279] libceph: mon0 (1)[c::]:6789 connect error [ 618.290012][ T9556] ceph: No mds server is up or the cluster is laggy [ 618.738934][ T4316] libceph: connect (1)[c::]:6789 error -101 [ 618.786808][ T4316] libceph: mon0 (1)[c::]:6789 connect error [ 622.089485][ T9409] team0: Port device team_slave_0 added [ 622.332604][ T9409] team0: Port device team_slave_1 added [ 622.496857][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.757602][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.273021][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.555775][ T9595] 9pnet_virtio: no channels available for device syz [ 625.569630][ T9597] syz.4.1050: attempt to access beyond end of device [ 625.569630][ T9597] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 625.781714][ T9599] tmpfs: Unknown parameter 'quota' [ 627.369354][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.403168][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.547745][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 627.577276][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 627.795985][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.915766][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 627.936721][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 628.728552][ T4393] libceph: connect (1)[c::]:6789 error -101 [ 628.735042][ T4393] libceph: mon0 (1)[c::]:6789 connect error [ 629.255121][ T9610] ceph: No mds server is up or the cluster is laggy [ 629.793070][ T3599] libceph: connect (1)[c::]:6789 error -101 [ 630.057050][ T3599] libceph: mon0 (1)[c::]:6789 connect error [ 631.269951][ T9641] tmpfs: Unknown parameter 'usrquota' [ 633.298548][ T9409] device hsr_slave_0 entered promiscuous mode [ 633.341131][ T9409] device hsr_slave_1 entered promiscuous mode [ 636.970447][ T9660] syz.2.1072: attempt to access beyond end of device [ 636.970447][ T9660] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 637.378675][ T9666] tmpfs: Unknown parameter 'quota' [ 644.119146][ T9704] ceph: No mds server is up or the cluster is laggy [ 644.249473][ T6280] libceph: connect (1)[c::]:6789 error -101 [ 644.463916][ T6280] libceph: mon0 (1)[c::]:6789 connect error [ 644.973694][ T6279] libceph: connect (1)[c::]:6789 error -101 [ 645.009931][ T6279] libceph: mon0 (1)[c::]:6789 connect error [ 645.607160][ T9718] syz.3.1081: attempt to access beyond end of device [ 645.607160][ T9718] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 646.103046][ T9726] tmpfs: Unknown parameter 'quota' [ 648.422019][ T9733] syz.4.1085: attempt to access beyond end of device [ 648.422019][ T9733] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 648.598545][ T9736] tmpfs: Unknown parameter 'quota' [ 651.492913][ T9743] syz.2.1089: attempt to access beyond end of device [ 651.492913][ T9743] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 651.518305][ T9747] syz.1.1088: attempt to access beyond end of device [ 651.518305][ T9747] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 651.695573][ T9750] tmpfs: Unknown parameter 'quota' [ 651.912563][ T9749] tmpfs: Unknown parameter 'quota' [ 653.184569][ T4389] device hsr_slave_0 left promiscuous mode [ 653.247548][ T4389] device hsr_slave_1 left promiscuous mode [ 654.116490][ T9758] input: syz0 as /devices/virtual/input/input12 [ 654.207216][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.238874][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.297486][ T4389] device bridge_slave_1 left promiscuous mode [ 654.360842][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.772962][ T9766] ceph: No mds server is up or the cluster is laggy [ 655.807881][ T6279] libceph: connect (1)[c::]:6789 error -101 [ 655.937591][ T6279] libceph: mon0 (1)[c::]:6789 connect error [ 655.977958][ T4389] device bridge_slave_0 left promiscuous mode [ 656.014647][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.851392][ T6279] libceph: connect (1)[c::]:6789 error -101 [ 656.859902][ T6279] libceph: mon0 (1)[c::]:6789 connect error [ 657.852138][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.887966][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.902307][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.916814][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.925343][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 657.934221][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 658.693315][ T9797] syz.2.1099: attempt to access beyond end of device [ 658.693315][ T9797] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 659.071462][ T9801] tmpfs: Unknown parameter 'quota' [ 659.671383][ T9805] syz.1.1109: attempt to access beyond end of device [ 659.671383][ T9805] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 659.706543][ T9803] syz.3.1101: attempt to access beyond end of device [ 659.706543][ T9803] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 659.775308][ T9809] tmpfs: Unknown parameter 'quota' [ 659.901037][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 661.751760][ T9803] tmpfs: Unknown parameter 'quota' [ 661.956103][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 662.048151][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 662.124183][ T9816] syz.1.1103: attempt to access beyond end of device [ 662.124183][ T9816] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 662.143733][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 662.239978][ T9818] tmpfs: Unknown parameter 'quota' [ 662.251654][ T9822] syz.3.1104: attempt to access beyond end of device [ 662.251654][ T9822] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 662.941561][ T9814] xt_CT: No such helper "snmp" [ 662.976761][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.998328][ T9826] tmpfs: Unknown parameter 'quota' [ 663.019710][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.026376][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.262569][ T9830] ceph: No mds server is up or the cluster is laggy [ 663.278228][ T5445] libceph: connect (1)[c::]:6789 error -101 [ 663.336502][ T5445] libceph: mon0 (1)[c::]:6789 connect error [ 663.497510][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.693627][ T129] libceph: connect (1)[c::]:6789 error -101 [ 663.708774][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 663.939939][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 665.920882][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 666.601512][ T4389] bond0 (unregistering): Released all slaves [ 666.704290][ T9758] netlink: 'syz.4.1091': attribute type 10 has an invalid length. [ 666.729850][ T9758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.743926][ T9758] team0: Port device batadv0 added [ 666.936143][ T9789] lo speed is unknown, defaulting to 1000 [ 667.059648][ T9859] syz.1.1111: attempt to access beyond end of device [ 667.059648][ T9859] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 668.589422][ T9863] tmpfs: Unknown parameter 'quota' [ 668.637276][ T9789] lo speed is unknown, defaulting to 1000 [ 668.923549][ T9878] syz.2.1115: attempt to access beyond end of device [ 668.923549][ T9878] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 668.989637][ T9879] syz.3.1116: attempt to access beyond end of device [ 668.989637][ T9879] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 669.115518][ T9885] tmpfs: Unknown parameter 'quota' [ 669.809499][ T9883] tmpfs: Unknown parameter 'quota' [ 671.446972][ T9880] xt_CT: No such helper "snmp" [ 672.952946][ T9310] libceph: connect (1)[c::]:6789 error -101 [ 673.003847][ T9310] libceph: mon0 (1)[c::]:6789 connect error [ 673.164629][ T6278] libceph: connect (1)[c::]:6789 error -101 [ 673.202720][ T6278] libceph: mon0 (1)[c::]:6789 connect error [ 675.580741][ T9903] ceph: No mds server is up or the cluster is laggy [ 675.695256][ T9915] xt_CT: No such helper "snmp" [ 675.812091][ T9919] syz.3.1123: attempt to access beyond end of device [ 675.812091][ T9919] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 675.872599][ T9789] chnl_net:caif_netlink_parms(): no params data found [ 675.936849][ T9923] syz.2.1125: attempt to access beyond end of device [ 675.936849][ T9923] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 676.007752][ T9927] tmpfs: Unknown parameter 'quota' [ 677.765449][ T9925] syz.4.1126: attempt to access beyond end of device [ 677.765449][ T9925] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 677.873176][ T9929] tmpfs: Unknown parameter 'quota' [ 677.899860][ T9932] tmpfs: Unknown parameter 'quota' [ 679.680385][ T9937] syz.3.1127: attempt to access beyond end of device [ 679.680385][ T9937] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 681.651076][ T9943] tmpfs: Unknown parameter 'quota' [ 683.349811][ T9789] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.863112][ T9789] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.871890][ T9789] device bridge_slave_0 entered promiscuous mode [ 683.881144][ T9789] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.250664][ T9789] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.262819][ T9789] device bridge_slave_1 entered promiscuous mode [ 684.309517][ T4389] device hsr_slave_0 left promiscuous mode [ 684.376702][ T4389] device hsr_slave_1 left promiscuous mode [ 684.411422][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 684.434494][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 684.457414][ T4389] device bridge_slave_1 left promiscuous mode [ 685.535125][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.703962][ T4389] device bridge_slave_0 left promiscuous mode [ 685.721183][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.638277][ T8279] libceph: connect (1)[c::]:6789 error -101 [ 686.657559][ T8279] libceph: mon0 (1)[c::]:6789 connect error [ 686.733825][ T9973] xt_CT: No such helper "snmp" [ 686.738262][ T9978] syz.1.1124: attempt to access beyond end of device [ 686.738262][ T9978] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 686.799544][ T9968] ceph: No mds server is up or the cluster is laggy [ 686.846556][ T9979] tmpfs: Unknown parameter 'quota' [ 686.906584][ T7] libceph: connect (1)[c::]:6789 error -101 [ 686.912667][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 688.761798][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 688.786441][ T9997] syz.1.1138: attempt to access beyond end of device [ 688.786441][ T9997] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 688.897886][T10000] tmpfs: Unknown parameter 'quota' [ 689.112907][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 689.837675][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.864127][ T9994] xt_CT: No such helper "snmp" [ 689.925041][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.992416][T10005] syz.1.1140: attempt to access beyond end of device [ 689.992416][T10005] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 690.020465][T10007] syz.4.1139: attempt to access beyond end of device [ 690.020465][T10007] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 690.105546][T10008] tmpfs: Unknown parameter 'quota' [ 691.818388][ T4389] bond0 (unregistering): Released all slaves [ 691.959322][T10007] tmpfs: Unknown parameter 'quota' [ 691.982723][ T9789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.006021][ T9789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.138401][ T9789] team0: Port device team_slave_0 added [ 692.170149][T10022] syz.1.1141: attempt to access beyond end of device [ 692.170149][T10022] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 692.174312][ T9789] team0: Port device team_slave_1 added [ 693.084671][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 693.216536][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.251555][T10032] tmpfs: Unknown parameter 'quota' [ 695.661831][ T9789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.878009][ T9789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.898752][ T9789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.983514][ T9789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.124810][T10056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1148'. [ 699.698187][ T9789] device hsr_slave_0 entered promiscuous mode [ 699.749197][ T9789] device hsr_slave_1 entered promiscuous mode [ 699.852803][T10067] Cannot find del_set index 4 as target [ 699.931340][T10068] overlayfs: conflicting options: nfs_export=on,index=off [ 701.701192][T10077] syz.2.1153: attempt to access beyond end of device [ 701.701192][T10077] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 701.763379][T10063] xt_CT: No such helper "snmp" [ 701.794116][T10080] tmpfs: Unknown parameter 'quota' [ 702.389111][T10072] xt_CT: No such helper "snmp" [ 702.754076][ T9789] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 705.675136][ T9789] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 705.753547][ T9789] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 705.898512][ T9789] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.515067][T10119] syz.1.1162: attempt to access beyond end of device [ 707.515067][T10119] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 708.512989][T10114] xt_CT: No such helper "snmp" [ 708.613296][T10136] syz.2.1166: attempt to access beyond end of device [ 708.613296][T10136] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 708.667142][ T9789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.691664][T10137] tmpfs: Unknown parameter 'quota' [ 708.708746][T10124] xt_CT: No such helper "snmp" [ 710.414805][ T9789] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.521221][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.593353][T10145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1165'. [ 710.665255][ T8576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 714.910748][T10163] syz.3.1174: attempt to access beyond end of device [ 714.910748][T10163] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 714.964633][T10166] fuse: Bad value for 'fd' [ 715.866940][T10161] using random self ethernet address [ 715.876113][T10173] tmpfs: Unknown parameter 'quota' [ 717.531853][T10161] using random host ethernet address [ 717.636809][ T9840] usb 1-1: USB disconnect, device number 9 [ 717.716707][ T4287] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.729915][ T4287] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.739767][ T4287] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.759623][ T4287] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.774301][ T4287] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 717.791117][ T4287] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.155495][T10184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 718.522590][T10177] xt_CT: No such helper "snmp" [ 718.549818][ T9840] cdc_ncm 1-1:1.2 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 718.827938][T10189] syz.3.1178: attempt to access beyond end of device [ 718.827938][T10189] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 719.712689][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 719.810542][T10200] tmpfs: Unknown parameter 'quota' [ 720.106002][T10191] xt_CT: No such helper "snmp" [ 721.543548][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.549959][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.721905][ T4288] Bluetooth: hci5: command 0x041b tx timeout [ 723.296311][T10176] lo speed is unknown, defaulting to 1000 [ 723.466468][T10220] fuse: Bad value for 'fd' [ 723.674540][ T4288] Bluetooth: hci5: command 0x040f tx timeout [ 725.656365][ T4288] Bluetooth: hci5: command 0x0419 tx timeout [ 725.888896][T10176] lo speed is unknown, defaulting to 1000 [ 726.867974][T10243] 9pnet_fd: p9_fd_create_tcp (10243): problem connecting socket to 127.0.0.1 [ 727.352779][T10246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 728.029457][T10232] xt_CT: No such helper "snmp" [ 728.472945][ T4389] device hsr_slave_0 left promiscuous mode [ 728.482450][ T4389] device hsr_slave_1 left promiscuous mode [ 728.932328][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.058097][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.106239][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.229669][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.273059][ T4389] device bridge_slave_0 left promiscuous mode [ 729.285798][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.094595][T10261] ceph: No mds server is up or the cluster is laggy [ 730.105022][ T14] libceph: connect (1)[c::]:6789 error -101 [ 730.228819][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 730.841532][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 730.847578][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 730.859380][ T4389] device veth1_macvtap left promiscuous mode [ 730.886730][ T4389] device veth0_macvtap left promiscuous mode [ 730.892883][ T4389] device veth1_vlan left promiscuous mode [ 730.938795][ T4389] device veth0_vlan left promiscuous mode [ 731.269472][T10282] fuse: Bad value for 'fd' [ 732.901902][T10275] xt_CT: No such helper "snmp" [ 733.076762][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 733.097628][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 733.425264][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 733.772537][T10289] ceph: No mds server is up or the cluster is laggy [ 733.819836][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 734.458550][T10302] syz.1.1198: attempt to access beyond end of device [ 734.458550][T10302] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 735.109752][T10304] tmpfs: Unknown parameter 'quota' [ 735.704549][T10318] tmpfs: Unknown parameter 'usrquota' [ 735.927485][T10309] xt_CT: No such helper "snmp" [ 736.461532][T10313] xt_CT: You must specify a L4 protocol and not use inversions on it [ 738.864211][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 738.994460][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 739.127055][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.244114][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.819735][ T4389] bond0 (unregistering): Released all slaves [ 740.136740][T10335] syz.3.1206: attempt to access beyond end of device [ 740.136740][T10335] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 741.367048][T10328] xt_CT: No such helper "snmp" [ 742.841045][T10335] tmpfs: Unknown parameter 'quota' [ 743.056369][T10334] ceph: No mds server is up or the cluster is laggy [ 743.065885][ T14] libceph: connect (1)[c::]:6789 error -101 [ 743.088185][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 743.104369][T10176] chnl_net:caif_netlink_parms(): no params data found [ 743.474553][ T14] libceph: connect (1)[c::]:6789 error -101 [ 743.493992][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 743.802676][T10361] syz.2.1210: attempt to access beyond end of device [ 743.802676][T10361] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 744.074015][T10356] ceph: No mds server is up or the cluster is laggy [ 744.081249][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 744.087326][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 744.116668][T10176] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.138685][T10364] syz.1.1211: attempt to access beyond end of device [ 744.138685][T10364] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 744.207365][T10367] tmpfs: Unknown parameter 'quota' [ 744.427575][T10369] tmpfs: Unknown parameter 'quota' [ 744.932115][ T7] libceph: connect (1)[c::]:6789 error -101 [ 744.932517][T10176] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.947396][T10176] device bridge_slave_0 entered promiscuous mode [ 744.956362][T10176] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.963457][T10176] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.971894][T10176] device bridge_slave_1 entered promiscuous mode [ 744.990892][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 745.081644][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.181714][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.797519][ T129] libceph: connect (1)[c::]:6789 error -101 [ 745.817967][T10387] syz.2.1212: attempt to access beyond end of device [ 745.817967][T10387] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 745.839810][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 746.054326][T10379] ceph: No mds server is up or the cluster is laggy [ 746.131708][T10390] tmpfs: Unknown parameter 'quota' [ 746.193634][ T9840] libceph: connect (1)[c::]:6789 error -101 [ 746.289978][ T9840] libceph: mon0 (1)[c::]:6789 connect error [ 746.370145][T10176] team0: Port device team_slave_0 added [ 746.375425][T10392] xt_CT: No such helper "snmp" [ 746.378010][T10176] team0: Port device team_slave_1 added [ 746.401344][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.409052][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.435770][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.448504][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.466757][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.612654][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.679906][T10401] syz.1.1217: attempt to access beyond end of device [ 746.679906][T10401] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 746.828113][T10406] tmpfs: Unknown parameter 'quota' [ 747.134771][T10176] device hsr_slave_0 entered promiscuous mode [ 747.302681][T10176] device hsr_slave_1 entered promiscuous mode [ 747.432814][T10399] xt_CT: No such helper "snmp" [ 747.472286][T10176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.661821][T10176] Cannot create hsr debugfs directory [ 750.571202][T10425] syz.4.1223: attempt to access beyond end of device [ 750.571202][T10425] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 750.689582][T10427] tmpfs: Unknown parameter 'quota' [ 750.935749][ T6278] libceph: connect (1)[c::]:6789 error -101 [ 750.971235][ T6278] libceph: mon0 (1)[c::]:6789 connect error [ 751.291208][ T6278] libceph: connect (1)[c::]:6789 error -101 [ 751.310408][ T6278] libceph: mon0 (1)[c::]:6789 connect error [ 751.638062][T10432] ceph: No mds server is up or the cluster is laggy [ 751.871099][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 751.877111][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 752.031235][T10436] xt_CT: No such helper "snmp" [ 752.666187][T10447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 753.306399][T10449] syz.1.1227: attempt to access beyond end of device [ 753.306399][T10449] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 753.483032][T10453] tmpfs: Unknown parameter 'quota' [ 754.153766][T10460] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1228'. [ 754.493456][T10468] syz.2.1230: attempt to access beyond end of device [ 754.493456][T10468] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 754.586514][T10469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1229'. [ 755.496903][T10472] tmpfs: Unknown parameter 'quota' [ 755.954079][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 755.962909][T10480] ceph: No mds server is up or the cluster is laggy [ 755.972142][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 757.093741][T10487] ceph: No mds server is up or the cluster is laggy [ 757.100867][ T129] libceph: connect (1)[c::]:6789 error -101 [ 757.107061][ T129] libceph: mon0 (1)[c::]:6789 connect error [ 757.139337][T10497] input: syz0 as /devices/virtual/input/input13 [ 758.888762][T10521] syz.3.1239: attempt to access beyond end of device [ 758.888762][T10521] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 758.954338][T10514] xt_CT: No such helper "snmp" [ 759.055682][T10524] tmpfs: Unknown parameter 'quota' [ 761.737420][T10176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 761.844533][T10176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 761.952177][T10176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 761.972214][T10176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 762.311903][ T4389] device hsr_slave_0 left promiscuous mode [ 762.330595][ T4389] device hsr_slave_1 left promiscuous mode [ 762.358862][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.387534][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.460490][ T4389] device bridge_slave_1 left promiscuous mode [ 762.495190][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.540582][ T4389] device bridge_slave_0 left promiscuous mode [ 762.547629][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.207360][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 763.379186][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 763.531108][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.703958][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.303612][ T4389] bond0 (unregistering): Released all slaves [ 764.459228][T10176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.523423][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 764.571365][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 764.590818][T10176] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.679432][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 764.721668][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 764.752005][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.759203][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.771907][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 764.800053][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 764.864308][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 764.883761][ T8584] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.890854][ T8584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.949510][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 765.007535][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 765.026532][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 765.073279][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 765.086204][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 765.118052][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 765.133938][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 765.158543][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 765.178850][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 765.228887][T10176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.245090][T10176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 765.270240][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 765.292498][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 765.778073][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 765.785714][ T8563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 765.837385][T10176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.666309][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 766.698147][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 766.752966][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 766.789828][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 766.832045][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 766.840339][ T8581] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 766.895104][T10176] device veth0_vlan entered promiscuous mode [ 766.944466][T10176] device veth1_vlan entered promiscuous mode [ 767.029691][T10176] device veth0_macvtap entered promiscuous mode [ 767.055922][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 767.093236][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 767.101712][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 767.119393][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 767.135159][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 767.161309][T10176] device veth1_macvtap entered promiscuous mode [ 767.237032][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.256109][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.266544][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.277227][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.287527][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.298415][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.308522][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.319602][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.331369][T10176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.343344][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.354121][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.368980][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.379783][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.389892][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.400610][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.419266][T10176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.435490][T10176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.455155][T10176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.469312][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 767.498032][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 767.512685][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 767.532776][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 767.574997][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 767.610383][T10176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.626078][T10176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.635658][T10176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.646487][T10176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.582816][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 768.596074][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 768.608600][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 768.623539][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 768.631429][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 768.639688][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 768.733766][ T8579] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.774386][T10600] lo speed is unknown, defaulting to 1000 [ 768.782293][T10600] lo speed is unknown, defaulting to 1000 [ 768.888121][ T8579] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.039719][T10600] chnl_net:caif_netlink_parms(): no params data found [ 769.090423][ T8579] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.177789][ T8579] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.208209][T10600] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.215408][T10600] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.232675][T10600] device bridge_slave_0 entered promiscuous mode [ 769.244969][T10600] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.258378][T10600] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.268849][T10600] device bridge_slave_1 entered promiscuous mode [ 769.308394][T10600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.329725][T10600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.377578][T10600] team0: Port device team_slave_0 added [ 769.424489][T10600] team0: Port device team_slave_1 added [ 769.492200][T10600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.518470][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.551920][T10600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.572789][T10600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.584291][T10600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.614311][T10600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.706322][T10600] device hsr_slave_0 entered promiscuous mode [ 769.716321][T10600] device hsr_slave_1 entered promiscuous mode [ 770.617185][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 770.655458][ T8579] device hsr_slave_0 left promiscuous mode [ 770.662077][ T8579] device hsr_slave_1 left promiscuous mode [ 770.675106][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.682559][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.697571][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.707712][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.724841][ T8579] device bridge_slave_1 left promiscuous mode [ 770.731113][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.748464][ T8579] device bridge_slave_0 left promiscuous mode [ 770.754849][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.807426][ T8579] device veth1_macvtap left promiscuous mode [ 770.813708][ T8579] device veth0_macvtap left promiscuous mode [ 770.829172][ T8579] device veth1_vlan left promiscuous mode [ 770.835032][ T8579] device veth0_vlan left promiscuous mode [ 771.505593][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 771.564097][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 771.616503][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.676015][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.045670][ T8579] bond0 (unregistering): Released all slaves [ 772.149789][T10600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 772.166354][T10600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 772.179416][T10600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 772.200657][T10600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 772.332874][T10600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.357676][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 772.366366][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 772.377215][T10600] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.386783][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 772.396016][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 772.404698][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.411830][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.426664][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 772.435212][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 772.444134][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 772.452864][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.459994][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.467968][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 772.480324][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 772.510895][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 772.532001][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 772.542967][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 772.559522][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 772.568112][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 772.576732][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 772.585401][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 772.598566][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 772.607084][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 772.615924][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 772.626289][T10600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.813439][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.821452][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.834229][T10600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.043690][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 773.054599][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 773.076313][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 773.087840][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 773.097002][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 773.107811][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 773.118332][T10600] device veth0_vlan entered promiscuous mode [ 773.130815][T10600] device veth1_vlan entered promiscuous mode [ 773.152082][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 773.161428][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 773.172520][T10600] device veth0_macvtap entered promiscuous mode [ 773.183192][T10600] device veth1_macvtap entered promiscuous mode [ 773.198083][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.209251][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.219558][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.230199][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.240125][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.250679][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.260632][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 773.271297][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.282440][T10600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.293046][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.303924][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.315026][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.325752][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.336660][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.347471][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.358097][T10600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 773.369832][T10600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 773.380779][T10600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.390578][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 773.399492][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 773.407445][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 773.416518][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 773.425979][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 773.435064][ T8579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 773.449606][T10600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.458708][T10600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.468934][T10600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.478212][T10600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.555435][ T8579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.566803][ T8579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.577095][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 773.596460][ T8584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 773.605181][ T8584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 773.614920][ T8584] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 773.712107][T10677] syz.2.1251: attempt to access beyond end of device [ 773.712107][T10677] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 774.080132][T10684] tmpfs: Unknown parameter 'quota' [ 774.590251][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 776.570153][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 780.070628][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 780.078663][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 781.123932][ T14] libceph: connect (1)[c::]:6789 error -101 [ 781.129999][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 781.136365][T10716] ceph: No mds server is up or the cluster is laggy [ 781.248142][T10725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1243'. [ 782.169750][ T4398] libceph: connect (1)[c::]:6789 error -101 [ 782.176095][ T4398] libceph: mon0 (1)[c::]:6789 connect error [ 782.236293][T10731] syz.5.1246: attempt to access beyond end of device [ 782.236293][T10731] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 782.335878][T10735] syz.2.1247: attempt to access beyond end of device [ 782.335878][T10735] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 782.402420][T10736] tmpfs: Unknown parameter 'quota' [ 783.087808][T10737] tmpfs: Unknown parameter 'quota' [ 786.996645][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.004407][T10782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.024886][T10782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.032516][T10782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.855325][T10782] team0: Port device batadv0 removed [ 792.072839][ T26] audit: type=1800 audit(1790276863.349:305): pid=10798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1265" name="c_srate" dev="configfs" ino=54958 res=0 errno=0 [ 792.472809][T10804] syz.1.1266: attempt to access beyond end of device [ 792.472809][T10804] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 792.588857][T10809] tmpfs: Unknown parameter 'quota' [ 795.627749][T10825] syz.4.1270: attempt to access beyond end of device [ 795.627749][T10825] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 795.994745][T10825] tmpfs: Unknown parameter 'quota' [ 796.717629][T10836] syz.1.1271: attempt to access beyond end of device [ 796.717629][T10836] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 796.948642][T10839] syz.4.1273: attempt to access beyond end of device [ 796.948642][T10839] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 797.059425][T10838] tmpfs: Unknown parameter 'quota' [ 797.358269][T10847] tmpfs: Unknown parameter 'quota' [ 799.649173][T10860] syz.1.1278: attempt to access beyond end of device [ 799.649173][T10860] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 799.824579][T10866] tmpfs: Unknown parameter 'quota' [ 801.309592][T10883] syz.4.1281: attempt to access beyond end of device [ 801.309592][T10883] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 801.385521][T10884] Cannot find set identified by id 0 to match [ 801.627198][T10886] tmpfs: Unknown parameter 'quota' [ 802.197076][T10891] syz.3.1283: attempt to access beyond end of device [ 802.197076][T10891] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 802.363826][T10893] tmpfs: Unknown parameter 'quota' [ 803.533423][T10901] FAULT_INJECTION: forcing a failure. [ 803.533423][T10901] name failslab, interval 1, probability 0, space 0, times 0 [ 803.546334][T10901] CPU: 1 PID: 10901 Comm: syz.5.1285 Not tainted syzkaller #0 [ 803.553812][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.563880][T10901] Call Trace: [ 803.567168][T10901] [ 803.570103][T10901] dump_stack_lvl+0x188/0x24e [ 803.574828][T10901] ? show_regs_print_info+0x12/0x12 [ 803.580037][T10901] ? load_image+0x410/0x410 [ 803.584579][T10901] ? __lock_acquire+0x7c40/0x7c40 [ 803.589703][T10901] ? memset+0x1e/0x40 [ 803.593763][T10901] should_fail_ex+0x390/0x4c0 [ 803.598581][T10901] should_failslab+0x5/0x20 [ 803.603152][T10901] slab_pre_alloc_hook+0x59/0x300 [ 803.608252][T10901] kmem_cache_alloc+0x56/0x2f0 [ 803.613025][T10901] ? security_inode_alloc+0x30/0x110 [ 803.618384][T10901] security_inode_alloc+0x30/0x110 [ 803.623513][T10901] inode_init_always+0x910/0xc90 [ 803.628519][T10901] new_inode_pseudo+0x91/0x1c0 [ 803.633309][T10901] alloc_anon_inode+0x1b/0x300 [ 803.638152][T10901] __anon_inode_getfile+0x141/0x350 [ 803.643436][T10901] ? anon_inode_getfile+0x1a0/0x1a0 [ 803.648647][T10901] ? __might_fault+0xa6/0x120 [ 803.653397][T10901] ? __might_fault+0xc2/0x120 [ 803.658114][T10901] ? __might_fault+0xa6/0x120 [ 803.662810][T10901] io_uring_create+0x8ae/0xd6c [ 803.667630][T10901] __x64_sys_io_uring_setup+0x21b/0x230 [ 803.673282][T10901] ? __ia32_sys_io_uring_enter+0xf0/0xf0 [ 803.678972][T10901] ? lockdep_hardirqs_on+0x94/0x140 [ 803.684202][T10901] do_syscall_64+0x4c/0xa0 [ 803.688640][T10901] ? clear_bhb_loop+0x60/0xb0 [ 803.693418][T10901] ? clear_bhb_loop+0x60/0xb0 [ 803.698122][T10901] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.704138][T10901] RIP: 0033:0x7f6c62d9e159 [ 803.708576][T10901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.728260][T10901] RSP: 002b:00007f6c63c5c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 803.736694][T10901] RAX: ffffffffffffffda RBX: 00007f6c63026090 RCX: 00007f6c62d9e159 [ 803.744690][T10901] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000bbc [ 803.752677][T10901] RBP: 00007f6c62e3506b R08: 0000000000000000 R09: 0000000000000000 [ 803.760649][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.768621][T10901] R13: 00007f6c63026128 R14: 00007f6c63026090 R15: 00007ffdb3313c38 [ 803.776597][T10901] [ 805.792037][T10914] syz.4.1287: attempt to access beyond end of device [ 805.792037][T10914] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 805.962122][T10918] tmpfs: Unknown parameter 'quota' [ 807.002116][T10933] syz.2.1290: attempt to access beyond end of device [ 807.002116][T10933] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 807.026989][T10931] syz.3.1289: attempt to access beyond end of device [ 807.026989][T10931] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 807.150017][T10936] tmpfs: Unknown parameter 'quota' [ 807.761359][T10940] tmpfs: Unknown parameter 'quota' [ 808.764557][T10956] syz.5.1294: attempt to access beyond end of device [ 808.764557][T10956] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 809.062979][T10961] syz.2.1295: attempt to access beyond end of device [ 809.062979][T10961] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 809.079298][T10959] tmpfs: Unknown parameter 'quota' [ 809.440077][T10964] tmpfs: Unknown parameter 'quota' [ 815.695848][T11003] syz.1.1298: attempt to access beyond end of device [ 815.695848][T11003] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 815.972301][T11004] tmpfs: Unknown parameter 'quota' [ 822.771056][T11023] syz.3.1303: attempt to access beyond end of device [ 822.771056][T11023] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 822.973889][T11032] tmpfs: Unknown parameter 'quota' [ 827.285528][T11047] syz.1.1310: attempt to access beyond end of device [ 827.285528][T11047] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 828.221028][T11053] tmpfs: Unknown parameter 'quota' [ 828.548139][T11051] syz.4.1309: attempt to access beyond end of device [ 828.548139][T11051] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 828.854115][T11063] loop1: detected capacity change from 0 to 1024 [ 829.567125][T11063] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.1314: lblock 2 mapped to illegal pblock 2 (length 1) [ 829.583946][T11063] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 829.592177][T11063] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.1314: lblock 0 mapped to illegal pblock 48 (length 1) [ 829.610527][T11063] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 829.620264][T11063] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.1314: Failed to acquire dquot type 0 [ 829.641737][T11063] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 829.654686][T11063] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.1314: mark_inode_dirty error [ 829.670029][T11063] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 829.680466][T11063] EXT4-fs (loop1): 1 orphan inode deleted [ 829.686267][T11063] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 829.745389][ T8579] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 830.533303][ T8579] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 830.933155][ T8579] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:24: Failed to release dquot type 0 [ 831.550499][ T6320] EXT4-fs (loop1): unmounting filesystem. [ 831.619470][ T6320] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 831.791386][ T6320] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 833.419212][ T6320] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 834.414753][T11097] fuse: Bad value for 'fd' [ 835.383040][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1306'. [ 835.557044][T11101] syz.1.1315: attempt to access beyond end of device [ 835.557044][T11101] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 835.636112][T11101] tmpfs: Unknown parameter 'quota' [ 838.601343][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.607713][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.287931][T11114] syz.3.1319: attempt to access beyond end of device [ 839.287931][T11114] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 841.723170][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 841.737645][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 841.747517][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 841.756723][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 841.766298][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 841.774307][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.872713][T11137] lo speed is unknown, defaulting to 1000 [ 841.931287][T11137] lo speed is unknown, defaulting to 1000 [ 842.494510][T11150] NILFS (nullb0): couldn't find nilfs on the device [ 843.775031][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 845.360299][T11159] syz.2.1328: attempt to access beyond end of device [ 845.360299][T11159] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 845.747321][T11162] tmpfs: Unknown parameter 'quota' [ 845.754847][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 846.319949][ T8581] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.568398][T11181] fuse: Bad value for 'fd' [ 847.736162][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 847.764513][T11183] fuse: Bad value for 'fd' [ 849.717526][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 850.691645][ T8581] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.707903][T11192] syz.4.1331: attempt to access beyond end of device [ 850.707903][T11192] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 851.525445][T11137] chnl_net:caif_netlink_parms(): no params data found [ 851.634739][ T8581] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.770891][T11202] fuse: Bad value for 'fd' [ 853.358328][T11207] syz.1.1333: attempt to access beyond end of device [ 853.358328][T11207] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 853.603783][T11209] tmpfs: Unknown parameter 'quota' [ 855.388408][ T8581] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.449444][T11222] syz.3.1334: attempt to access beyond end of device [ 855.449444][T11222] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 855.582139][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.671001][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.830258][T11137] device bridge_slave_0 entered promiscuous mode [ 856.294528][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.305563][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.339571][T11137] device bridge_slave_1 entered promiscuous mode [ 857.653104][T11246] overlayfs: './file1' not a directory [ 857.726726][T11251] syz.2.1339: attempt to access beyond end of device [ 857.726726][T11251] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 857.771807][T11137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.781935][T11250] syz.4.1342: attempt to access beyond end of device [ 857.781935][T11250] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 857.804449][T11137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.011369][T11250] tmpfs: Unknown parameter 'quota' [ 859.978193][T11275] syz.2.1344: attempt to access beyond end of device [ 859.978193][T11275] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 861.808963][T11137] team0: Port device team_slave_0 added [ 861.826469][T11137] team0: Port device team_slave_1 added [ 861.927281][T11137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.009510][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.111984][T11287] loop1: detected capacity change from 0 to 64 [ 863.564515][T11289] fuse: Bad value for 'fd' [ 865.111697][T11137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.124927][T11287] hfs: unable to open extent tree [ 865.183296][T11287] hfs: can't find a HFS filesystem on dev loop1 [ 866.356061][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 866.363700][T11137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.379981][T11137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.465460][T11137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.698536][T11304] syz.3.1352: attempt to access beyond end of device [ 866.698536][T11304] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 866.835627][T11301] tipc: Enabling of bearer rejected, failed to enable media [ 867.417677][T11310] loop1: detected capacity change from 0 to 4096 [ 868.191960][T11137] device hsr_slave_0 entered promiscuous mode [ 868.264393][T11137] device hsr_slave_1 entered promiscuous mode [ 868.396173][T11318] fuse: Bad value for 'fd' [ 869.987474][T11137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 870.011895][T11137] Cannot create hsr debugfs directory [ 870.045316][T11315] syz.4.1354: attempt to access beyond end of device [ 870.045316][T11315] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 870.201036][T11324] syz.3.1356: attempt to access beyond end of device [ 870.201036][T11324] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 870.589097][T11324] tmpfs: Unknown parameter 'quota' [ 870.876644][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1353'. [ 872.980193][T11351] syz.3.1360: attempt to access beyond end of device [ 872.980193][T11351] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 873.105002][T11353] syz.4.1359: attempt to access beyond end of device [ 873.105002][T11353] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 873.122007][ T4289] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 874.570560][T11357] tmpfs: Unknown parameter 'quota' [ 875.041574][T11376] syz.1.1365: attempt to access beyond end of device [ 875.041574][T11376] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 876.986087][T11137] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 877.117940][T11385] fuse: Bad value for 'fd' [ 880.196044][T11137] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 880.419603][T11402] syz.1.1371: attempt to access beyond end of device [ 880.419603][T11402] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 880.616241][T11137] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 881.450637][T11137] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 885.848810][ T8581] device hsr_slave_0 left promiscuous mode [ 885.886480][ T8581] device hsr_slave_1 left promiscuous mode [ 885.940571][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.962597][ T8581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.992234][T11441] syz.1.1376: attempt to access beyond end of device [ 885.992234][T11441] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 886.008950][ T8581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.026624][ T8581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.041709][ T8581] device bridge_slave_1 left promiscuous mode [ 886.048002][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.878019][ T8581] device bridge_slave_0 left promiscuous mode [ 886.884418][ T8581] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.091721][ T8581] device veth1_macvtap left promiscuous mode [ 887.108172][ T8581] device veth0_macvtap left promiscuous mode [ 887.114276][ T8581] device veth1_vlan left promiscuous mode [ 887.174615][ T8581] device veth0_vlan left promiscuous mode [ 887.258851][T11448] fuse: Bad value for 'fd' [ 889.165044][T11454] syz.1.1379: attempt to access beyond end of device [ 889.165044][T11454] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 890.231276][T11458] syz.3.1380: attempt to access beyond end of device [ 890.231276][T11458] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 891.068356][T11460] syz.1.1382: attempt to access beyond end of device [ 891.068356][T11460] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 891.546806][T11467] fuse: Bad value for 'fd' [ 897.120277][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.127772][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 897.297978][T11487] syz.4.1388: attempt to access beyond end of device [ 897.297978][T11487] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 897.505209][T11494] fuse: Bad value for 'fd' [ 899.226932][T11488] tmpfs: Unknown parameter 'quota' [ 900.247259][T11500] syz.4.1388 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 900.257605][T11500] CPU: 0 PID: 11500 Comm: syz.4.1388 Not tainted syzkaller #0 [ 900.265057][T11500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.275119][T11500] Call Trace: [ 900.278399][T11500] [ 900.281322][T11500] dump_stack_lvl+0x188/0x24e [ 900.285988][T11500] ? ___ratelimit+0x14e/0x610 [ 900.290799][T11500] ? show_regs_print_info+0x12/0x12 [ 900.296019][T11500] ? load_image+0x410/0x410 [ 900.300519][T11500] ? ___ratelimit+0x474/0x610 [ 900.305377][T11500] ? radix_tree_cpu_dead+0x160/0x160 [ 900.310827][T11500] dump_header+0xd8/0x820 [ 900.315165][T11500] oom_kill_process+0x361/0x550 [ 900.320103][T11500] out_of_memory+0xe25/0x1220 [ 900.324795][T11500] ? mutex_lock_nested+0x10/0x10 [ 900.329720][T11500] ? unregister_oom_notifier+0x20/0x20 [ 900.335266][T11500] mem_cgroup_out_of_memory+0x2c0/0x390 [ 900.340965][T11500] ? mem_cgroup_oom_trylock+0x210/0x210 [ 900.346531][T11500] ? do_raw_spin_unlock+0x11d/0x230 [ 900.351726][T11500] try_charge_memcg+0xc9d/0x17c0 [ 900.356759][T11500] ? percpu_ref_put+0x180/0x180 [ 900.361625][T11500] ? get_mem_cgroup_from_mm+0x34/0x290 [ 900.367088][T11500] charge_memcg+0x117/0x3b0 [ 900.371580][T11500] ? __mem_cgroup_charge+0x80/0x80 [ 900.376693][T11500] ? get_mem_cgroup_from_mm+0x34/0x290 [ 900.382174][T11500] ? get_mem_cgroup_from_mm+0x34/0x290 [ 900.387630][T11500] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 900.393190][T11500] __mem_cgroup_charge+0x21/0x80 [ 900.398171][T11500] shmem_add_to_page_cache+0x8d7/0x1c90 [ 900.403788][T11500] ? __filemap_get_folio+0x10f/0xde0 [ 900.409079][T11500] ? __filemap_get_folio+0x10f/0xde0 [ 900.414368][T11500] ? put_page+0x270/0x270 [ 900.418704][T11500] ? mark_lock+0x94/0x320 [ 900.423043][T11500] shmem_get_folio_gfp+0x1663/0x35e0 [ 900.428412][T11500] shmem_write_begin+0xee/0x3f0 [ 900.433292][T11500] generic_perform_write+0x2fa/0x5c0 [ 900.438579][T11500] ? generic_file_direct_write+0x330/0x330 [ 900.444391][T11500] ? __file_remove_privs+0x5f0/0x5f0 [ 900.449664][T11500] ? rwsem_write_trylock+0x135/0x1c0 [ 900.455763][T11500] ? clear_nonspinnable+0x60/0x60 [ 900.461520][T11500] ? generic_write_checks_count+0x363/0x440 [ 900.467477][T11500] __generic_file_write_iter+0x148/0x2a0 [ 900.473107][T11500] generic_file_write_iter+0xab/0x2e0 [ 900.478560][T11500] __kernel_write_iter+0x298/0x690 [ 900.483749][T11500] ? vfs_read+0x960/0x960 [ 900.488085][T11500] ? cgroup_freezing+0x296/0x340 [ 900.493119][T11500] ? iov_iter_bvec+0x4a/0x1f0 [ 900.497922][T11500] dump_user_range+0x40a/0x840 [ 900.502759][T11500] ? dump_skip+0x40/0x40 [ 900.507005][T11500] ? dump_emit+0x74/0xe0 [ 900.511255][T11500] ? dump_emit+0xa2/0xe0 [ 900.515500][T11500] ? elf_core_dump+0x2aa9/0x3630 [ 900.520525][T11500] elf_core_dump+0x30ca/0x3630 [ 900.525304][T11500] ? load_elf_binary+0x2820/0x2820 [ 900.530404][T11500] ? dump_vma_snapshot+0xaea/0xe40 [ 900.535508][T11500] ? verify_lock_unused+0x140/0x140 [ 900.540711][T11500] ? __lock_acquire+0x7c40/0x7c40 [ 900.545846][T11500] ? mas_next_entry+0xe03/0xe90 [ 900.550743][T11500] ? rcu_read_lock_any_held+0xb0/0x130 [ 900.556266][T11500] ? 0xffffffffff600000 [ 900.560411][T11500] do_coredump+0x16c1/0x2480 [ 900.565010][T11500] ? nfs_stat_to_errno+0x170/0x170 [ 900.570128][T11500] ? lock_chain_count+0x20/0x20 [ 900.574968][T11500] ? _raw_spin_unlock_irq+0x1f/0x40 [ 900.580240][T11500] ? lockdep_hardirqs_on+0x94/0x140 [ 900.585444][T11500] get_signal+0x1093/0x1340 [ 900.590052][T11500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 900.596042][T11500] arch_do_signal_or_restart+0xc4/0x1310 [ 900.601697][T11500] ? get_sigframe_size+0x10/0x10 [ 900.606711][T11500] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 900.612685][T11500] ? do_user_addr_fault+0x3a5/0xb20 [ 900.617956][T11500] ? exit_to_user_mode_loop+0x3b/0x110 [ 900.623484][T11500] exit_to_user_mode_loop+0x70/0x110 [ 900.628774][T11500] exit_to_user_mode_prepare+0xee/0x180 [ 900.634328][T11500] irqentry_exit_to_user_mode+0x5/0x30 [ 900.639798][T11500] exc_page_fault+0x88/0x100 [ 900.644399][T11500] asm_exc_page_fault+0x22/0x30 [ 900.649347][T11500] RIP: 0033:0x7f0b73053bd0 [ 900.655467][T11500] Code: Unable to access opcode bytes at 0x7f0b73053ba6. [ 900.662679][T11500] RSP: 002b:00007f0b713b6178 EFLAGS: 00010246 [ 900.668753][T11500] RAX: 0000000000000000 RBX: 00007f0b73426180 RCX: 00007f0b7319e159 [ 900.676734][T11500] RDX: 00007f0b713b6180 RSI: 00007f0b713b62b0 RDI: 000000000000000b [ 900.684790][T11500] RBP: 00007f0b7323506b R08: 0000000000000000 R09: 0000000000000000 [ 900.692782][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.700740][T11500] R13: 00007f0b73426218 R14: 00007f0b73426180 R15: 00007fff62803368 [ 900.708731][T11500] [ 900.712421][T11500] memory: usage 307200kB, limit 307200kB, failcnt 29776 [ 900.719446][T11500] memory+swap: usage 432028kB, limit 9007199254740988kB, failcnt 0 [ 900.727395][T11500] kmem: usage 2880kB, limit 9007199254740988kB, failcnt 0 [ 900.734582][T11500] Memory cgroup stats for /syz4: [ 900.735135][T11500] anon 339968 [ 900.735135][T11500] file 311136256 [ 900.735135][T11500] kernel 2949120 [ 900.735135][T11500] kernel_stack 98304 [ 900.735135][T11500] pagetables 499712 [ 900.735135][T11500] sec_pagetables 0 [ 900.735135][T11500] percpu 29248 [ 900.735135][T11500] sock 0 [ 900.735135][T11500] vmalloc 0 [ 900.735135][T11500] shmem 311033856 [ 900.735135][T11500] zswap 0 [ 900.735135][T11500] zswapped 0 [ 900.735135][T11500] file_mapped 219529216 [ 900.735135][T11500] file_dirty 102400 [ 900.735135][T11500] file_writeback 0 [ 900.735135][T11500] swapcached 128061440 [ 900.735135][T11500] anon_thp 0 [ 900.735135][T11500] file_thp 0 [ 900.735135][T11500] shmem_thp 0 [ 900.735135][T11500] inactive_anon 33001472 [ 900.735135][T11500] active_anon 278269952 [ 900.735135][T11500] inactive_file 0 [ 900.735135][T11500] active_file 102400 [ 900.735135][T11500] unevictable 0 [ 900.735135][T11500] slab_reclaimable 1391632 [ 900.735135][T11500] slab_unreclaimable 862248 [ 900.831285][T11500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1287,pid=10919,uid=0 [ 900.848335][T11500] Memory cgroup out of memory: Killed process 10919 (syz.4.1287) total-vm:151548kB, anon-rss:132kB, file-rss:0kB, shmem-rss:98080kB, UID:0 pgtables:228kB oom_score_adj:1000 [ 1001.355164][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1001.362153][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10919/1:b..l P11485/1:b..l P5445/1:b..l [ 1001.373134][ C0] (detected by 0, t=10502 jiffies, g=55989, q=71 ncpus=2) [ 1001.380333][ C0] task:kworker/0:8 state:R running task stack:24880 pid:5445 ppid:2 flags:0x00004000 [ 1001.392660][ C0] Workqueue: events_power_efficient gc_worker [ 1001.398831][ C0] Call Trace: [ 1001.402103][ C0] [ 1001.405023][ C0] __schedule+0x107f/0x4030 [ 1001.409540][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1001.415440][ C0] ? lock_chain_count+0x20/0x20 [ 1001.420293][ C0] ? mark_lock+0x94/0x320 [ 1001.424607][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1001.429891][ C0] preempt_schedule_irq+0xbb/0x160 [ 1001.434984][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1001.440684][ C0] ? rcu_is_watching+0x11/0xa0 [ 1001.445439][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1001.451235][ C0] irqentry_exit+0x63/0x70 [ 1001.455664][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1001.461662][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x196/0x1d0 [ 1001.468520][ C0] Code: f9 4d 85 e4 75 16 e8 79 60 0b f9 eb 15 e8 72 60 0b f9 e8 ed b5 bb 01 4d 85 e4 74 ea e8 63 60 0b f9 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1001.488237][ C0] RSP: 0018:ffffc90003d6fa20 EFLAGS: 00000293 [ 1001.494292][ C0] RAX: ffffffff8876d27d RBX: 0000000000000000 RCX: ffff88802e681e00 [ 1001.502255][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1001.510218][ C0] RBP: ffffc90003d6fad0 R08: ffffffff90b0f2d7 R09: 1ffffffff2161e5a [ 1001.518174][ C0] R10: dffffc0000000000 R11: fffffbfff2161e5b R12: 0000000000000200 [ 1001.526144][ C0] R13: dffffc0000000000 R14: 1ffff920007adf44 R15: dffffc0000000000 [ 1001.534115][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1001.540387][ C0] ? nf_conntrack_hash_check_insert+0x900/0x900 [ 1001.546638][ C0] gc_worker+0x309/0x13d0 [ 1001.550964][ C0] ? gc_worker+0x25b/0x13d0 [ 1001.555451][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1001.560478][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1001.565833][ C0] ? init_conntrack+0x1210/0x1210 [ 1001.570843][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1001.576039][ C0] ? process_one_work+0x7b4/0x1160 [ 1001.581233][ C0] process_one_work+0x8ab/0x1160 [ 1001.586179][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1001.591792][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1001.596814][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1001.602341][ C0] ? wq_worker_running+0x97/0x190 [ 1001.607347][ C0] worker_thread+0xaf5/0x12a0 [ 1001.612038][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1001.617930][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1001.623818][ C0] kthread+0x29d/0x330 [ 1001.627946][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1001.632953][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1001.637635][ C0] ret_from_fork+0x1f/0x30 [ 1001.642107][ C0] [ 1001.645111][ C0] task:syz-executor state:R running task stack:24496 pid:11485 ppid:4258 flags:0x00004000 [ 1001.655879][ C0] Call Trace: [ 1001.659139][ C0] [ 1001.662069][ C0] __schedule+0x107f/0x4030 [ 1001.666568][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1001.672444][ C0] ? lock_chain_count+0x20/0x20 [ 1001.677299][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1001.682567][ C0] preempt_schedule_irq+0xbb/0x160 [ 1001.687659][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1001.693372][ C0] ? rcu_is_watching+0x11/0xa0 [ 1001.698131][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1001.703925][ C0] irqentry_exit+0x63/0x70 [ 1001.708326][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1001.714287][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1001.719564][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1001.739179][ C0] RSP: 0018:ffffc90003b27820 EFLAGS: 00000206 [ 1001.745230][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 247b5b3959291600 [ 1001.753199][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 1001.761241][ C0] RBP: ffffc90003b27940 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 1001.769208][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000001 [ 1001.777186][ C0] R13: 1ffff92000764f10 R14: 0000000000000246 R15: dffffc0000000000 [ 1001.785169][ C0] ? __reset_page_owner+0x190/0x190 [ 1001.790385][ C0] ? seqcount_lockdep_reader_access+0x106/0x190 [ 1001.796645][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1001.802001][ C0] ? __vmalloc_node_range+0x94a/0x1380 [ 1001.807498][ C0] ? kcov_ioctl+0x54/0x610 [ 1001.811999][ C0] ? __se_sys_ioctl+0xfa/0x170 [ 1001.816754][ C0] ? do_syscall_64+0x4c/0xa0 [ 1001.821351][ C0] ? page_ext_get+0x1e/0x2a0 [ 1001.825943][ C0] page_ext_get+0x3a/0x2a0 [ 1001.830361][ C0] ? page_ext_get+0x1e/0x2a0 [ 1001.834939][ C0] __set_page_owner+0x24/0x60 [ 1001.839607][ C0] post_alloc_hook+0x173/0x1a0 [ 1001.844373][ C0] get_page_from_freelist+0x206b/0x2180 [ 1001.849922][ C0] ? __alloc_pages+0x130/0x4f0 [ 1001.854679][ C0] ? __alloc_pages+0x290/0x4f0 [ 1001.859440][ C0] __alloc_pages+0x1ec/0x4f0 [ 1001.864013][ C0] ? zone_statistics+0x170/0x170 [ 1001.868972][ C0] __vmalloc_node_range+0x94a/0x1380 [ 1001.874282][ C0] ? free_vm_area+0x50/0x50 [ 1001.878779][ C0] ? close_fd+0x61/0x90 [ 1001.882940][ C0] ? kcov_remote_reset+0xc0/0xc0 [ 1001.887866][ C0] vmalloc_user+0x70/0x80 [ 1001.892194][ C0] ? kcov_ioctl+0x54/0x610 [ 1001.896593][ C0] kcov_ioctl+0x54/0x610 [ 1001.900818][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1001.905822][ C0] ? security_file_ioctl+0x7c/0xa0 [ 1001.910919][ C0] ? kcov_remote_reset+0xc0/0xc0 [ 1001.915842][ C0] __se_sys_ioctl+0xfa/0x170 [ 1001.920419][ C0] do_syscall_64+0x4c/0xa0 [ 1001.924814][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1001.929474][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1001.934151][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1001.940049][ C0] RIP: 0033:0x7f55bcf9ddeb [ 1001.944456][ C0] RSP: 002b:00007ffcc79a99a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1001.952859][ C0] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f55bcf9ddeb [ 1001.960821][ C0] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dc [ 1001.968776][ C0] RBP: 00007f55bd2263f8 R08: 0000000000000000 R09: 0000000000000000 [ 1001.976751][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.984725][ C0] R13: 0000000000000003 R14: 00007ffcc79a9c58 R15: 0000000000000000 [ 1001.992720][ C0] [ 1001.995732][ C0] task:syz.4.1287 state:R running task stack:17744 pid:10919 ppid:4277 flags:0x00104006 [ 1002.006502][ C0] Call Trace: [ 1002.009780][ C0] [ 1002.012715][ C0] __schedule+0x107f/0x4030 [ 1002.017221][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1002.023116][ C0] ? lock_chain_count+0x20/0x20 [ 1002.027955][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1002.033223][ C0] preempt_schedule_irq+0xbb/0x160 [ 1002.038330][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 1002.044045][ C0] ? rcu_is_watching+0x11/0xa0 [ 1002.048793][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 1002.054598][ C0] irqentry_exit+0x63/0x70 [ 1002.058997][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1002.064959][ C0] RIP: 0010:lock_acquire+0x225/0x4a0 [ 1002.070241][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 1002.089833][ C0] RSP: 0018:ffffc9000403eee0 EFLAGS: 00000206 [ 1002.095918][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d6f82d4b1f70ae00 [ 1002.103889][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c2a20 RDI: ffffffff8adf68a0 [ 1002.111864][ C0] RBP: ffffc9000403efe8 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 1002.119820][ C0] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: 0000000000000000 [ 1002.127776][ C0] R13: 1ffff92000807de8 R14: 0000000000000246 R15: dffffc0000000000 [ 1002.135742][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1002.141118][ C0] mtree_load+0x121/0xa70 [ 1002.145449][ C0] ? mtree_load+0x100/0xa70 [ 1002.150047][ C0] ? mtree_load+0x100/0xa70 [ 1002.154555][ C0] ? mas_alloc_nodes+0x880/0x880 [ 1002.159487][ C0] __get_user_pages+0x268/0xec0 [ 1002.164327][ C0] ? populate_vma_page_range+0x2b0/0x2b0 [ 1002.169954][ C0] ? __up_read+0x2b4/0x6b0 [ 1002.174357][ C0] ? up_write+0x1b6/0x410 [ 1002.178678][ C0] ? up_read+0x20/0x20 [ 1002.182724][ C0] ? get_dump_page+0xee/0x670 [ 1002.187383][ C0] ? down_read_killable+0x1cc/0x340 [ 1002.192583][ C0] get_dump_page+0x18c/0x670 [ 1002.197180][ C0] ? fault_in_readable+0x1f0/0x1f0 [ 1002.202286][ C0] ? cgroup_freezing+0x296/0x340 [ 1002.207209][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 1002.211882][ C0] dump_user_range+0x123/0x840 [ 1002.216660][ C0] ? dump_skip+0x40/0x40 [ 1002.220884][ C0] ? dump_emit+0x74/0xe0 [ 1002.225114][ C0] ? dump_emit+0xa2/0xe0 [ 1002.229334][ C0] ? elf_core_dump+0x2aa9/0x3630 [ 1002.234256][ C0] elf_core_dump+0x30ca/0x3630 [ 1002.239008][ C0] ? load_elf_binary+0x2820/0x2820 [ 1002.244101][ C0] ? dump_vma_snapshot+0xaea/0xe40 [ 1002.249196][ C0] ? verify_lock_unused+0x140/0x140 [ 1002.254380][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1002.259385][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.264598][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 1002.270040][ C0] ? 0xffffffffff600000 [ 1002.274176][ C0] do_coredump+0x16c1/0x2480 [ 1002.278760][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1002.283866][ C0] ? lock_chain_count+0x20/0x20 [ 1002.288719][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.293904][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.299111][ C0] get_signal+0x1093/0x1340 [ 1002.303621][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 1002.309268][ C0] ? get_sigframe_size+0x10/0x10 [ 1002.314188][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1002.320168][ C0] ? do_user_addr_fault+0x3a5/0xb20 [ 1002.325355][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1002.330812][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1002.336086][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1002.341614][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 1002.347058][ C0] exc_page_fault+0x88/0x100 [ 1002.351640][ C0] asm_exc_page_fault+0x22/0x30 [ 1002.356469][ C0] RIP: 0033:0x7f0b73053bd0 [ 1002.360864][ C0] RSP: 002b:00007f0b713d7178 EFLAGS: 00010246 [ 1002.366909][ C0] RAX: 0000000000000000 RBX: 00007f0b73426090 RCX: 00007f0b7319e159 [ 1002.374863][ C0] RDX: 00007f0b713d7180 RSI: 00007f0b713d72b0 RDI: 000000000000000b [ 1002.382832][ C0] RBP: 00007f0b7323506b R08: 0000000000000000 R09: 0000000000000000 [ 1002.390785][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.398749][ C0] R13: 00007f0b73426128 R14: 00007f0b73426090 R15: 00007fff62803368 [ 1002.406708][ C0] [ 1002.409707][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10607 jiffies! g55989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1002.422013][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=53536 [ 1002.429888][ C0] rcu: rcu_preempt kthread starved for 10613 jiffies! g55989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1002.441320][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1002.451285][ C0] rcu: RCU grace-period kthread stack dump: [ 1002.457148][ C0] task:rcu_preempt state:I stack:27920 pid:16 ppid:2 flags:0x00004000 [ 1002.466333][ C0] Call Trace: [ 1002.469591][ C0] [ 1002.472506][ C0] __schedule+0x107f/0x4030 [ 1002.477000][ C0] ? release_firmware_map_entry+0x187/0x187 [ 1002.482877][ C0] schedule+0xb9/0x180 [ 1002.486924][ C0] schedule_timeout+0x184/0x2d0 [ 1002.491755][ C0] ? console_conditional_schedule+0x40/0x40 [ 1002.497640][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1002.503604][ C0] ? update_process_times+0x1b0/0x1b0 [ 1002.508959][ C0] ? prepare_to_swait_event+0x340/0x360 [ 1002.514490][ C0] rcu_gp_fqs_loop+0x303/0x1350 [ 1002.519331][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1002.524163][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1002.530124][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1002.535128][ C0] ? rcu_gp_init+0x14f0/0x14f0 [ 1002.539886][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 1002.544721][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.549901][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.555079][ C0] rcu_gp_kthread+0x99/0x3b0 [ 1002.559650][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1002.564738][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.570618][ C0] ? __kthread_parkme+0x71/0x1c0 [ 1002.575554][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 1002.580559][ C0] kthread+0x29d/0x330 [ 1002.584606][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1002.589702][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1002.594269][ C0] ret_from_fork+0x1f/0x30 [ 1002.598672][ C0] [ 1002.601672][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1002.607971][ C0] CPU: 0 PID: 11500 Comm: syz.4.1388 Not tainted syzkaller #0 [ 1002.615403][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.625456][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 1002.631250][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e d6 27 f7 48 89 df e8 06 9e 28 f7 e8 11 f6 4b f7 fb bf 01 00 00 00 b6 19 1c f7 65 8b 05 87 c9 c5 75 85 c0 74 02 5b c3 e8 94 dd c3 [ 1002.650852][ C0] RSP: 0018:ffffc9000406e010 EFLAGS: 00000282 [ 1002.656928][ C0] RAX: 4054221651f41a00 RBX: ffff888023012050 RCX: 4054221651f41a00 [ 1002.664899][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: 0000000000000001 [ 1002.672870][ C0] RBP: ffffc9000406e230 R08: ffffffff90b0f2e7 R09: 1ffffffff2161e5c [ 1002.680843][ C0] R10: dffffc0000000000 R11: fffffbfff2161e5d R12: dffffc0000000000 [ 1002.688816][ C0] R13: ffffc9000406e140 R14: 00000000000efd8a R15: ffff8880230120d0 [ 1002.696821][ C0] FS: 00007f0b713d56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1002.705766][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1002.712342][ C0] CR2: 00007f63bcfd74d0 CR3: 000000002ef5b000 CR4: 00000000003506f0 [ 1002.720367][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1002.728359][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1002.736318][ C0] Call Trace: [ 1002.739603][ C0] [ 1002.742527][ C0] evict_folios+0x799/0x20e0 [ 1002.747117][ C0] ? folio_inc_gen+0x410/0x410 [ 1002.751883][ C0] ? try_to_inc_max_seq+0x631/0x2a50 [ 1002.757164][ C0] ? clear_mm_walk+0x180/0x180 [ 1002.761915][ C0] ? mark_lock+0x94/0x320 [ 1002.766341][ C0] ? should_run_aging+0x379/0x460 [ 1002.771355][ C0] shrink_lruvec+0xb88/0x3f80 [ 1002.776229][ C0] ? verify_lock_unused+0x140/0x140 [ 1002.781433][ C0] ? mem_cgroup_shrink_node+0x710/0x710 [ 1002.786965][ C0] ? __lock_acquire+0x1465/0x7c40 [ 1002.791990][ C0] ? mem_cgroup_iter+0x36b/0x4a0 [ 1002.796911][ C0] ? mem_cgroup_iter+0x38/0x4a0 [ 1002.801742][ C0] shrink_node+0x68b/0x2890 [ 1002.806266][ C0] do_try_to_free_pages+0x650/0x1980 [ 1002.811549][ C0] ? try_to_free_pages+0xf80/0xf80 [ 1002.816645][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1002.822631][ C0] try_to_free_mem_cgroup_pages+0x335/0x8c0 [ 1002.828536][ C0] ? shrink_lruvec+0x3f80/0x3f80 [ 1002.833481][ C0] ? cgroup_file_notify+0x10c/0x190 [ 1002.838686][ C0] try_charge_memcg+0x5da/0x17c0 [ 1002.843622][ C0] ? percpu_ref_put+0x180/0x180 [ 1002.848465][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1002.853906][ C0] charge_memcg+0x117/0x3b0 [ 1002.858413][ C0] ? __mem_cgroup_charge+0x80/0x80 [ 1002.863507][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1002.868945][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1002.874383][ C0] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 1002.879912][ C0] __mem_cgroup_charge+0x21/0x80 [ 1002.884832][ C0] shmem_add_to_page_cache+0x8d7/0x1c90 [ 1002.890364][ C0] ? __filemap_get_folio+0x10f/0xde0 [ 1002.895658][ C0] ? __filemap_get_folio+0x10f/0xde0 [ 1002.900944][ C0] ? put_page+0x270/0x270 [ 1002.905279][ C0] ? mark_lock+0x94/0x320 [ 1002.909611][ C0] shmem_get_folio_gfp+0x1663/0x35e0 [ 1002.914896][ C0] shmem_write_begin+0xee/0x3f0 [ 1002.919738][ C0] generic_perform_write+0x2fa/0x5c0 [ 1002.925015][ C0] ? generic_file_direct_write+0x330/0x330 [ 1002.930821][ C0] ? __file_remove_privs+0x5f0/0x5f0 [ 1002.936089][ C0] ? clear_nonspinnable+0x60/0x60 [ 1002.941097][ C0] ? generic_write_checks_count+0x363/0x440 [ 1002.946989][ C0] __generic_file_write_iter+0x148/0x2a0 [ 1002.952609][ C0] generic_file_write_iter+0xab/0x2e0 [ 1002.957978][ C0] __kernel_write_iter+0x298/0x690 [ 1002.963080][ C0] ? vfs_read+0x960/0x960 [ 1002.967400][ C0] ? cgroup_freezing+0x296/0x340 [ 1002.972327][ C0] ? iov_iter_bvec+0x4a/0x1f0 [ 1002.977005][ C0] dump_user_range+0x40a/0x840 [ 1002.981757][ C0] ? dump_skip+0x40/0x40 [ 1002.985980][ C0] ? dump_emit+0x74/0xe0 [ 1002.990234][ C0] ? dump_emit+0xa2/0xe0 [ 1002.994459][ C0] ? elf_core_dump+0x2aa9/0x3630 [ 1002.999392][ C0] elf_core_dump+0x30ca/0x3630 [ 1003.004160][ C0] ? load_elf_binary+0x2820/0x2820 [ 1003.009267][ C0] ? dump_vma_snapshot+0xaea/0xe40 [ 1003.014377][ C0] ? verify_lock_unused+0x140/0x140 [ 1003.019564][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1003.024584][ C0] ? mas_next_entry+0xe03/0xe90 [ 1003.029435][ C0] ? rcu_read_lock_any_held+0xb0/0x130 [ 1003.034878][ C0] ? 0xffffffffff600000 [ 1003.039033][ C0] do_coredump+0x16c1/0x2480 [ 1003.043633][ C0] ? nfs_stat_to_errno+0x170/0x170 [ 1003.048737][ C0] ? lock_chain_count+0x20/0x20 [ 1003.053571][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1003.058765][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1003.063945][ C0] get_signal+0x1093/0x1340 [ 1003.068454][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1003.074419][ C0] arch_do_signal_or_restart+0xc4/0x1310 [ 1003.080059][ C0] ? get_sigframe_size+0x10/0x10 [ 1003.085066][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1003.091031][ C0] ? do_user_addr_fault+0x3a5/0xb20 [ 1003.096227][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 1003.101681][ C0] exit_to_user_mode_loop+0x70/0x110 [ 1003.106949][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 1003.112478][ C0] irqentry_exit_to_user_mode+0x5/0x30 [ 1003.117917][ C0] exc_page_fault+0x88/0x100 [ 1003.122491][ C0] asm_exc_page_fault+0x22/0x30 [ 1003.127323][ C0] RIP: 0033:0x7f0b73053bd0 [ 1003.131722][ C0] Code: Unable to access opcode bytes at 0x7f0b73053ba6. [ 1003.138716][ C0] RSP: 002b:00007f0b713b6178 EFLAGS: 00010246 [ 1003.144797][ C0] RAX: 0000000000000000 RBX: 00007f0b73426180 RCX: 00007f0b7319e159 [ 1003.152749][ C0] RDX: 00007f0b713b6180 RSI: 00007f0b713b62b0 RDI: 000000000000000b [ 1003.160700][ C0] RBP: 00007f0b7323506b R08: 0000000000000000 R09: 0000000000000000 [ 1003.168651][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1003.176601][ C0] R13: 00007f0b73426218 R14: 00007f0b73426180 R15: 00007fff62803368 [ 1003.184559][ C0]