last executing test programs: 8m51.92504918s ago: executing program 3 (id=165): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x86}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8m51.59682156s ago: executing program 3 (id=166): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a0, &(0x7f0000000a40)="$eJzs3VFrW2UfAPD/Sdu97da97d7XizlwDjfphi5pV7cVL+YE0auBOu9rbdNSmjalSbe1DOnwAwgiKnjllTeCH0CQfQQRBnovIorophdeqJGkJ1utSVu0a1zy+8Gz8zznSfL/P0tzcp5zDjkBdKxjEXExIroi4lREDERcqa7PpCXW1kv1cXduX5+sliQqlcs/JJGk6+qvlaTLA+nTeiPi5RciXkv+Gre0sjo3USjkl9J2rjy/mCutrJ6enZ+Yyc/kF0ZHR86NnR87Oza8+al9f3esF5775p03P3z+wqdPXv1q/LuTr1fT6k/7No5jd2wcdE/t/6KuOyKWdjdYy3Sl4+lpdSIAAOxIdR//fxHxWG3/fyC6antzAAAAQDupPNMfvyYRFQAAAKBtZWrXwCaZbHotQH9kMtns+jW8D8X+TKFYKj8xXVxemFq/VnYwejLTs4X88Pq1wtV2Um2P1Or32mc2tUcj4lBEvD3QV2tnJ4uFqVYf/AAAAIAOcWDT/P/ngfX5PwAAANBmBludAAAAAHDfmf8DAABA+zP/BwAAgLb24qVL1VKp3/966srK8lzxyumpfGkuO788mZ0sLi1mZ4rFmdpv9s1v93qFYnHxqVhYvpYr50vlXGlldXy+uLxQHq/d13s87z7RAAAAsPcOPXrzyyQi1p7uq5WqfWmfuTq0t0yrEwBapqvVCQAt093qBICWMccHkm36e5t1fLb7uQAAAPfH0MPO/0Oncv4fOpfz/9C5nP+HzmWODzj/DwAA7a+/VpJMNj0X2B+ZTDYbcbB2W4CeZHq2kB+OiP9GxBcDPf+ptkdanTQAAAAAAAAAAAAAAAAAAAAAAAAAPGAqlSQqAAAAQFuLyHybpPf/Gho40b/5+MC+5JeB2jIirr5/+d1rE+Xy0kh1/Y9315ffS9efacURDAAAAGCz+jy9Po8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN105/b1yXrZy7jfPxsRg43id0dvbdkbPRGx/6ckujc8L4mIrl2Iv3YjIg43ip9U04rBNIvN8TMR0dfi+Ad2IT50spvV7c/FRp+/TByrLRt//rrT8k813/5l7m7/upps/w7uMMaRWx/nmsa/EXGku/H2px4/aRL/+A7jv/rK6mqzvsoHEUMNv3+SP8XKlecXc6WV1dOz8xMz+Zn8wujoyLmx82Nnx4Zz07OFfPpvwxhvPfLJ71uNf3+T+IPbjP/EDsf/261rt/+/RfyTxxu//4e3iF/9m3g8/R6o9g/V62vr9Y2OfvT50a3GP9Vk/Nu9/yd3OP5TL73x9Q4fCgDsgdLK6txEoZBfUlFpg0o6a1j7t+Tz4FZavWUCAAB2272d/sb9PXudEAAAAAAAAAAAAAAAAAAAAHSgvfg5sVaPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJ/4IAAD//zvd0Zk=") r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 8m50.458605772s ago: executing program 3 (id=172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES16=r1]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r3, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 8m49.61387506s ago: executing program 3 (id=175): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x808404, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f00000002c0)=ANY=[], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d) 8m49.34564769s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000a80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m46.484933862s ago: executing program 3 (id=202): r0 = socket(0x1e, 0x4, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 8m46.191760357s ago: executing program 32 (id=202): r0 = socket(0x1e, 0x4, 0x0) syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}], 0x1, 0x2120, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 7m52.125316648s ago: executing program 1 (id=468): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7m51.46834434s ago: executing program 1 (id=470): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 7m49.667511875s ago: executing program 1 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 7m49.37231623s ago: executing program 1 (id=478): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 7m48.698656945s ago: executing program 1 (id=484): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001043, r0, 0x0) r2 = fanotify_init(0x4, 0x2) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x641, 0x8001018, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) 7m47.27430787s ago: executing program 1 (id=488): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') getdents64(r3, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x40000029) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 7m46.913388938s ago: executing program 33 (id=488): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') getdents64(r3, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x40000029) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) unshare(0x20000400) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 7m13.984699325s ago: executing program 5 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x1, 0x1100}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 7m10.449208033s ago: executing program 5 (id=664): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@quota}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@nodelalloc}, {@quota}, {@nolazytime}, {@grpjquota}, {@mblk_io_submit}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x452, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000900)=@v1={0x0, @aes128, 0x0, @desc4}) close(r1) r3 = eventfd2(0x0, 0x80000) read(r3, &(0x7f0000002500)=""/126, 0x7e) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$eventfd(r1, &(0x7f0000000040)=0x9, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee0, 0xc8931, 0xffffffffffffffff, 0x0) 7m9.982644989s ago: executing program 5 (id=674): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r2 = inotify_init1(0x0) r3 = inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r1, &(0x7f0000005640)=ANY=[@ANYRES16=r3], 0x69) close(r1) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x1001c, 0x3f7, 0x200, 0x0, 0x0, {0xffff, 0x5, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './bus'}}, 0x1001c}}, 0x1) execve(&(0x7f0000010340)='./file0\x00', 0x0, &(0x7f0000010400)={[&(0x7f0000000200)='c', &(0x7f0000010380)='\x00', &(0x7f0000010440)='\r\x19\x00\x00s\xb2r\xde\x94\x85k\xa7\x8e\x81\x82c\'\x96b\xc8^\xdc\xd0\xe4g\xc5\xf0\xe9z(jg\x1e\xe2\xc0&&/\xde:9n\x81Ri\xc4R\xae\xf6\x80\a\x90{\x9e\x8bN\xdc\x9aX\x1f\x1c\x84y\x01O\xae\x1b\x81lT\xd0Cm\xcd\xc6B\"\x99\xcdK\xae\xb1X7B\x00'/98]}) 7m8.609066445s ago: executing program 5 (id=683): r0 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) close(r1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x12) ioctl$TIOCGSID(r1, 0x5429, 0x0) fcntl$lock(r2, 0x7, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000040)='./mnt\x00', 0x211) 7m8.42459017s ago: executing program 5 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x99) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000100)='+p', 0x2) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x4) 7m7.50881527s ago: executing program 5 (id=690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0xfffe, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xbe9f6000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_ublk_setup_io_uring(0x22, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x3, 0x2a4}, &(0x7f00000000c0), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6m51.000345192s ago: executing program 34 (id=690): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0xfffe, 0x0, "a1873b93b3cfcd86eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2fa9cf948772be305b9cdf57387e4d1af1630d46f6aa5e9e5a5e6cebac5c5982bb3101c7db2d80d50ca891462a59e19"}, 0xd8) mlockall(0x6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff8fffff9, 0x10031, 0xffffffffffffffff, 0xbe9f6000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_ublk_setup_io_uring(0x22, &(0x7f0000000440)={0x0, 0x0, 0x8, 0x3, 0x2a4}, &(0x7f00000000c0), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.007104699s ago: executing program 2 (id=2634): mount$cgroup2(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x2000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 8.728095267s ago: executing program 4 (id=2636): socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000480)={0x4, 0x6, 0x0, 0xe, 0xd7d, 0x4}) pwrite64(r1, &(0x7f00000002c0)="10c9", 0x2, 0xfff) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x70, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x48}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @remote}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 7.975351786s ago: executing program 2 (id=2637): socket(0x10, 0x803, 0x0) r0 = getpid() prlimit64(r0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0642, 0x0) tkill(r3, 0x7) close_range(r2, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{}, {0x77359400}}, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) 7.700175874s ago: executing program 4 (id=2641): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) r2 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @multicast}, 0x23) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2, @in6=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2, 0x0, 0x0, 0x3c, r3}, {0xffffffffffffffff, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4d2, 0x33}, 0x0, @in=@multicast1, 0x3507, 0x0, 0x2, 0x6, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x4808, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYRES16], 0x2, 0x56a, &(0x7f0000002c80)="$eJzs3V1v08gawPHHpT1EOVLP0eEIoarAUM6RilSCk0BQxJXXmaSGxI5sB7VXqKIpqkhhRVlp2xu2N+yutPsh2Mv9EPuN0H4EVh47bWnzsmxft/r/onYce+J5nFrzdNp4LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCy3ZttFS5qe31lSw7m1MGjtPc1efWiF3PmsGNGuiJV8SS4n19JV1/67t/lq8m1OZtNns5JLipxs//Pqvx9dmZzov35EwF/kl7+4p82t7ZcrvV73zXEFcg5dvzx8W0P7XhR4LaehlRcFqlqp2PcW65Gqe00dLUexbik31E4chGrevaOK1WpZ6cJy0PEbNaep+ysf3i3ZdkU9LrS1E0aBf+9xIXIXvWbT8xumTrI5qfMwORGfeLGKtdNSam291y2PO4CkUvHPVCqNq1SyS6VisVQqVh5UHzy07clDK+wD5FCN4ztp8fd0jL03cDQTWf6XpnjiS0eWRA18uFKTUAJpDdme6ef//9/TI9vdn//7Wf7a3uYZMfn/RvrsxrD8PySW03tsypZsy0tZkZ70pCtvzjyi0300RIsvnkQSiCctccwala1RUpWKVMSWZ7Io9ankh1gXT5qiJZJliSQWbc4oV0LR4kgsgYSiZF5cuSNKilKVqpRFiZaCLEsgHfGlITVxzF7WZN2872VR1uHokrNGyW6l4tDDyPfPu66URhwt+R9Hd5zdN3Akn/r5HwAAAAAAXFiW+ev7lPm6bp7Xvaa2zzosAAAAAABwjMx//meTwnw667pYjP8BAAAAALhoLHONnSUiebmZLq2JZS6X4o8AAAAAAABcEOb//zeSwsyBclOs3elSGP8DAAAAAHBB/DB2jv2ofdn67XcJwylrp730P2vDzM3rbFxKX3fp4B7j+ow1ne3EFJW0mJx09ayVSyvtToL5MSvWxsVh7QXg7Lb13ZcEcGVSfpJbaZ1bq2m5mm35V9pKvu41dcENmo+K4jjTE7Feir95tf6tmMP/0W9NWzlZ73ULz1/3Vk0sO8ledjayCRQPzaM4Ipa3Zr4Fc83FwCOeMhdiZO3mLVlb73Xt9tLlbM/OxkS6MPF5i++mR7T5XubSWnPZjLf5/pa0zVzSZrEw7OizKIpHPPL3cjutc3v+dloMiKI0LorS/igGvxdHj6I8LoryEaMAgLOyNiYLWXIg7w7LOyN7uQPZPen2Rmf3L//1wvTo82md+RnTsU7ODOjR7XE9un3E7PbroXsgDcuxSbs/H8iqH5IXfBjabtQsWclbeOntxtdydXNr++76xsqL7ovuq1KpXLHv2/aDkkyZw8gKcg8AYID999ixBub/UXfh+fQpyd33s1H1zsFRdZbx/rP7kYKCPJfX0pNVWTBXG5hPHAz8vSO/72MIC2NGrXmTJtM7vCyMGNX9w1zl0N9vaWTdz2Mon8aPAgCAUzM3Jg+Pzv/p2H1hzLg7L2tP++0tjBkd5/fdrQ0AAJwMHX608vH3Vhh67WfFarXoxItahYH7RIVeraGV58c6dBcdv6FVOwziwA2aycJTr6YjFXXa7SCMVT0IVTuIvCUzfaDKbv0e6Zbjx54btZvaibRyAz923FjVvMhV7c5XTS9a1KF5cdTWrlf3XCf2Al9FQSd0dUGpSOt9Fb2a9mOv7iWLvmqHXssJc+pp0Oy0tKrpyA29dhykO+y35fn1IGyZ3RbO+s0GAOCc2NzafrnS63XfnODCwIZzp36oAAAgMyZLAwAAAAAAAAAAAAAAAAAAAACAc+A0rv9j4YIv9KeCPi/xsHAMC2O7jncn3jkBOFF/BAAA//9mb05r") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8100, 0x101) r5 = inotify_init() inotify_add_watch(r5, &(0x7f00000003c0)='.\x00', 0x5db) lseek(r4, 0xffffffffffffffff, 0x2) getdents64(r4, 0x0, 0x0) 6.461260104s ago: executing program 4 (id=2644): openat$vcsu(0xffffffffffffff9c, 0x0, 0xa340, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) 6.448701774s ago: executing program 2 (id=2645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x88c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 4.646437981s ago: executing program 7 (id=2648): openat$kvm(0x0, &(0x7f0000000040), 0x2a0142, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x8ee, 0xfffffffffffffff8}}, @uexit={0x0, 0x18, 0x6}, @code={0xa, 0x42, {"3e0f005c7c002ef3643e640f064734000f23e8460f22470f013a8af50f005481bf67f2410f7082a9e70000f56736670f07"}}, @uexit={0x0, 0x18, 0x6}, @wrmsr={0x1e, 0x20, {0x0, 0x1}}, @in_dx={0x69, 0x20, {0xd21c, 0x2}}], 0xd2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x10204, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000002340)=@x86={0x4a, 0xc, 0x3, 0x0, 0x7, 0x4, 0x2, 0x7, 0xfa, 0x4, 0x56, 0x1, 0x0, 0x5, 0x0, 0x22, 0x1, 0x0, 0x1, '\x00', 0x6, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.646062821s ago: executing program 4 (id=2649): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f00000004c0)) 4.569668575s ago: executing program 0 (id=2650): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x642881) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x3, @mcast2, 0x8845}, 0x1c) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000001f00)=""/4096, 0x54, 0x1000, 0x3}, 0x28) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x34, "e71fefea00aed2dbc2c9adc6296a524d530835ce1d98c75b1d59bb82f3535a8e"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000140)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @local}, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x0, 0x0, 0x9, 0xb, 0x5, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000380)={@none, 0x2, 0xfff, 0x5, 0x81, 0x0, "c44c649d05c9e4826e3c6c397b14e7113eb68050ccab822eb0aa36a01432b26f98a7f73d1e3c7091c7e5ebd20ef1cc5dc2971726ad66dad96781ebade1e0be39358659b996b7e4fdcd4da2c9aa776728e4c80a0ead53ec331056f8c144a105aa34c8466c02ef916a800a16da7d34079810568ab862b368596e3b12d7dccb6628"}) 4.537559977s ago: executing program 7 (id=2651): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xffff1000, 0xf000, 0x9, 0x7f, 0x7, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x7f, 0x7, 0x6, 0x6, 0x1, 0x4, 0x2, 0x5}, {0xf000, 0x8000000, 0x0, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x5000, 0xeeef0000, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x9}, {0xa000, 0x41000, 0xa, 0x9, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x2, 0x3}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x4, 0x5, 0x1, 0xe, 0x6, 0xa}, {0x10000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xf000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x0, 0x7f, 0x1, 0xfc, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x21, 0x5, 0x0, 0x8000900, 0x1, [0x6, 0x2, 0x8000000000000003, 0x3]}) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000440)=""/144, 0x90}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009965, r3, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) 4.49427479s ago: executing program 2 (id=2652): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000000)="97", 0xfdef}], 0x1}}], 0x1, 0x4000800) 4.324886891s ago: executing program 0 (id=2654): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @local, 0x3}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}], 0x2c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0x5dc) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) semget$private(0x0, 0x0, 0x84) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x242000, 0x30) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 4.091739676s ago: executing program 7 (id=2656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setns(0xc9, 0x0) socket(0x2a, 0x2, 0x5) close_range(r3, 0xffffffffffffffff, 0x0) 2.441492712s ago: executing program 2 (id=2657): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = open(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) fsync(r0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10, &(0x7f0000000180)={[{@discard}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) 2.436626723s ago: executing program 7 (id=2658): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="241000002100094000000000000000000200"], 0x24}}, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000013c0)=ANY=[@ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000000003,dmode=00000000000000000000016,measure,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c6575027d3e", @ANYRESDEC=r0, @ANYBLOB="2c6d61736b3d4d41595f455845432c646f6e745f6d6561737572652c736d61636b665c2c617070726169730101747970653d696d617369672c657569643c4dceae4ea24d8c747e9aad700f2d6693c7d149bd67cd4c57f2edd10f2d0a2b14d016b9a19f5037374a03e08b9d6f45f76fb66bba0a06fb7b12a4ddedfe8db56690d74e3a58841f8c1a92320ec7a1733357da5ad89cffb484ab621ec15fb7d02aeb32eb3d568104d4b22b05c4a5a9a813b926a82d558947252feb36ca1071185c5195223346bb286729d96998ffda1c0bf052bb3ea7dd0e082fa46c603f75033e813cc049a1daf0f012", @ANYRESDEC=0x0, @ANYRESHEX=r0], 0x1, 0xc43, &(0x7f00000001c0)="$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") sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x200040d4) syz_mount_image$squashfs(&(0x7f0000000400), &(0x7f0000000200)='./file0\x00', 0x4000000, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0x1, 0x1a2, &(0x7f0000000040)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="66eac36f6f20", 0x6) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x800000, &(0x7f0000000100)=ANY=[@ANYBLOB="706172743d30783030303030303030303030da3c312c626172726965722c626172726965722c626172726965722c706172743d3078303030303030303030303030303030632c6e6c733d63703835302c63726561746f723d7f0e5bc82c666f7263652c000000"], 0x1, 0x5e5, &(0x7f0000000680)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.185424219s ago: executing program 6 (id=2660): clock_gettime(0x4, 0x0) io_getevents(0x0, 0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) futex$unlock_wake_list32(0x0, 0x681, 0x0, &(0x7f0000000340)={0x77359400}, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000100)=""/9, 0xfffffd87) 2.043820858s ago: executing program 6 (id=2661): setns(0xc9, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x20940, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 1.798218054s ago: executing program 0 (id=2662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d120d", 0x6}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8) shutdown(r1, 0x1) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000010000000000000000000061196800000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.728891458s ago: executing program 6 (id=2663): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffff38}]}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@map=0x1, 0x7, 0x1, 0x40000000, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0]}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) recvmmsg$unix(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010023, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x4, 0xfffffffffffffffe, &(0x7f0000000000)=0x44) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") 1.617499796s ago: executing program 6 (id=2664): mmap(&(0x7f0000800000/0x3000)=nil, 0x3000, 0x4, 0x66032, 0xffffffffffffffff, 0x40000000) r0 = syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xfe, 0xc24, &(0x7f0000001480)="$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") symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff}, 0x10}, 0x94) mkdir(&(0x7f0000000300)='./bus\x00', 0x101) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@subj_role={'subj_role', 0x3d, 'workdir'}}, {@dont_appraise}, {@obj_user={'obj_user', 0x3d, 'upperdir'}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, 'udf\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'upperdir'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_hash}]}) chdir(&(0x7f00000003c0)='./bus\x00') ftruncate(r2, 0x9) openat(r0, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x98) mremap(&(0x7f00007fd000/0xe000)=nil, 0xe000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) 1.479972364s ago: executing program 7 (id=2665): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20028041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.312642795s ago: executing program 0 (id=2666): r0 = fanotify_init(0x40, 0x80000) lstat(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = inotify_init1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) r2 = fanotify_init(0x4, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r2, 0x229, 0x4800001a, r3, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r4, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 313.925509ms ago: executing program 4 (id=2667): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x51) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@jqfmt_vfsv1}, {@errors_remount}]}, 0x1, 0x52f, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'ip_vti0\x00', 0x0}) rename(&(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u/file0\x00', &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlink(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlink(&(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') 286.578591ms ago: executing program 0 (id=2668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2, 0x3, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 226.339265ms ago: executing program 7 (id=2669): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x404, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r3, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r1, 0x96ca}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x200c1a, &(0x7f0000000040), 0x2, 0x573, &(0x7f0000000300)="$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") 145.02971ms ago: executing program 6 (id=2670): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) chdir(&(0x7f00000000c0)='./sys\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f00000001c0)=""/57, 0x39) getdents64(r3, &(0x7f0000001f80)=""/4096, 0x1000) 118.725172ms ago: executing program 0 (id=2671): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x29, 0x4a, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') open$dir(&(0x7f0000000200)='./file0/../file0\x00', 0x90401, 0x40) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x20000000000006) socket$inet_tcp(0x2, 0x1, 0x0) connect$pppl2tp(r2, 0x0, 0x0) 114.533802ms ago: executing program 4 (id=2672): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 52.222086ms ago: executing program 2 (id=2673): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x40286608, 0x0) 0s ago: executing program 6 (id=2674): mkdir(0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x103, 0x9, 0x1, 0x2}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x3, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ag 0x0 [ 177.813316][ T3155] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 177.851892][ T3155] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0002/input/input8 [ 177.991254][ T3155] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 178.084341][ T3155] usb 6-1: USB disconnect, device number 5 [ 178.275350][ T6567] fido_id[6567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 178.403310][ T6573] overlayfs: upper fs does not support file handles, falling back to index=off. [ 178.954873][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.580'. [ 179.131168][ T6595] loop6: detected capacity change from 0 to 512 [ 179.227189][ T6595] EXT4-fs (loop6): Ignoring removed nobh option [ 179.330424][ T6595] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,bsdgroups,nobh,,errors=continue. Quota mode: writeback. [ 179.405359][ T6595] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.437107][ T26] audit: type=1326 audit(1791039859.486:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.4.585" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f05e26b9ed7 code=0x0 [ 180.378161][ C0] net_ratelimit: 92 callbacks suppressed [ 180.439556][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.594'. [ 180.498374][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 180.537699][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 180.572186][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 180.610581][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 180.658498][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 180.685338][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 180.709254][ T3996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.724172][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 180.784814][ T6641] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 183.002467][ T6686] syzkaller0: create flow: hash 3133562052 index 1 [ 183.061304][ T3155] syzkaller0: tun_net_xmit 76 [ 183.068156][ T3155] syzkaller0: tun_net_xmit 48 [ 183.118582][ T3155] syzkaller0: tun_net_xmit 76 [ 183.163922][ T6681] syzkaller0: delete flow: hash 3133562052 index 1 [ 183.285005][ T6689] netlink: 20 bytes leftover after parsing attributes in process `syz.5.601'. [ 183.541037][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 183.601099][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 183.691436][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 183.714610][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 184.529758][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 184.537389][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 184.660710][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 184.671097][ T6697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.357264][ T6748] loop6: detected capacity change from 0 to 256 [ 185.465188][ T6748] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.484768][ T6751] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 185.498159][ C0] net_ratelimit: 65 callbacks suppressed [ 185.504203][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.582585][ T6756] Bluetooth: (null): Invalid header checksum [ 185.749162][ T3996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.200103][ T6786] VFS: Mount too revealing [ 186.557429][ T6793] tipc: Started in network mode [ 186.563721][ T6798] loop5: detected capacity change from 0 to 512 [ 186.742407][ T6793] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.754874][ T6798] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 186.764910][ T6798] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 187.613691][ T6798] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 187.654145][ T6793] tipc: New replicast peer: 172.20.20.187 [ 187.719982][ T6793] tipc: Enabled bearer , priority 10 [ 187.751411][ T6798] EXT4-fs (loop5): 1 truncate cleaned up [ 187.777498][ T6798] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,mblk_io_submit,,errors=continue. Quota mode: none. [ 188.089603][ T26] audit: type=1326 audit(1791039868.146:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6810 comm="syz.4.637" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05e26c0159 code=0x0 [ 188.425555][ T3996] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 188.719061][ T3996] usb 6-1: Using ep0 maxpacket: 8 [ 188.860944][ T3996] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 188.919892][ T3996] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.937019][ T5904] tipc: Node number set to 2886997162 [ 188.962871][ T6845] loop4: detected capacity change from 0 to 512 [ 188.988196][ T3996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.022034][ T3996] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.263189][ T6845] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.434727][ T6845] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 189.825473][ T3996] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.839121][ T3996] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 189.848222][ T3996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.864059][ T6845] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.017190][ T6845] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.643: invalid indirect mapped block 83886080 (level 1) [ 190.127932][ T6845] EXT4-fs (loop4): Remounting filesystem read-only [ 190.138410][ T3996] usb 6-1: usb_control_msg returned -32 [ 190.144017][ T3996] usbtmc 6-1:16.0: can't read capabilities [ 190.187677][ T6845] EXT4-fs (loop4): 1 orphan inode deleted [ 190.221654][ T6845] EXT4-fs (loop4): 1 truncate cleaned up [ 190.257939][ T6845] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 190.426358][ T6844] EXT4-fs error (device loop4): ext4_empty_dir:3156: inode #2: block 13: comm syz.4.643: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 190.506201][ T6844] EXT4-fs (loop4): Remounting filesystem read-only [ 190.535898][ T6844] EXT4-fs warning (device loop4): ext4_empty_dir:3158: inode #2: comm syz.4.643: directory missing '..' [ 190.698171][ C0] net_ratelimit: 76 callbacks suppressed [ 190.858355][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.867802][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.133085][ T5904] Bluetooth: hci0: command 0x0406 tx timeout [ 191.149837][ T5904] Bluetooth: hci2: command 0x0406 tx timeout [ 191.320173][ T5904] Bluetooth: hci4: command 0x0406 tx timeout [ 192.030274][ T7] usb 6-1: USB disconnect, device number 6 [ 192.051125][ T6899] md: couldn't update array info. -22 [ 192.483882][ T6920] netlink: 'syz.6.661': attribute type 1 has an invalid length. [ 192.800624][ T6937] loop5: detected capacity change from 0 to 512 [ 192.832425][ T6935] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼ [ 192.978809][ T6937] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 192.996333][ T6937] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.092956][ T6937] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.664: invalid indirect mapped block 83886080 (level 1) [ 193.107796][ T6937] EXT4-fs (loop5): Remounting filesystem read-only [ 193.116293][ T6937] EXT4-fs (loop5): 1 orphan inode deleted [ 193.125418][ T6937] EXT4-fs (loop5): 1 truncate cleaned up [ 193.131329][ T6937] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,errors=remount-ro,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000000040,block_validity,nodelalloc,quota,nolazytime,grpjquota=,mblk_io_submit,barrier=0x00000000000000ff,max_batch_time=0x00000. Quota mode: writeback. [ 193.171119][ T6937] EXT4-fs error (device loop5): ext4_empty_dir:3156: inode #2: block 13: comm syz.5.664: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 193.205892][ T6937] EXT4-fs (loop5): Remounting filesystem read-only [ 193.218202][ T6937] EXT4-fs warning (device loop5): ext4_empty_dir:3158: inode #2: comm syz.5.664: directory missing '..' [ 193.312541][ T6953] md: couldn't update array info. -22 [ 193.491871][ T6948] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 193.535497][ T6948] EXT4-fs (loop5): Remounting filesystem read-only [ 194.140891][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.147357][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.970921][ T7017] device bond0 entered promiscuous mode [ 195.988163][ C1] net_ratelimit: 74 callbacks suppressed [ 196.058712][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.070021][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.079253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.139432][ T7023] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 196.175114][ T7023] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 196.213027][ T7023] bond0: (slave wireguard0): making interface the new active one [ 196.236350][ T7023] device wireguard0 entered promiscuous mode [ 196.289483][ T7023] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 197.214402][ T7036] loop6: detected capacity change from 0 to 131072 [ 197.294681][ T7036] F2FS-fs (loop6): invalid crc value [ 197.352149][ T7036] F2FS-fs (loop6): Found nat_bits in checkpoint [ 197.409858][ T7036] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 197.532373][ T7034] Process accounting resumed [ 198.115511][ T7071] netlink: 'syz.0.686': attribute type 1 has an invalid length. [ 198.179074][ T7071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.219183][ T7071] bond1: (slave gretap1): making interface the new active one [ 198.229570][ T7071] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 198.239799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 198.252190][ T7071] syz.0.686 (7071) used greatest stack depth: 19920 bytes left [ 199.538008][ T7090] netlink: 12 bytes leftover after parsing attributes in process `syz.6.684'. [ 199.700171][ T7093] EXT4-fs warning (device sda1): verify_group_input:168: Reserved blocks too high (12) [ 200.405908][ T7086] Process accounting resumed [ 200.556071][ T7108] netlink: 'syz.2.696': attribute type 1 has an invalid length. [ 200.742941][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.696'. [ 200.840694][ T7110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.018165][ C0] net_ratelimit: 87 callbacks suppressed [ 201.045108][ T7108] bond0: (slave bridge1): making interface the new active one [ 201.105805][ T7108] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 201.158292][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 201.258895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.278492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.364987][ T7123] MPTCP: addr_signal error, rm_addr=1 [ 201.370974][ T7123] MPTCP: addr_signal error, rm_addr=1 [ 201.647594][ T7135] sch_fq: defrate 53322 ignored. [ 201.807573][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 201.980846][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 202.016880][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.704'. [ 203.484199][ T7173] netlink: 'syz.6.711': attribute type 1 has an invalid length. [ 203.636224][ T7179] netlink: 28 bytes leftover after parsing attributes in process `syz.6.711'. [ 203.680870][ T7179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.759948][ T7180] bond1: (slave bridge1): making interface the new active one [ 203.779013][ T7180] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 203.814422][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 204.189795][ T7195] netlink: 'syz.6.714': attribute type 1 has an invalid length. [ 204.218721][ T7195] netlink: 'syz.6.714': attribute type 2 has an invalid length. [ 204.578504][ T26] audit: type=1800 audit(1791039884.636:51): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.715" name="manufacturer" dev="configfs" ino=42514 res=0 errno=0 [ 205.058232][ T5904] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 205.308410][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 205.428816][ T5904] usb 7-1: too many endpoints for config 0 interface 0 altsetting 129: 33, using maximum allowed: 30 [ 205.458859][ T5904] usb 7-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 205.508176][ T5904] usb 7-1: config 0 interface 0 has no altsetting 0 [ 205.524848][ T5904] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 205.552024][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.621315][ T5904] usb 7-1: config 0 descriptor?? [ 205.741990][ T7252] cgroup: Setting release_agent not allowed [ 205.955540][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 206.100858][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.138179][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.146983][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.160974][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.181811][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.207492][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.232825][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.263053][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.287334][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.301214][ T7214] overlayfs: unrecognized mount option "subj_user=" or missing value [ 206.309578][ T4422] net_ratelimit: 53 callbacks suppressed [ 206.326134][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.345678][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.365450][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.383030][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.416287][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.437669][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.465537][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.485634][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.515125][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.542788][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.572995][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.600733][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.631099][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.661462][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.695323][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.773331][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 206.803052][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.648338][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.655542][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.662915][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.670112][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.677277][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.684522][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.692849][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.700082][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.707371][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.745478][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.794281][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.854062][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.895007][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.898750][ T7276] netlink: 'syz.4.732': attribute type 11 has an invalid length. [ 207.934418][ T5904] zydacron 0003:13EC:0006.0003: unknown main item tag 0x0 [ 207.978787][ T7272] netlink: 64 bytes leftover after parsing attributes in process `syz.6.733'. [ 208.003101][ T5904] zydacron 0003:13EC:0006.0003: hidraw0: USB HID v0.81 Device [HID 13ec:0006] on usb-dummy_hcd.6-1/input0 [ 208.084598][ T5904] usb 7-1: USB disconnect, device number 2 [ 208.170372][ T7278] device syzkaller1 entered promiscuous mode [ 208.367666][ T7283] fido_id[7283]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 208.461150][ T7289] netlink: 'syz.4.736': attribute type 11 has an invalid length. [ 208.509382][ T7293] netlink: 'syz.0.740': attribute type 12 has an invalid length. [ 208.529835][ T7293] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 208.548060][ T7293] netlink: 148 bytes leftover after parsing attributes in process `syz.0.740'. [ 208.584101][ T7293] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 208.613459][ T7293] netlink: 'syz.0.740': attribute type 2 has an invalid length. [ 208.636679][ T7293] netlink: 11 bytes leftover after parsing attributes in process `syz.0.740'. [ 208.680147][ T7295] netlink: 'syz.0.740': attribute type 12 has an invalid length. [ 208.693369][ T7295] netlink: 'syz.0.740': attribute type 29 has an invalid length. [ 208.716565][ T7295] netlink: 148 bytes leftover after parsing attributes in process `syz.0.740'. [ 208.744731][ T7295] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 208.781717][ T7295] netlink: 'syz.0.740': attribute type 2 has an invalid length. [ 208.814094][ T7295] netlink: 11 bytes leftover after parsing attributes in process `syz.0.740'. [ 210.370630][ T7309] loop6: detected capacity change from 0 to 40427 [ 210.578363][ T7309] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 210.608368][ T7309] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 210.666179][ T7309] F2FS-fs (loop6): invalid crc value [ 210.728584][ T7309] F2FS-fs (loop6): Found nat_bits in checkpoint [ 211.079511][ T7309] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 211.104335][ T7309] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 211.348158][ C1] net_ratelimit: 53 callbacks suppressed [ 215.928186][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 216.168930][ T5660] tipc: Resetting bearer [ 216.186815][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 216.287511][ T5660] tipc: Disabling bearer [ 216.333332][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 216.343687][ T13] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 216.370488][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.395361][ T13] usb 5-1: config 0 descriptor?? [ 216.461085][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 216.526792][ T4404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.576024][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 216.742419][ T4404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.938320][ C1] net_ratelimit: 43 callbacks suppressed [ 216.957646][ T4404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.988419][ T13] gspca_sunplus: reg_w_riv err -71 [ 216.993633][ T13] sunplus: probe of 5-1:0.0 failed with error -71 [ 217.069463][ T13] usb 5-1: USB disconnect, device number 6 [ 217.432910][ T4404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.588803][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.606346][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.659481][ T7434] device bridge_slave_0 entered promiscuous mode [ 217.715303][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.749050][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.818398][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 217.841041][ T7434] device bridge_slave_1 entered promiscuous mode [ 218.736202][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.809239][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.100147][ T4404] tipc: Left network mode [ 219.303877][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.790'. [ 219.898411][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 220.137431][ T7482] device bond0 entered promiscuous mode [ 220.358459][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 220.418971][ T7482] device bond0 left promiscuous mode [ 220.558395][ T7484] netlink: 14 bytes leftover after parsing attributes in process `syz.4.790'. [ 220.603715][ T7484] device bond_slave_0 left promiscuous mode [ 220.668308][ T7484] device bond_slave_1 left promiscuous mode [ 220.853494][ T7484] bond1: (slave macvlan2): Releasing active interface [ 220.876614][ T7254] syz.4.725 (7254) used greatest stack depth: 18496 bytes left [ 220.909638][ T7484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.933874][ T7484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.969077][ T7484] bond0 (unregistering): Released all slaves [ 221.067194][ T7434] team0: Port device team_slave_0 added [ 221.113378][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 221.174023][ T7510] netlink: 14 bytes leftover after parsing attributes in process `syz.6.794'. [ 221.267196][ T7434] team0: Port device team_slave_1 added [ 221.482226][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.507037][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.605087][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.642641][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.706911][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.860881][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.978297][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 222.360420][ T7434] device hsr_slave_0 entered promiscuous mode [ 222.378250][ C1] net_ratelimit: 54 callbacks suppressed [ 222.420217][ T7434] device hsr_slave_1 entered promiscuous mode [ 222.434417][ T7434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.442768][ T7434] Cannot create hsr debugfs directory [ 223.732113][ T7434] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 223.786965][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.806'. [ 223.816596][ T7573] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 223.868506][ T7573] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 224.049820][ T7434] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 224.058274][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 224.123459][ T7434] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 224.182284][ T4404] device hsr_slave_0 left promiscuous mode [ 224.220003][ T4404] device hsr_slave_1 left promiscuous mode [ 224.230750][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.262812][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.317998][ T4404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.352368][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.385324][ T4404] device bridge_slave_1 left promiscuous mode [ 224.409355][ T4404] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.472222][ T7588] netlink: 277 bytes leftover after parsing attributes in process `syz.6.809'. [ 224.523078][ T4404] device bridge_slave_0 left promiscuous mode [ 224.532159][ T4404] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.637698][ T4404] device veth1_macvtap left promiscuous mode [ 224.681493][ T4404] device veth0_macvtap left promiscuous mode [ 224.687610][ T4404] device veth1_vlan left promiscuous mode [ 224.744707][ T4404] device veth0_vlan left promiscuous mode [ 224.759061][ T7594] fuse: Bad value for 'fd' [ 224.858277][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 226.231316][ T4404] team0 (unregistering): Port device team_slave_1 removed [ 226.268133][ T4404] team0 (unregistering): Port device team_slave_0 removed [ 226.337966][ T4404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.436565][ T4404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.870784][ T4404] bond0 (unregistering): Released all slaves [ 227.063337][ T7434] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 227.111715][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'. [ 227.253402][ T7601] netlink: 14 bytes leftover after parsing attributes in process `syz.0.811'. [ 227.588137][ C1] net_ratelimit: 58 callbacks suppressed [ 227.758775][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.906497][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 227.918858][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 228.552112][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.752218][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 228.792840][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 228.834345][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.841495][ T4422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.909994][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 229.067595][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 229.079899][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 229.119617][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.126770][ T4422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.821677][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.918937][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 229.950741][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.000585][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.053158][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.136395][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.152380][ T7659] loop4: detected capacity change from 0 to 512 [ 230.174217][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.224484][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.238771][ T7659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.286679][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.320308][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.346200][ T7659] EXT4-fs (loop4): 1 truncate cleaned up [ 230.353971][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.360591][ T7659] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000005,errors=remount-ro,. Quota mode: none. [ 230.378436][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.392275][ T7434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.487978][ T7659] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.4.823: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 230.522543][ T7659] EXT4-fs (loop4): Remounting filesystem read-only [ 230.539058][ T7659] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 230.587180][ T7659] EXT4-fs (loop4): Remounting filesystem read-only [ 230.606309][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.6.825'. [ 230.854792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.878657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.924026][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.977540][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 231.081822][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.827'. [ 231.124239][ T7684] device bond0 entered promiscuous mode [ 231.293183][ T7688] device macvlan2 entered promiscuous mode [ 231.380768][ T7688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.262129][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 232.297832][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 232.352491][ T7434] device veth0_vlan entered promiscuous mode [ 232.393182][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.410129][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.447786][ T7434] device veth1_vlan entered promiscuous mode [ 232.470699][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.505464][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.561984][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 232.653318][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 232.678555][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.707422][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.746836][ T7434] device veth0_macvtap entered promiscuous mode [ 232.778255][ C1] net_ratelimit: 43 callbacks suppressed [ 232.801506][ T7434] device veth1_macvtap entered promiscuous mode [ 232.877155][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.924842][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.969561][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.019111][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.063423][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.114069][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.156363][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.195796][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.260126][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.303965][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.348632][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.405587][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.463042][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.472993][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.484225][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.494229][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.505366][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.522243][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.637770][ T7763] ip_tables: iptables: counters copy to user failed while replacing table [ 234.299157][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.349313][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 234.363576][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 234.420887][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 234.455452][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 234.493653][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.534331][ T7434] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.574345][ T7434] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.607631][ T7434] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.644366][ T7434] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.037979][ T6419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.055151][ T6419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.176177][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 235.193703][ T26] audit: type=1800 audit(1799428779.250:52): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.851" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 235.256375][ T6422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.287642][ T6422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.334312][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.828135][ C1] net_ratelimit: 78 callbacks suppressed [ 238.468043][ T7833] loop7: detected capacity change from 0 to 1024 [ 238.608312][ T7833] EXT4-fs (loop7): Ignoring removed bh option [ 238.707145][ T7833] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,dioread_lock,stripe=0x0000000000000005,nolazytime,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,barrier=0x0000000000000004,grpquota,bh,init_itable,. Quota mode: writeback. [ 239.000531][ T7833] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 240.101431][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 240.579161][ T7886] Cannot find add_set index 0 as target [ 241.136866][ T7884] loop4: detected capacity change from 0 to 2048 [ 241.313515][ T7888] fuse: Bad value for 'fd' [ 241.722902][ T7884] EXT4-fs (loop4): bad block size 8192 [ 242.619908][ T7876] syz.4.871 (7876) used greatest stack depth: 17264 bytes left [ 243.184771][ T6422] net_ratelimit: 63 callbacks suppressed [ 243.980930][ T7917] Cannot find add_set index 0 as target [ 244.393094][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 245.550858][ T7935] loop4: detected capacity change from 0 to 1024 [ 246.886426][ T4422] hfsplus: b-tree write err: -5, ino 25 [ 246.956594][ T4422] hfsplus: b-tree write err: -5, ino 4 [ 247.225731][ T4422] hfsplus: b-tree write err: -5, ino 2 [ 247.277631][ T26] audit: type=1800 audit(1799428791.330:53): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.895" name=08 dev="sda1" ino=2054 res=0 errno=0 [ 247.328376][ T7965] MPTCP: addr_signal error, add_addr=1, echo=0 [ 247.375817][ T4422] hfsplus: b-tree write err: -5, ino 26 [ 247.439515][ T4422] hfsplus: b-tree write err: -5, ino 27 [ 248.014116][ T7984] Invalid option length (1047276) for dns_resolver key [ 248.298122][ C1] net_ratelimit: 43 callbacks suppressed [ 251.717894][ T8057] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 253.508155][ C1] net_ratelimit: 40 callbacks suppressed [ 254.004089][ T8105] FAULT_INJECTION: forcing a failure. [ 254.004089][ T8105] name failslab, interval 1, probability 0, space 0, times 0 [ 254.095345][ T8105] CPU: 1 PID: 8105 Comm: syz.7.928 Not tainted syzkaller #0 [ 254.102699][ T8105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 254.112786][ T8105] Call Trace: [ 254.116092][ T8105] [ 254.119049][ T8105] dump_stack_lvl+0x188/0x250 [ 254.123765][ T8105] ? show_regs_print_info+0x20/0x20 [ 254.129007][ T8105] ? load_image+0x410/0x410 [ 254.133558][ T8105] ? __might_sleep+0xf0/0xf0 [ 254.138182][ T8105] ? __lock_acquire+0x7d40/0x7d40 [ 254.143274][ T8105] should_fail+0x383/0x4b0 [ 254.147728][ T8105] should_failslab+0x5/0x20 [ 254.152259][ T8105] slab_pre_alloc_hook+0x51/0xc0 [ 254.152337][ T8105] kmem_cache_alloc_trace+0x47/0x290 [ 254.152361][ T8105] ? snd_seq_prioq_new+0x43/0x90 [ 254.152387][ T8105] snd_seq_prioq_new+0x43/0x90 [ 254.163119][ T8105] snd_seq_queue_alloc+0x114/0x740 [ 254.163159][ T8105] snd_seq_ioctl_create_queue+0x7b/0x320 [ 254.163182][ T8105] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 254.178316][ T8105] snd_seq_oss_open+0x622/0xf00 [ 254.178355][ T8105] ? snd_seq_oss_delete_client+0x50/0x50 [ 254.190336][ T8105] ? __mutex_lock_common+0x435/0x2400 [ 254.200743][ T8105] ? mutex_lock_io_nested+0x60/0x60 [ 254.200775][ T8105] ? snd_seq_oss_process_event+0x2910/0x2910 [ 254.200797][ T8105] ? async_call_lookup_ports+0x10/0x10 [ 254.200819][ T8105] ? do_raw_spin_unlock+0x11d/0x230 [ 254.200855][ T8105] odev_open+0x63/0x90 [ 254.200876][ T8105] chrdev_open+0x585/0x5f0 [ 254.200911][ T8105] ? cd_forget+0x160/0x160 [ 254.200940][ T8105] ? fsnotify_perm+0x3a7/0x560 [ 254.200966][ T8105] ? cd_forget+0x160/0x160 [ 254.200991][ T8105] do_dentry_open+0x7f7/0xf90 [ 254.201017][ T8105] ? vfs_open+0x2b/0x80 [ 254.201046][ T8105] path_openat+0x2718/0x2fb0 [ 254.201096][ T8105] ? __kasan_slab_alloc+0xa9/0xc0 [ 254.201129][ T8105] ? do_filp_open+0x400/0x400 [ 254.201174][ T8105] do_filp_open+0x1df/0x400 [ 254.201201][ T8105] ? vfs_tmpfile+0x300/0x300 [ 254.201248][ T8105] ? _raw_spin_unlock+0x24/0x40 [ 254.201272][ T8105] ? alloc_fd+0x59e/0x650 [ 254.211869][ T8105] do_sys_openat2+0x14b/0x500 [ 254.223310][ T8105] ? __lock_acquire+0x7d40/0x7d40 [ 254.223361][ T8105] ? do_sys_open+0xe0/0xe0 [ 254.223384][ T8105] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.233107][ T8105] ? lock_chain_count+0x20/0x20 [ 254.233153][ T8105] __x64_sys_openat+0x135/0x160 [ 254.241977][ T8105] do_syscall_64+0x4c/0xa0 [ 254.251179][ T8105] ? clear_bhb_loop+0x30/0x80 [ 254.251206][ T8105] ? clear_bhb_loop+0x30/0x80 [ 254.251229][ T8105] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.260564][ T8105] RIP: 0033:0x7f4ea18d2159 [ 254.270181][ T8105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.279371][ T8105] RSP: 002b:00007f4e9fb2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 254.279400][ T8105] RAX: ffffffffffffffda RBX: 00007f4ea1b59fa0 RCX: 00007f4ea18d2159 [ 254.279417][ T8105] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 254.279433][ T8105] RBP: 00007f4ea196906b R08: 0000000000000000 R09: 0000000000000000 [ 254.279446][ T8105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.279460][ T8105] R13: 00007f4ea1b5a038 R14: 00007f4ea1b59fa0 R15: 00007ffd60c074a8 [ 254.279495][ T8105] [ 254.279648][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.587359][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.593863][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.496567][ T8132] device lo entered promiscuous mode [ 256.645023][ T8132] device tunl0 entered promiscuous mode [ 256.783492][ T8132] device gre0 entered promiscuous mode [ 257.112844][ T8132] device gretap0 entered promiscuous mode [ 257.201138][ T8132] device erspan0 entered promiscuous mode [ 257.341072][ T8132] device ip_vti0 entered promiscuous mode [ 258.135589][ T8132] device ip6_vti0 entered promiscuous mode [ 258.207676][ T8132] device sit0 entered promiscuous mode [ 258.345408][ T8132] device ip6tnl0 entered promiscuous mode [ 258.419012][ T8132] device ip6gre0 entered promiscuous mode [ 258.499198][ T8132] device ip6gretap0 entered promiscuous mode [ 258.573318][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.582875][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.618485][ T8132] device bridge0 entered promiscuous mode [ 258.628112][ C1] net_ratelimit: 38 callbacks suppressed [ 258.712002][ T8132] device team0 entered promiscuous mode [ 258.717725][ T8132] device team_slave_0 entered promiscuous mode [ 258.737920][ T8132] device team_slave_1 entered promiscuous mode [ 258.797351][ T8132] device dummy0 entered promiscuous mode [ 258.835742][ T8132] device nlmon0 entered promiscuous mode [ 258.850651][ T8132] device caif0 entered promiscuous mode [ 258.871408][ T8132] device batadv0 entered promiscuous mode [ 258.913188][ T8132] device veth0 entered promiscuous mode [ 258.953702][ T8132] device veth1 entered promiscuous mode [ 258.995200][ T8132] device wg0 entered promiscuous mode [ 259.022560][ T8132] device wg1 entered promiscuous mode [ 259.047388][ T8132] device wg2 entered promiscuous mode [ 259.076585][ T8132] device veth0_to_bridge entered promiscuous mode [ 259.134507][ T8132] device veth1_to_bridge entered promiscuous mode [ 259.184611][ T8173] fuse: Bad value for 'fd' [ 259.304282][ T8132] device veth0_to_bond entered promiscuous mode [ 259.335854][ T8132] device bond_slave_0 entered promiscuous mode [ 259.369180][ T8132] device veth1_to_bond entered promiscuous mode [ 259.394830][ T8132] device bond_slave_1 entered promiscuous mode [ 259.459750][ T8132] device veth0_to_team entered promiscuous mode [ 260.166837][ T8132] device veth1_to_team entered promiscuous mode [ 260.244842][ T8132] device veth0_to_batadv entered promiscuous mode [ 260.255469][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.292345][ T8132] device batadv_slave_0 entered promiscuous mode [ 260.341442][ T8132] device veth1_to_batadv entered promiscuous mode [ 260.351843][ T8132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.385048][ T8132] device batadv_slave_1 entered promiscuous mode [ 260.439675][ T8132] device xfrm0 entered promiscuous mode [ 260.501103][ T8132] device veth0_to_hsr entered promiscuous mode [ 260.587354][ T8132] device veth1_to_hsr entered promiscuous mode [ 260.654572][ T8132] device hsr0 entered promiscuous mode [ 261.435744][ T8132] device veth1_virt_wifi entered promiscuous mode [ 261.479891][ T8132] device veth0_virt_wifi entered promiscuous mode [ 261.508455][ T8132] device virt_wifi0 entered promiscuous mode [ 261.608042][ T8132] device vlan1 entered promiscuous mode [ 261.664642][ T8132] device macvlan0 entered promiscuous mode [ 261.691795][ T8132] device macvlan1 entered promiscuous mode [ 261.710559][ T8132] device ipvlan0 entered promiscuous mode [ 261.716839][ T8132] device ipvlan1 entered promiscuous mode [ 261.733054][ T8132] device macvtap0 entered promiscuous mode [ 261.858955][ T8132] device macsec0 entered promiscuous mode [ 261.994424][ T8132] device geneve0 entered promiscuous mode [ 262.075350][ T8132] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.113644][ T8132] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.196619][ T8132] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.260877][ T8132] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.400322][ T8132] device geneve1 entered promiscuous mode [ 262.420787][ T8132] device netdevsim0 entered promiscuous mode [ 262.435348][ T8132] device netdevsim1 entered promiscuous mode [ 262.446178][ T8132] device netdevsim2 entered promiscuous mode [ 262.464496][ T8132] device netdevsim3 entered promiscuous mode [ 262.511798][ T8132] device wlan0 entered promiscuous mode [ 262.521294][ T8132] device wlan1 entered promiscuous mode [ 262.527063][ T8132] device vti0 entered promiscuous mode [ 262.539661][ T8132] device gre1 entered promiscuous mode [ 262.582273][ T8132] device bond1 entered promiscuous mode [ 262.588009][ T8132] device gretap1 entered promiscuous mode [ 262.888507][ T26] audit: type=1326 audit(1799428806.950:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 262.956524][ T26] audit: type=1326 audit(1799428806.970:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 262.989270][ T26] audit: type=1326 audit(1799428806.970:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.052509][ T8207] fuse: Bad value for 'fd' [ 263.100879][ T26] audit: type=1326 audit(1799428806.970:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.216432][ T26] audit: type=1326 audit(1799428806.980:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.315147][ T26] audit: type=1326 audit(1799428806.980:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.340658][ T5905] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 263.414864][ T26] audit: type=1326 audit(1799428806.980:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.446224][ T26] audit: type=1326 audit(1799428806.980:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.529476][ T26] audit: type=1326 audit(1799428806.980:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 263.898416][ C1] net_ratelimit: 42 callbacks suppressed [ 264.021157][ T26] audit: type=1326 audit(1799428806.980:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8202 comm="syz.0.950" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 264.448335][ T5905] usb 8-1: Using ep0 maxpacket: 32 [ 264.598596][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.621719][ T5905] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.659566][ T5905] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 264.707839][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.849413][ T5905] usb 8-1: config 0 descriptor?? [ 265.836262][ T8254] device wlan0 left promiscuous mode [ 265.875717][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 267.015712][ T8189] usb 8-1: USB disconnect, device number 2 [ 267.457742][ T8296] loop4: detected capacity change from 0 to 128 [ 268.620971][ T8296] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 268.703456][ T8296] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 268.853371][ T8320] netlink: 11834 bytes leftover after parsing attributes in process `syz.6.979'. [ 268.896452][ T8296] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 268.944886][ T8296] EXT4-fs warning (device loop4): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 269.018141][ C0] net_ratelimit: 27 callbacks suppressed [ 271.573419][ T8386] loop4: detected capacity change from 0 to 8 [ 271.848446][ T8386] SQUASHFS error: zlib decompression failed, data probably corrupt [ 271.856508][ T8386] SQUASHFS error: Failed to read block 0x9b: -5 [ 272.007706][ T8386] SQUASHFS error: Unable to read metadata cache entry [99] [ 272.056760][ T8386] SQUASHFS error: Unable to read inode 0x127 [ 272.296806][ T8377] bond0: Unable to set down delay as MII monitoring is disabled [ 273.415978][ T8416] loop7: detected capacity change from 0 to 2048 [ 273.861623][ T8416] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 274.138112][ C0] net_ratelimit: 23 callbacks suppressed [ 274.164822][ T8416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.297849][ T8432] device syzkaller0 entered promiscuous mode [ 274.679015][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 274.679026][ T26] audit: type=1326 audit(1799428818.740:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.6.1010" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ce42d0159 code=0x0 [ 275.503213][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1015'. [ 275.741372][ T8482] device syzkaller0 left promiscuous mode [ 275.775946][ T8481] netlink: 'syz.7.1015': attribute type 2 has an invalid length. [ 276.406744][ T8511] loop7: detected capacity change from 0 to 256 [ 276.928678][ T8511] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 277.360960][ T8511] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1025'. [ 277.726504][ T8541] loop7: detected capacity change from 0 to 512 [ 277.820665][ T8541] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 277.888347][ T8541] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 277.960839][ T8541] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 278.008137][ T8541] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 278.016090][ T8541] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e02c, mo2=0000] [ 278.047100][ T8541] EXT4-fs (loop7): orphan cleanup on readonly fs [ 278.064053][ T8541] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.1035: bg 0: block 34: padding at end of block bitmap is not set [ 278.166549][ T8541] EXT4-fs (loop7): Remounting filesystem read-only [ 278.178572][ T8541] Quota error (device loop7): write_blk: dquota write failed [ 278.186769][ T8541] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 278.215895][ T8541] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1035: Failed to acquire dquot type 1 [ 278.246933][ T8541] EXT4-fs (loop7): Remounting filesystem read-only [ 278.260872][ T8541] EXT4-fs (loop7): 1 truncate cleaned up [ 278.280624][ T8541] EXT4-fs (loop7): mounted filesystem without journal. Opts: resgid=0x0000000000000000,barrier,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 278.518904][ T8570] loop4: detected capacity change from 0 to 512 [ 278.690668][ T8570] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 278.745826][ T8570] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.287492][ T6422] net_ratelimit: 37 callbacks suppressed [ 281.405880][ T8638] overlayfs: failed to clone upperpath [ 281.488427][ T8640] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1060'. [ 282.060160][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1067'. [ 282.099042][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 282.111000][ T8666] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 283.359327][ T4187] Bluetooth: hci1: command 0x0406 tx timeout [ 285.135140][ C1] net_ratelimit: 25 callbacks suppressed [ 285.532379][ T8713] overlayfs: failed to clone upperpath [ 290.013650][ T8785] orangefs_mount: mount request failed with -4 [ 290.593570][ C0] net_ratelimit: 31 callbacks suppressed [ 290.986204][ T8799] netlink: 'syz.4.1104': attribute type 3 has an invalid length. [ 292.093922][ T8839] xt_socket: unknown flags 0x4c [ 292.844849][ T8847] device batadv_slave_1 entered promiscuous mode [ 292.909674][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 292.994986][ T8847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.229304][ T8847] device batadv_slave_1 left promiscuous mode [ 293.235839][ T8847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.401817][ T8870] fuse: Bad value for 'fd' [ 294.641275][ T4187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 295.025994][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1135'. [ 295.080754][ T8905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.095338][ T8870] kexec: Could not allocate control_code_buffer [ 295.168427][ T4187] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.168611][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.168633][ T4187] usb 5-1: Product: syz [ 295.168648][ T4187] usb 5-1: Manufacturer: syz [ 295.198102][ T4187] usb 5-1: SerialNumber: syz [ 295.422298][ T8905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.898161][ C1] net_ratelimit: 30 callbacks suppressed [ 296.348475][ T4187] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.566760][ T8878] udc-core: couldn't find an available UDC or it's busy [ 296.601002][ T8878] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 297.084171][ T5904] usb 5-1: USB disconnect, device number 7 [ 297.716657][ T4187] usb 5-1: Service connection timeout for: 256 [ 297.735195][ T4187] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 297.804894][ T4187] ath9k_htc: Failed to initialize the device [ 297.900486][ T5904] usb 5-1: ath9k_htc: USB layer deinitialized [ 298.512520][ T8962] bond0: Unable to set down delay as MII monitoring is disabled [ 298.919758][ T8193] libceph: connect (1)[c::]:6789 error -101 [ 298.933710][ T8193] libceph: mon0 (1)[c::]:6789 connect error [ 298.968445][ T8193] libceph: connect (1)[c::]:6789 error -101 [ 298.975390][ T8193] libceph: mon0 (1)[c::]:6789 connect error [ 298.993149][ T8946] ceph: No mds server is up or the cluster is laggy [ 299.030820][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 299.038339][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 299.048792][ T8955] ceph: No mds server is up or the cluster is laggy [ 299.056260][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 299.074717][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 299.255600][ T8191] libceph: connect (1)[c::]:6789 error -101 [ 299.267495][ T8191] libceph: mon0 (1)[c::]:6789 connect error [ 299.360167][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 299.366449][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 299.595135][ T8983] sctp: [Deprecated]: syz.0.1159 (pid 8983) Use of int in max_burst socket option. [ 299.595135][ T8983] Use struct sctp_assoc_value instead [ 300.701377][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1163'. [ 301.018023][ C1] net_ratelimit: 23 callbacks suppressed [ 301.428852][ T9027] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 302.686221][ T9048] fuse: Bad value for 'fd' [ 303.507878][ T9048] kexec: Could not allocate control_code_buffer [ 303.605064][ T9038] loop4: detected capacity change from 0 to 512 [ 306.059363][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.067002][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.557901][ T9070] net_ratelimit: 32 callbacks suppressed [ 308.131674][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.153675][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.434820][ T9070] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.448820][ T9070] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.457896][ T9070] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.475295][ T9070] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.648070][ T9103] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1194'. [ 311.876639][ T9177] loop4: detected capacity change from 0 to 736 [ 311.898564][ C0] net_ratelimit: 20 callbacks suppressed [ 312.334109][ T9200] loop4: detected capacity change from 0 to 512 [ 312.704992][ T9213] netlink: 'syz.4.1220': attribute type 4 has an invalid length. [ 312.735210][ T9213] netlink: 'syz.4.1220': attribute type 4 has an invalid length. [ 313.210254][ T9231] dns_resolver: Unsupported content type (6) [ 316.331011][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1241'. [ 316.398623][ T9292] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1241'. [ 317.021411][ C0] net_ratelimit: 24 callbacks suppressed [ 317.129232][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143260][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.415513][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 317.578893][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 317.601489][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 317.641660][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 317.675101][ T9316] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 317.717632][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 317.789851][ T9323] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'. [ 317.810466][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 317.840407][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 317.960008][ T9300] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.311399][ T9311] syzkaller0: Caught tx_queue_len zero misconfig [ 318.642111][ T9342] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709518847) [ 318.866932][ T9342] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 322.149472][ C1] net_ratelimit: 23 callbacks suppressed [ 322.770168][ T9431] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 322.806338][ T9426] tipc: New replicast peer: 255.255.255.255 [ 322.884021][ T9426] tipc: Enabled bearer , priority 10 [ 322.936202][ T9434] device bridge_slave_0 left promiscuous mode [ 322.982064][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.115219][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1274'. [ 323.498019][ T9462] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 323.589683][ T9466] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9466] [ 325.481652][ T9473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.602117][ T9484] IPv6: sit1: Disabled Multicast RS [ 325.727271][ T9496] netlink: 'syz.7.1292': attribute type 1 has an invalid length. [ 325.873681][ T9496] 8021q: adding VLAN 0 to HW filter on device bond1 [ 325.934863][ T9499] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 326.038327][ T9499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.108678][ T9499] bond1: (slave lo): making interface the new active one [ 326.141905][ T9499] bond1: (slave lo): Enslaving as an active interface with an up link [ 326.216732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 326.229551][ T9506] netlink: 'syz.6.1294': attribute type 10 has an invalid length. [ 326.279936][ T9509] netlink: 'syz.6.1294': attribute type 10 has an invalid length. [ 326.727166][ T9521] netlink: 'syz.2.1302': attribute type 8 has an invalid length. [ 326.755794][ T9521] sch_fq: defrate 0 ignored. [ 326.780352][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 326.815035][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 326.854903][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 326.941801][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 327.262057][ T154] net_ratelimit: 11 callbacks suppressed [ 327.484017][ T5333] dummy0 speed is unknown, defaulting to 1000 [ 327.500539][ T9521] infiniband syz0: set active [ 327.507982][ T5334] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 327.532045][ T9521] infiniband syz0: added dummy0 [ 327.724917][ T9521] RDS/IB: syz0: added [ 327.732482][ T9521] smc: adding ib device syz0 with port count 1 [ 327.739087][ T9521] smc: ib device syz0 port 1 has pnetid [ 327.749720][ T4225] dummy0 speed is unknown, defaulting to 1000 [ 327.789607][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 327.878419][ T5334] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.908147][ T5334] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.050527][ T5334] usb 5-1: config 0 interface 0 has no altsetting 0 [ 328.090239][ T5334] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 328.889426][ T5334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.905524][ T5334] usb 5-1: config 0 descriptor?? [ 329.132335][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 329.322645][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 329.401873][ T5334] input: HID 12ba:0100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:12BA:0100.0004/input/input9 [ 329.514115][ T5334] sony 0003:12BA:0100.0004: input,hiddev0,hidraw0: USB HID v0.03 Device [HID 12ba:0100] on usb-dummy_hcd.4-1/input0 [ 329.674830][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 330.125411][ T9521] dummy0 speed is unknown, defaulting to 1000 [ 330.184881][ T9580] Illegal XDP return value 2047853628, expect packet loss! [ 330.867778][ T9590] overlayfs: failed to clone lowerpath [ 331.602383][ T5334] usb 5-1: USB disconnect, device number 8 [ 332.588306][ C1] net_ratelimit: 17 callbacks suppressed [ 333.030693][ T9614] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1334'. [ 335.019022][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1348'. [ 335.065036][ T9659] capability: warning: `syz.7.1348' uses 32-bit capabilities (legacy support in use) [ 335.641646][ T9675] netlink: 'syz.6.1353': attribute type 1 has an invalid length. [ 335.832060][ T9675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 335.871683][ T9676] 8021q: adding VLAN 0 to HW filter on device bond3 [ 335.882162][ T9676] bond2: (slave bond3): Enslaving as an active interface with a down link [ 335.975526][ T9681] bond2 (unregistering): (slave bond3): Releasing active interface [ 336.062187][ T9681] bond2 (unregistering): Released all slaves [ 336.331637][ T26] audit: type=1326 audit(1799428880.389:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 336.362931][ T9688] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1355'. [ 336.421075][ T26] audit: type=1326 audit(1799428880.429:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 336.506168][ T26] audit: type=1326 audit(1799428880.449:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9691 comm="syz.7.1357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea18d2159 code=0x7ffc0000 [ 336.757912][ T26] audit: type=1326 audit(1799428880.469:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 336.896913][ T26] audit: type=1326 audit(1799428880.469:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 337.546461][ T26] audit: type=1326 audit(1799428880.469:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 337.646571][ C0] net_ratelimit: 12 callbacks suppressed [ 337.688303][ T26] audit: type=1326 audit(1799428880.469:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 337.713002][ T9716] overlayfs: failed to clone lowerpath [ 337.764122][ T26] audit: type=1326 audit(1799428880.469:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 337.844095][ T26] audit: type=1326 audit(1799428880.469:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9693 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05e268098e code=0x7ffc0000 [ 337.945560][ T26] audit: type=1326 audit(1799428880.469:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9689 comm="syz.4.1356" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 338.100079][ T9725] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.208975][ T9729] netlink: 'syz.4.1371': attribute type 2 has an invalid length. [ 339.836521][ T8195] Bluetooth: hci5: command 0x0406 tx timeout [ 340.266385][ T9754] netlink: 'syz.4.1373': attribute type 4 has an invalid length. [ 341.476531][ T9783] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1387'. [ 342.648153][ T6422] net_ratelimit: 19 callbacks suppressed [ 343.448661][ T9800] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 343.679622][ T9800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.801524][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1389'. [ 343.847642][ T9805] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 344.081824][ T9820] overlayfs: failed to clone upperpath [ 344.164645][ T9820] overlayfs: failed to clone upperpath [ 344.705217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 345.632587][ T9873] overlayfs: failed to clone upperpath [ 345.695104][ T9876] syz.0.1409 sent an empty control message without MSG_MORE. [ 347.248348][ T9903] fuse: Bad value for 'fd' [ 347.750937][ T1223] net_ratelimit: 10 callbacks suppressed [ 348.382002][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1428'. [ 348.401449][ T9942] bond0: option arp_validate: invalid value (808464432) [ 348.842112][ T9958] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 348.850464][ T9958] Error parsing options; rc = [-22] [ 349.666588][ T9965] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1434'. [ 349.714168][ T9965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'. [ 349.846067][ T9971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1437'. [ 351.558387][T10029] fuse: Bad value for 'fd' [ 352.090865][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1456'. [ 352.133608][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1456'. [ 352.226199][T10043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1456'. [ 352.962434][T10043] net_ratelimit: 27 callbacks suppressed [ 352.962451][T10043] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 355.329310][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.382764][T10090] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.438829][T10090] infiniband syz0: set active [ 355.473810][ T4226] dummy0 speed is unknown, defaulting to 1000 [ 357.978668][ C1] net_ratelimit: 12 callbacks suppressed [ 357.987959][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.963457][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 360.963471][ T26] audit: type=1326 audit(1799428905.020:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.4.1498" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x0 [ 362.988223][T10232] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.996033][T10232] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.045159][ C1] net_ratelimit: 13 callbacks suppressed [ 363.799606][T10235] device bridge_slave_1 left promiscuous mode [ 363.858813][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.165169][T10235] device bridge_slave_0 left promiscuous mode [ 364.228213][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.277481][T10237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1508'. [ 365.311438][T10249] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1510'. [ 366.313680][T10271] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1516'. [ 366.369227][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1520'. [ 366.391621][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1516'. [ 366.488688][T10271] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1516'. [ 367.636214][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1525'. [ 368.496269][ C0] net_ratelimit: 18 callbacks suppressed [ 368.520142][T10301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1525'. [ 373.978090][ T4422] net_ratelimit: 9 callbacks suppressed [ 374.153722][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1560'. [ 374.391328][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88806054b800: rx timeout, send abort [ 374.891586][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888060548000: rx timeout, send abort [ 375.724497][T10435] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 375.824279][T10441] 9pnet_virtio: no channels available for device syz [ 375.857849][T10435] device bond2 entered promiscuous mode [ 375.864761][T10435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.885261][T10438] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 375.901924][T10438] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 375.914006][T10438] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 375.928255][T10438] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 376.497278][T10464] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1570'. [ 378.212988][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1576'. [ 378.504176][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.522977][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.097711][ C0] net_ratelimit: 5 callbacks suppressed [ 379.164090][T10504] device bridge1 entered promiscuous mode [ 379.492289][T10517] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1581'. [ 380.888657][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1590'. [ 381.078542][T10557] device dummy0 left promiscuous mode [ 381.124010][T10557] bridge1: port 1(dummy0) entered blocking state [ 381.427121][T10557] bridge1: port 1(dummy0) entered disabled state [ 382.015032][T10566] overlayfs: failed to clone lowerpath [ 382.101811][T10557] device dummy0 entered promiscuous mode [ 382.150214][T10563] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 382.184791][T10563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'. [ 382.195683][T10563] bridge1: port 1(dummy0) entered blocking state [ 382.202147][T10563] bridge1: port 1(dummy0) entered forwarding state [ 382.257994][T10563] bridge1: port 1(dummy0) entered disabled state [ 382.289657][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 383.441315][T10602] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1604'. [ 383.562032][T10608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.217746][ T4404] net_ratelimit: 3 callbacks suppressed [ 384.702924][T10631] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1605'. [ 384.876428][T10631] bond2: (slave vlan2): Opening slave failed [ 385.071985][T10644] IPVS: Error joining to the multicast group [ 389.337857][ T6413] net_ratelimit: 6 callbacks suppressed [ 394.388031][T10784] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.396830][T10784] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.405663][T10784] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.414688][T10784] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.460466][ T154] net_ratelimit: 3 callbacks suppressed [ 395.461451][T10810] batman_adv: batadv0: Adding interface: virt_wifi0 [ 395.499197][T10810] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.612972][T10810] batman_adv: batadv0: Interface activated: virt_wifi0 [ 400.218358][ T154] net_ratelimit: 4 callbacks suppressed [ 405.599876][T10940] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.914717][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1678'. [ 405.987702][ C0] net_ratelimit: 5 callbacks suppressed [ 406.090496][T10949] device bridge1 entered promiscuous mode [ 406.127974][T10949] device bridge1 left promiscuous mode [ 406.198581][T10949] bond2: (slave vlan2): making interface the new active one [ 406.228665][T10949] device bridge1 entered promiscuous mode [ 406.261400][T10949] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 410.598168][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 410.621033][T10995] bond1: (slave vlan2): Opening slave failed [ 411.028326][ C0] net_ratelimit: 8 callbacks suppressed [ 411.044973][T11006] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1710'. [ 414.786856][T11052] bond0: option mode: unable to set because the bond device has slaves [ 414.818210][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1713'. [ 414.842372][T11052] 8021q: VLANs not supported on bond0 [ 414.971604][T11059] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 416.199011][ T6413] net_ratelimit: 2 callbacks suppressed [ 416.974667][T11081] batman_adv: batadv0: Adding interface: virt_wifi0 [ 417.042013][T11081] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.263926][T11081] batman_adv: batadv0: Interface activated: virt_wifi0 [ 417.594244][T11099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1729'. [ 417.642959][T11099] device bond_slave_0 entered promiscuous mode [ 417.649255][T11099] device bond_slave_1 entered promiscuous mode [ 417.658975][T11099] device bond_slave_0 left promiscuous mode [ 417.664981][T11099] device bond_slave_1 left promiscuous mode [ 417.673757][T11099] bond2: (slave vlan0): making interface the new active one [ 417.682150][T11099] device bond_slave_0 entered promiscuous mode [ 417.688413][T11099] device bond_slave_1 entered promiscuous mode [ 417.695860][T11099] bond2: (slave vlan0): Enslaving as an active interface with an up link [ 419.072879][T11128] batman_adv: batadv0: Adding interface: virt_wifi0 [ 419.102695][T11128] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.167783][T11128] batman_adv: batadv0: Interface activated: virt_wifi0 [ 419.423245][T11144] device lo left promiscuous mode [ 419.429069][T11144] device tunl0 left promiscuous mode [ 419.435079][T11144] device gre0 left promiscuous mode [ 419.440930][T11144] device gretap0 left promiscuous mode [ 419.446984][T11144] device erspan0 left promiscuous mode [ 419.453124][T11144] device ip_vti0 left promiscuous mode [ 419.459275][T11144] device ip6_vti0 left promiscuous mode [ 419.465442][T11144] device sit0 left promiscuous mode [ 419.471472][T11144] device ip6tnl0 left promiscuous mode [ 419.477598][T11144] device ip6gre0 left promiscuous mode [ 419.483852][T11144] device ip6gretap0 left promiscuous mode [ 419.490423][T11144] device bridge0 left promiscuous mode [ 419.496693][T11144] device team0 left promiscuous mode [ 419.503784][T11144] device dummy0 left promiscuous mode [ 419.511529][T11144] device nlmon0 left promiscuous mode [ 419.517720][T11144] device caif0 left promiscuous mode [ 419.523796][T11144] device batadv0 left promiscuous mode [ 419.530108][T11144] device veth0 left promiscuous mode [ 419.536205][T11144] device veth1 left promiscuous mode [ 419.542284][T11144] device wg0 left promiscuous mode [ 419.547933][T11144] device wg1 left promiscuous mode [ 419.553771][T11144] device wg2 left promiscuous mode [ 419.559690][T11144] device veth0_to_bridge left promiscuous mode [ 419.567240][T11144] device veth1_to_bridge left promiscuous mode [ 419.574917][T11144] device veth0_to_bond left promiscuous mode [ 419.581709][T11144] device bond_slave_0 left promiscuous mode [ 419.588453][T11144] device veth1_to_bond left promiscuous mode [ 419.595466][T11144] device bond_slave_1 left promiscuous mode [ 419.602185][T11144] device veth0_to_team left promiscuous mode [ 419.609058][T11144] device team_slave_0 left promiscuous mode [ 419.615689][T11144] device veth1_to_team left promiscuous mode [ 419.622472][T11144] device team_slave_1 left promiscuous mode [ 419.629224][T11144] device veth0_to_batadv left promiscuous mode [ 419.636714][T11144] device batadv_slave_0 left promiscuous mode [ 419.643742][T11144] device veth1_to_batadv left promiscuous mode [ 419.650730][T11144] device batadv_slave_1 left promiscuous mode [ 419.657579][T11144] device xfrm0 left promiscuous mode [ 419.663686][T11144] device veth0_to_hsr left promiscuous mode [ 419.670738][T11144] device veth1_to_hsr left promiscuous mode [ 419.677708][T11144] device hsr0 left promiscuous mode [ 419.683921][T11144] device veth1_virt_wifi left promiscuous mode [ 419.690931][T11144] device veth0_virt_wifi left promiscuous mode [ 419.698104][T11144] device virt_wifi0 left promiscuous mode [ 419.714811][T11144] device macvtap0 left promiscuous mode [ 419.721281][T11144] device macsec0 left promiscuous mode [ 419.727559][T11144] device geneve0 left promiscuous mode [ 419.733936][T11144] device geneve1 left promiscuous mode [ 419.742209][T11144] device wlan1 left promiscuous mode [ 419.748182][T11144] device vti0 left promiscuous mode [ 419.754242][T11144] device gre1 left promiscuous mode [ 419.760270][T11144] device bond0 left promiscuous mode [ 419.767036][T11144] device wireguard0 left promiscuous mode [ 419.773641][T11144] device bond1 left promiscuous mode [ 419.780656][T11144] device gretap1 left promiscuous mode [ 419.789054][T11144] device bond2 left promiscuous mode [ 420.822250][T11155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 421.577549][ C1] net_ratelimit: 7 callbacks suppressed [ 422.570070][T11175] UBIFS error (pid: 11175): cannot open "./file0", error -22 [ 422.774791][T11179] netlink: 'syz.4.1757': attribute type 1 has an invalid length. [ 423.886471][T11179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 423.959400][T11185] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.048344][T11185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 424.125740][T11185] bond2: (slave lo): making interface the new active one [ 425.053957][T11185] bond2: (slave lo): Enslaving as an active interface with an up link [ 425.128593][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 425.269197][ T26] audit: type=1326 audit(1799428969.330:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.342012][ T26] audit: type=1326 audit(1799428969.360:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.399887][ T26] audit: type=1326 audit(1799428969.360:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.430690][ T26] audit: type=1326 audit(1799428969.370:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.460516][ T26] audit: type=1326 audit(1799428969.370:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.627103][ T26] audit: type=1326 audit(1799428969.370:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 425.741117][ T26] audit: type=1326 audit(1799428969.380:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 426.696355][ C0] net_ratelimit: 4 callbacks suppressed [ 426.775538][ T26] audit: type=1326 audit(1799428969.380:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05e26c0159 code=0x7ffc0000 [ 426.800226][ T26] audit: type=1326 audit(1799428969.380:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05e26bfdeb code=0x7ffc0000 [ 426.825270][ T26] audit: type=1326 audit(1799428969.380:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11203 comm="syz.4.1764" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05e26bfdeb code=0x7ffc0000 [ 426.895560][T11229] bond0: option mode: unable to set because the bond device has slaves [ 427.002537][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1770'. [ 427.020984][T11229] 8021q: VLANs not supported on bond0 [ 428.243360][T11258] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.251649][T11258] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.260022][T11258] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.268343][T11258] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.787092][T11273] IPv6: sit1: Disabled Multicast RS [ 429.891568][T11268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1780'. [ 430.377960][T11288] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.386871][T11288] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.395709][T11288] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 430.404510][T11288] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.066289][T11293] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 432.217513][ C1] net_ratelimit: 8 callbacks suppressed [ 433.456573][T11322] IPv6: sit2: Disabled Multicast RS [ 433.624558][T11333] netlink: 'syz.7.1800': attribute type 1 has an invalid length. [ 433.885646][T11333] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.006907][T11337] 8021q: adding VLAN 0 to HW filter on device bond4 [ 434.020093][T11337] bond3: (slave bond4): Enslaving as an active interface with a down link [ 434.029059][T11332] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1788'. [ 434.184883][T11339] bond3 (unregistering): (slave bond4): Releasing active interface [ 434.239759][T11339] bond3 (unregistering): Released all slaves [ 434.566577][T11351] netlink: 'syz.0.1814': attribute type 1 has an invalid length. [ 434.829826][T11351] 8021q: adding VLAN 0 to HW filter on device bond3 [ 436.246847][T11363] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.257277][T11363] bond3: (slave bond4): Enslaving as an active interface with a down link [ 436.268809][ T26] kauditd_printk_skb: 83 callbacks suppressed [ 436.268824][ T26] audit: type=1326 audit(1799428980.330:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.306288][T11369] bond3 (unregistering): (slave bond4): Releasing active interface [ 436.325503][T11369] bond3 (unregistering): Released all slaves [ 436.346022][ T26] audit: type=1326 audit(1799428980.370:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.376563][ T26] audit: type=1326 audit(1799428980.370:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f25fbe165ac code=0x7ffc0000 [ 436.404206][ T26] audit: type=1326 audit(1799428980.370:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f25fbe1660e code=0x7ffc0000 [ 436.454330][ T26] audit: type=1326 audit(1799428980.370:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f25fbe59deb code=0x7ffc0000 [ 436.518276][ T26] audit: type=1326 audit(1799428980.370:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.618407][ T26] audit: type=1326 audit(1799428980.380:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.714128][T11386] IPv6: sit1: Disabled Multicast RS [ 436.737521][ T26] audit: type=1326 audit(1799428980.390:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.817522][ T26] audit: type=1326 audit(1799428980.390:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 436.876934][ T26] audit: type=1326 audit(1799428980.390:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.1820" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25fbe5a159 code=0x7ffc0000 [ 437.715044][ T154] net_ratelimit: 9 callbacks suppressed [ 439.371840][T11436] tipc: Failed to remove unknown binding: 66,0,0/1958599840:3515930201/3515930203 [ 439.381549][T11436] tipc: Failed to remove unknown binding: 66,0,0/1958599840:3515930201/3515930202 [ 439.393631][T11436] tipc: Failed to remove unknown binding: 66,0,0/1958599840:3515930201/3515930203 [ 439.423759][T11442] tipc: Enabling of bearer rejected, failed to enable media [ 439.433671][T11436] tipc: Failed to remove unknown binding: 66,0,0/1958599840:3515930201/3515930202 [ 439.502705][T11438] IPv6: sit2: Disabled Multicast RS [ 439.673351][T11449] overlayfs: failed to clone upperpath [ 439.860603][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1833'. [ 439.969391][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.982650][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.056927][T11482] netlink: 'syz.2.1847': attribute type 3 has an invalid length. [ 442.459734][T11494] netlink: 'syz.7.1852': attribute type 4 has an invalid length. [ 442.495753][T11494] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1852'. [ 443.738299][ T6419] net_ratelimit: 8 callbacks suppressed [ 444.964623][T11549] xt_limit: Overflow, try lower: 1207959552/384 [ 446.517130][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 446.517144][ T26] audit: type=1326 audit(1799428990.570:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11591 comm="syz.7.1885" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea18d2159 code=0x0 [ 446.691639][T11597] overlayfs: failed to clone upperpath [ 446.926359][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 447.949542][T11613] netem: change failed [ 448.777650][ T154] net_ratelimit: 9 callbacks suppressed [ 450.274369][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 450.332723][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1908'. [ 450.343771][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1907'. [ 450.402269][T11664] device bond_slave_0 left promiscuous mode [ 450.415922][T11664] device bond_slave_1 left promiscuous mode [ 450.589482][T11664] bond2: (slave vlan0): Releasing active interface [ 450.670600][T11664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.733158][T11664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.799101][T11664] bond0 (unregistering): Released all slaves [ 451.373243][T11694] Set syz1 is full, maxelem 256 reached [ 451.600311][T11698] netlink: 'syz.7.1922': attribute type 16 has an invalid length. [ 451.621273][T11701] xt_policy: neither incoming nor outgoing policy selected [ 451.637574][T11698] netlink: 'syz.7.1922': attribute type 17 has an invalid length. [ 451.645456][T11698] netlink: 'syz.7.1922': attribute type 27 has an invalid length. [ 452.106636][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 452.186640][T11714] device hsr_slave_0 left promiscuous mode [ 452.612060][T11714] device hsr_slave_1 left promiscuous mode [ 452.971516][T11721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 452.982712][T11721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.122585][T11735] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1932'. [ 453.166756][T11721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.179091][T11721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.209604][T11735] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1932'. [ 453.228769][T11735] netlink: 'syz.7.1932': attribute type 5 has an invalid length. [ 453.239097][T11735] netlink: 43 bytes leftover after parsing attributes in process `syz.7.1932'. [ 453.347872][T11742] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 453.494624][T11721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.511353][T11721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.977683][ T6419] net_ratelimit: 13 callbacks suppressed [ 454.241813][T11721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.252270][T11721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.858197][T11721] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.867333][T11721] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.889458][T11721] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.898003][T11721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.918871][T11721] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.927421][T11721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.947026][T11721] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.955329][T11721] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.855603][T11778] ODEBUG: Out of memory. ODEBUG disabled [ 457.455175][T11780] team0 (unregistering): Port device team_slave_0 removed [ 457.599805][T11780] team0 (unregistering): Failed to send options change via netlink (err -105) [ 457.628458][T11780] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 457.671163][T11780] team0 (unregistering): Port device team_slave_1 removed [ 457.800566][T11791] tipc: Enabling of bearer rejected, failed to enable media [ 458.265151][T11809] netlink: 'syz.4.1954': attribute type 10 has an invalid length. [ 458.331671][T11810] tipc: Failed to remove unknown binding: 66,0,0/0:3059469690/3059469691 [ 458.357542][T11810] tipc: Failed to remove unknown binding: 66,0,0/0:3059469690/3059469691 [ 458.381545][T11815] tipc: Failed to remove unknown binding: 66,0,0/0:3861831002/3861831004 [ 458.668890][T11827] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1960'. [ 458.838689][T11835] netlink: 'syz.6.1960': attribute type 5 has an invalid length. [ 458.887833][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 458.924888][T11834] netlink: 'syz.2.1962': attribute type 13 has an invalid length. [ 458.939881][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1962'. [ 458.979796][T11834] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 459.017682][ C1] net_ratelimit: 6 callbacks suppressed [ 459.025384][T11827] netlink: 'syz.6.1960': attribute type 5 has an invalid length. [ 459.048664][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1960'. [ 459.572746][ T3850] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.602931][ T3850] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.654408][ T3850] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.692435][T11862] futex_wake_op: syz.7.1972 tries to shift op by 144; fix this program [ 459.720061][ T3850] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.781346][ T3850] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.833310][ T3850] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.031932][ T3850] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.197271][ T3850] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.360019][ T3850] netdevsim netdevsim5 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.490533][ T3850] netdevsim netdevsim5 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.534669][ T3850] netdevsim netdevsim5 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.584569][ T3850] netdevsim netdevsim5 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.631876][ T3850] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.640766][ T3850] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.650585][ T3850] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.668655][ T3850] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.719493][T11871] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 460.791134][T11871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 460.873867][T11872] device gretap1 entered promiscuous mode [ 460.921195][T11872] bond3: (slave gretap1): making interface the new active one [ 460.970554][T11872] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 460.999465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 463.866024][T11923] sctp: [Deprecated]: syz.6.1993 (pid 11923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 463.866024][T11923] Use struct sctp_sack_info instead [ 463.978740][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 463.988836][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 464.271412][ T4422] net_ratelimit: 9 callbacks suppressed [ 465.307911][T11960] bridge0: port 1(vxlan1) entered blocking state [ 465.377731][T11960] bridge0: port 1(vxlan1) entered disabled state [ 465.426388][T11960] device vxlan1 entered promiscuous mode [ 467.435685][T12010] xt_ipcomp: unknown flags 1D [ 469.157880][T12047] device macsec1 entered promiscuous mode [ 469.163661][T12047] device virt_wifi0 entered promiscuous mode [ 469.274101][T12047] ip6tnl0: Caught tx_queue_len zero misconfig [ 469.338141][ T6422] net_ratelimit: 9 callbacks suppressed [ 470.063295][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2027'. [ 475.045158][ T155] net_ratelimit: 8 callbacks suppressed [ 476.070259][T12152] netlink: 'syz.6.2048': attribute type 1 has an invalid length. [ 476.334524][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.400244][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'. [ 476.473816][T12163] tipc: Enabled bearer , priority 0 [ 477.889709][T12182] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2056'. [ 479.564258][T12224] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2068'. [ 479.597103][T12224] unsupported nlmsg_type 40 [ 479.775159][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2070'. [ 480.224286][ T6413] net_ratelimit: 8 callbacks suppressed [ 480.711065][ T26] audit: type=1326 audit(1799429024.770:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12242 comm="syz.4.2074" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f05e26b9ed7 code=0x0 [ 481.208817][T12262] netlink: 'syz.4.2079': attribute type 8 has an invalid length. [ 482.163202][T12274] overlayfs: failed to clone lowerpath [ 482.405614][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 484.906923][ T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 485.063205][T12331] IPv6: NLM_F_CREATE should be specified when creating new route [ 485.347465][ T1223] net_ratelimit: 12 callbacks suppressed [ 486.203209][T12345] jffs2: notice: (12345) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 487.980694][T12365] xt_connbytes: Forcing CT accounting to be enabled [ 488.136679][T12365] xt_CT: No such helper "netbios-ns" [ 488.255126][T12380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 489.337445][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.680470][T12420] net_ratelimit: 8 callbacks suppressed [ 490.680484][T12420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.712380][T12422] netlink: 'syz.2.2123': attribute type 21 has an invalid length. [ 490.766384][T12422] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2123'. [ 491.322925][T12456] tipc: Started in network mode [ 491.341164][T12456] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 491.385046][T12456] tipc: Enabled bearer , priority 10 [ 492.926389][ T5354] tipc: Node number set to 4269801488 [ 496.297661][ T1223] net_ratelimit: 9 callbacks suppressed [ 496.967191][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 498.822303][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 501.357726][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.365783][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.910068][ T4422] net_ratelimit: 8 callbacks suppressed [ 503.800913][T12630] netlink: 11834 bytes leftover after parsing attributes in process `syz.7.2180'. [ 503.878251][T12630] netlink: 'syz.7.2180': attribute type 16 has an invalid length. [ 503.903254][T12630] netlink: 'syz.7.2180': attribute type 21 has an invalid length. [ 503.957397][T12630] netlink: 'syz.7.2180': attribute type 25 has an invalid length. [ 503.995895][T12630] netlink: 'syz.7.2180': attribute type 27 has an invalid length. [ 504.047373][T12630] netlink: 'syz.7.2180': attribute type 28 has an invalid length. [ 504.065394][T12630] netlink: 'syz.7.2180': attribute type 29 has an invalid length. [ 504.073620][T12630] netlink: 'syz.7.2180': attribute type 30 has an invalid length. [ 505.263631][T12644] jffs2: notice: (12644) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 507.027299][ T6413] net_ratelimit: 9 callbacks suppressed [ 509.500183][T12703] syz.0.2204[12703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.500445][T12703] syz.0.2204[12703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.031952][T12722] jffs2: notice: (12722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 512.617442][ C1] net_ratelimit: 9 callbacks suppressed [ 513.184092][T12763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2221'. [ 513.622802][T12767] netlink: 165 bytes leftover after parsing attributes in process `syz.7.2220'. [ 514.195875][T12776] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 516.118051][T12789] jffs2: notice: (12789) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 517.347275][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.643118][ T6413] net_ratelimit: 11 callbacks suppressed [ 521.824485][T12842] netlink: 'syz.2.2245': attribute type 1 has an invalid length. [ 521.980552][T12840] overlayfs: failed to clone upperpath [ 522.021136][T12842] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.131875][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2245'. [ 522.740572][T12851] bond3: (slave bridge0): making interface the new active one [ 523.176693][T12851] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 523.217749][T12271] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 523.376736][T12862] batman_adv: batadv0: Adding interface: veth0 [ 523.420237][T12862] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.541213][T12862] batman_adv: batadv0: Interface activated: veth0 [ 523.558275][T12867] batman_adv: batadv0: Interface deactivated: veth0 [ 523.564962][T12867] batman_adv: batadv0: Removing interface: veth0 [ 523.658482][ T154] net_ratelimit: 9 callbacks suppressed [ 523.665263][T12867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.708751][T12867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.732601][T12867] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 523.768935][T12867] batman_adv: batadv0: Removing interface: virt_wifi0 [ 524.062994][T12870] netlink: 'syz.0.2252': attribute type 4 has an invalid length. [ 524.106947][T12870] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2252'. [ 526.813932][T12908] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2264'. [ 527.331554][T12908] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2264'. [ 527.350903][T12908] netlink: 'syz.4.2264': attribute type 5 has an invalid length. [ 527.414448][T12908] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2264'. [ 528.630322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.509064][ T9] net_ratelimit: 11 callbacks suppressed [ 530.837287][T12942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2269'. [ 532.654639][T12965] tipc: Failed to remove unknown binding: 66,0,0/0:1754247621/1754247623 [ 532.779327][T12965] tipc: Failed to remove unknown binding: 66,0,0/0:1754247621/1754247622 [ 533.281450][T12970] tipc: Failed to remove unknown binding: 66,0,0/0:1754247621/1754247623 [ 533.347259][T12970] tipc: Failed to remove unknown binding: 66,0,0/0:1754247621/1754247622 [ 533.422510][T12974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2279'. [ 533.456198][T12974] device hsr_slave_0 left promiscuous mode [ 533.527061][T12974] device hsr_slave_1 left promiscuous mode [ 534.567388][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 534.642626][ T4422] net_ratelimit: 7 callbacks suppressed [ 536.244294][T13005] device vlan0 entered promiscuous mode [ 536.272851][T13005] device bond0 entered promiscuous mode [ 536.327612][T13005] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2288'. [ 537.680300][T13004] device vlan0 left promiscuous mode [ 537.686507][T13004] device bond0 left promiscuous mode [ 538.780006][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2296'. [ 538.837303][T13026] device hsr_slave_0 left promiscuous mode [ 538.866595][T13026] device hsr_slave_1 left promiscuous mode [ 539.154043][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 539.184125][T13035] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2299'. [ 539.269784][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2299'. [ 539.316002][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2299'. [ 539.349546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 539.885919][ T6419] net_ratelimit: 9 callbacks suppressed [ 540.433803][T13072] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.441615][T13072] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.456425][T13072] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'. [ 540.542555][T13072] device hsr_slave_0 left promiscuous mode [ 540.575931][T13072] device hsr_slave_1 left promiscuous mode [ 541.041628][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 541.818640][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 541.856355][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 541.874051][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2314'. [ 542.173248][ T26] audit: type=1326 audit(1799429086.230:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 542.243944][ T26] audit: type=1326 audit(1799429086.230:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 542.399602][ T26] audit: type=1326 audit(1799429086.260:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 542.437351][ T26] audit: type=1326 audit(1799429086.260:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.051984][ T26] audit: type=1326 audit(1799429086.260:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.238275][ T26] audit: type=1326 audit(1799429086.260:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.263172][ T26] audit: type=1326 audit(1799429086.260:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.287769][ T26] audit: type=1326 audit(1799429086.260:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.321951][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.367493][ T26] audit: type=1326 audit(1799429086.260:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.416526][T13140] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 543.463343][ T26] audit: type=1326 audit(1799429086.260:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13117 comm="syz.0.2324" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f84f314f159 code=0x7ffc0000 [ 543.498477][T13140] CIFS mount error: No usable UNC path provided in device string! [ 543.498477][T13140] [ 543.551655][T13140] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 543.655109][T13144] netlink: 'syz.2.2333': attribute type 4 has an invalid length. [ 545.027374][T13159] xt_recent: Unsupported userspace flags (000000c5) [ 545.577201][ T6419] net_ratelimit: 7 callbacks suppressed [ 546.481708][T13194] tipc: Enabled bearer , priority 0 [ 549.633285][T13261] netlink: 276 bytes leftover after parsing attributes in process `syz.6.2374'. [ 549.975356][T13269] tipc: Enabling of bearer rejected, already enabled [ 551.257233][ T4404] net_ratelimit: 6 callbacks suppressed [ 552.892503][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 552.892517][ T26] audit: type=1326 audit(1799429096.950:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13297 comm="syz.2.2384" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25fbe5a159 code=0x0 [ 552.988691][T13301] device virt_wifi0 entered promiscuous mode [ 552.995709][T13301] device macsec1 entered promiscuous mode [ 556.279065][T13359] futex_wake_op: syz.4.2402 tries to shift op by 144; fix this program [ 556.378831][ T6413] net_ratelimit: 5 callbacks suppressed [ 556.397503][T13366] lo: Caught tx_queue_len zero misconfig [ 558.721377][T13407] netlink: 'syz.4.2417': attribute type 11 has an invalid length. [ 558.885867][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2418'. [ 559.516401][T13414] netlink: 'syz.4.2420': attribute type 4 has an invalid length. [ 559.612591][ T4422] bond2: (slave lo): link status definitely down, disabling slave [ 559.705540][ T4422] bond2: now running without any active interface! [ 562.324932][ T4422] net_ratelimit: 5 callbacks suppressed [ 562.781149][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.787535][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.217719][ T4422] net_ratelimit: 4 callbacks suppressed [ 569.334570][T13465] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.640591][T13465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.213826][T13465] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.226384][T13465] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.247298][T13465] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.256406][T13465] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.414280][T13465] tipc: Resetting bearer [ 572.506438][T13465] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.515458][T13465] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.524418][T13465] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.533436][T13465] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 572.818969][T13465] device virt_wifi0 left promiscuous mode [ 573.055987][T13522] overlayfs: failed to clone upperpath [ 573.170483][T13526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 573.481402][T13526] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 573.543709][T13526] infiniband syz0: set active [ 573.596198][T13526] net_ratelimit: 11 callbacks suppressed [ 573.596211][T13526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.709514][ T5329] dummy0 speed is unknown, defaulting to 1000 [ 575.460426][T13562] ip_tables: iptables: counters copy to user failed while replacing table [ 576.041180][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 579.428672][T13103] net_ratelimit: 4 callbacks suppressed [ 580.688538][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2475'. [ 583.367219][T13672] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2489'. [ 583.388053][T13671] tmpfs: Unknown parameter 'usrquotþ²êßm"ÌóVK\íßJa_blo' [ 583.433242][T13671] overlayfs: './file0' not a directory [ 583.461973][T13671] Error parsing options; rc = [-22] [ 583.485366][T13672] 9pnet: Insufficient options for proto=fd [ 583.723753][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2488'. [ 584.985136][ T4404] net_ratelimit: 3 callbacks suppressed [ 585.235830][T13696] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 585.877227][ T26] audit: type=1326 audit(1799429129.900:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13697 comm="syz.0.2500" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84f314f159 code=0x0 [ 588.130810][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2507'. [ 588.592461][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2509'. [ 589.861784][T13744] dummy0 speed is unknown, defaulting to 1000 [ 590.957491][ T4404] net_ratelimit: 2 callbacks suppressed [ 592.602143][T13792] sctp: [Deprecated]: syz.4.2527 (pid 13792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.602143][T13792] Use struct sctp_sack_info instead [ 592.676204][T13792] sctp: [Deprecated]: syz.4.2527 (pid 13792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.676204][T13792] Use struct sctp_sack_info instead [ 596.697319][ T1223] net_ratelimit: 2 callbacks suppressed [ 599.581711][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2560'. [ 599.634384][T13904] xt_hashlimit: max too large, truncated to 1048576 [ 600.109736][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 600.499327][T13901] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.508626][T13901] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.517404][T13901] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.526132][T13901] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.805288][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 600.838155][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 602.387704][T13940] overlayfs: failed to clone upperpath [ 602.559482][T13942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2574'. [ 602.600642][T13942] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2574'. [ 603.048881][T13961] tipc: Enabled bearer , priority 10 [ 604.081632][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.157673][T13972] device bridge_slave_1 left promiscuous mode [ 604.215116][T13972] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.331805][T13972] team0: Port device team_slave_0 removed [ 606.321781][T13972] team0: Port device team_slave_1 removed [ 606.373521][T13972] bond0: (slave wireguard0): Releasing backup interface [ 606.406646][T13972] bond1: (slave gretap1): Releasing active interface [ 606.437433][T13996] fuse: Bad value for 'fd' [ 607.038656][T13998] kAFS: No cell specified [ 607.997199][T13983] team0: Mode "" not found [ 608.124558][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2599'. [ 608.227675][T14018] fuse: blksize only supported for fuseblk [ 608.449203][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 608.783745][T14042] tipc: Started in network mode [ 608.805944][T14042] tipc: Node identity 4, cluster identity 4711 [ 608.834885][T14042] tipc: Node number set to 4 [ 608.869794][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 609.839373][T14059] ip_tables: iptables: counters copy to user failed while replacing table [ 614.207470][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.216017][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.522637][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.468275][T14077] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 616.629115][T14077] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.638184][T14077] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.648524][T14077] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.660150][T14077] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.803606][T14077] tipc: Resetting bearer [ 616.891444][T14077] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.900747][T14077] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.909688][T14077] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.909810][T14077] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 616.956899][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 616.975166][T14081] dummy0 speed is unknown, defaulting to 1000 [ 617.097314][T14129] fuse: Bad value for 'fd' [ 617.132978][T14130] netlink: 'syz.2.2630': attribute type 3 has an invalid length. [ 617.497125][ T6413] net_ratelimit: 11 callbacks suppressed [ 618.397571][T14152] netlink: 'syz.0.2639': attribute type 1 has an invalid length. [ 618.466702][T14152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.880566][T14152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.889091][T14152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.897477][T14152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.907303][T14152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.933558][T14152] bond3: (slave geneve2): making interface the new active one [ 619.711794][T14152] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 619.720917][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 620.770154][T14178] x_tables: duplicate entry at hook 3 [ 621.588438][T14176] device syzkaller0 entered promiscuous mode [ 621.784026][T14192] overlayfs: failed to clone upperpath [ 621.870150][T14198] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2651'. [ 621.973174][T14198] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2651'. [ 622.897948][T14211] overlayfs: failed to clone upperpath [ 623.930415][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2659'. [ 624.171235][T14221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2658'. [ 624.231683][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.238067][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.763411][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2665'. [ 624.871519][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 624.924071][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 625.001679][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 625.390604][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 625.811517][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2665'. [ 625.848634][T14231] overlayfs: unrecognized mount option "subj_role=workdir" or missing value [ 626.154048][T14257] ------------[ cut here ]------------ [ 626.201140][T14257] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 626.228622][T14257] WARNING: CPU: 1 PID: 14257 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 626.293663][T14257] Modules linked in: [ 626.333020][T14257] CPU: 1 PID: 14257 Comm: syz.4.2672 Not tainted syzkaller #0 [ 626.363177][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 626.461592][T14257] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 626.469953][T14257] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 626.498922][T14257] RSP: 0018:ffffc90003c5f4c0 EFLAGS: 00010246 [ 626.505272][T14257] RAX: 561e787564bb8400 RBX: 0000000000400000 RCX: 0000000000080000 [ 626.518572][T14257] RDX: ffffc9000db29000 RSI: 0000000000006d67 RDI: 0000000000006d68 [ 626.547104][T14257] RBP: 0000000000000004 R08: ffffc90003c5efe7 R09: 1ffff9200078bdfc [ 626.555340][T14257] R10: dffffc0000000000 R11: fffff5200078bdfd R12: ffff88805f64c000 [ 626.849307][T14257] R13: ffff88805f64d290 R14: ffff88807b7d0e00 R15: ffff88805f64e268 [ 627.296485][T14257] FS: 00007f05e09186c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 627.362330][T14257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.369912][T14257] CR2: 00007f25fc0ab2f8 CR3: 0000000032b18000 CR4: 00000000003506f0 [ 627.382814][T14257] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 627.393628][T14257] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 627.404391][T14257] Call Trace: [ 627.408323][T14257] [ 627.411495][T14257] ? netif_carrier_on+0xd1/0x120 [ 627.417026][T14257] ieee80211_ocb_leave+0x27f/0x320 [ 627.422207][T14257] __cfg80211_leave_ocb+0x219/0x400 [ 627.427730][T14257] cfg80211_leave_ocb+0x53/0x70 [ 627.432703][T14257] cfg80211_change_iface+0x4ec/0xe10 [ 627.438799][T14257] nl80211_set_interface+0x5b8/0x810 [ 627.444787][T14257] ? nl80211_dump_interface+0x560/0x560 [ 627.476899][T14257] ? mutex_lock_nested+0x17/0x20 [ 627.482107][T14257] ? nl80211_pre_doit+0x27b/0x540 [ 627.496889][T14257] genl_rcv_msg+0xd0b/0xfa0 [ 627.501490][T14257] ? genl_bind+0x370/0x370 [ 627.506071][T14257] ? verify_lock_unused+0x140/0x140 [ 627.506106][T14257] ? verify_lock_unused+0x140/0x140 [ 627.506153][T14257] ? nl80211_dump_interface+0x560/0x560 [ 627.506195][T14257] netlink_rcv_skb+0x1e9/0x430 [ 627.582184][T14257] ? genl_bind+0x370/0x370 [ 627.588915][T14257] ? netlink_ack+0xb10/0xb10 [ 627.593811][T14257] ? down_read+0x1aa/0x2e0 [ 627.621412][T14257] genl_rcv+0x24/0x40 [ 627.625497][T14257] netlink_unicast+0x78f/0x940 [ 627.636927][T14257] netlink_sendmsg+0x8ba/0xbe0 [ 627.641780][T14257] ? netlink_getsockopt+0x570/0x570 [ 627.656823][T14257] ? aa_sock_msg_perm+0x94/0x150 [ 627.662518][T14257] ? apparmor_socket_sendmsg+0x88/0x230 [ 627.687595][T14257] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 627.692987][T14257] ? security_socket_sendmsg+0x7c/0xa0 [ 627.706904][T14257] __sys_sendto+0x46d/0x620 [ 627.711527][T14257] ? __ia32_sys_getpeername+0x80/0x80 [ 627.726919][T14257] ? lock_chain_count+0x20/0x20 [ 627.732143][T14257] __x64_sys_sendto+0xda/0xf0 [ 627.739847][T14257] do_syscall_64+0x4c/0xa0 [ 627.744662][T14257] ? clear_bhb_loop+0x30/0x80 [ 627.756824][T14257] ? clear_bhb_loop+0x30/0x80 [ 627.761977][T14257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 627.775533][T14257] RIP: 0033:0x7f05e268098e [ 627.781974][T14257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.813417][T14257] RSP: 002b:00007f05e0916de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 627.827825][T14257] RAX: ffffffffffffffda RBX: 00007f05e09186c0 RCX: 00007f05e268098e [ 627.838059][T14257] RDX: 0000000000000024 RSI: 00007f05e0916fe0 RDI: 0000000000000003 [ 627.847711][T14257] RBP: 0000000000000000 R08: 00007f05e0916e64 R09: 000000000000000c [ 627.856939][T14257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 627.865918][T14257] R13: 0000000000000000 R14: 00007f05e0916fe0 R15: 0000000000000000 [ 627.875605][T14257] [ 627.881364][T14257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 627.888863][T14257] CPU: 0 PID: 14257 Comm: syz.4.2672 Not tainted syzkaller #0 [ 627.896971][T14257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 627.897128][ C1] nf_conntrack: new packet for ffff888068d2f980 [ 627.907403][T14257] Call Trace: [ 627.907414][T14257] [ 627.907425][T14257] dump_stack_lvl+0x188/0x250 [ 627.907457][T14257] ? show_regs_print_info+0x20/0x20 [ 627.907482][T14257] ? load_image+0x410/0x410 [ 627.913745][ C1] nf_nat: Already setup manip DST for ct ffff888068d2f980 (status bits 0x188) [ 627.917046][T14257] panic+0x2f8/0x850 [ 627.917079][T14257] ? bpf_jit_dump+0xd0/0xd0 [ 627.920355][ C1] MPTCP: msk=ffff888043a02f00 [ 627.924854][T14257] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 627.924884][T14257] __warn+0x248/0x2b0 [ 627.924904][T14257] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 627.924929][T14257] report_bug+0x1b9/0x2e0 [ 627.931157][ C1] MPTCP: msk=ffff888043a02f00 [ 627.935684][T14257] handle_bug+0x3a/0x70 [ 627.990680][T14257] exc_invalid_op+0x16/0x40 [ 627.995232][T14257] asm_exc_invalid_op+0x16/0x20 [ 628.000230][T14257] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 628.008079][T14257] Code: fe 78 f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 00 66 39 8b 4c 89 e6 89 ea e8 95 bf 71 00 <0f> 0b e9 07 fd ff ff e8 19 b9 33 f8 0f 0b e9 b1 fe ff ff e8 0d b9 [ 628.027728][T14257] RSP: 0018:ffffc90003c5f4c0 EFLAGS: 00010246 [ 628.033931][T14257] RAX: 561e787564bb8400 RBX: 0000000000400000 RCX: 0000000000080000 [ 628.042111][T14257] RDX: ffffc9000db29000 RSI: 0000000000006d67 RDI: 0000000000006d68 [ 628.050121][T14257] RBP: 0000000000000004 R08: ffffc90003c5efe7 R09: 1ffff9200078bdfc [ 628.058530][T14257] R10: dffffc0000000000 R11: fffff5200078bdfd R12: ffff88805f64c000 [ 628.066644][T14257] R13: ffff88805f64d290 R14: ffff88807b7d0e00 R15: ffff88805f64e268 [ 628.074803][T14257] ? netif_carrier_on+0xd1/0x120 [ 628.080068][T14257] ieee80211_ocb_leave+0x27f/0x320 [ 628.085264][T14257] __cfg80211_leave_ocb+0x219/0x400 [ 628.090515][T14257] cfg80211_leave_ocb+0x53/0x70 [ 628.095494][T14257] cfg80211_change_iface+0x4ec/0xe10 [ 628.100845][T14257] nl80211_set_interface+0x5b8/0x810 [ 628.106643][T14257] ? nl80211_dump_interface+0x560/0x560 [ 628.112233][T14257] ? mutex_lock_nested+0x17/0x20 [ 628.117224][T14257] ? nl80211_pre_doit+0x27b/0x540 [ 628.122814][T14257] genl_rcv_msg+0xd0b/0xfa0 [ 628.127666][T14257] ? genl_bind+0x370/0x370 [ 628.132160][T14257] ? verify_lock_unused+0x140/0x140 [ 628.137492][T14257] ? verify_lock_unused+0x140/0x140 [ 628.142755][T14257] ? nl80211_dump_interface+0x560/0x560 [ 628.148385][T14257] netlink_rcv_skb+0x1e9/0x430 [ 628.153408][T14257] ? genl_bind+0x370/0x370 [ 628.157968][T14257] ? netlink_ack+0xb10/0xb10 [ 628.162707][T14257] ? down_read+0x1aa/0x2e0 [ 628.167188][T14257] genl_rcv+0x24/0x40 [ 628.171211][T14257] netlink_unicast+0x78f/0x940 [ 628.176573][T14257] netlink_sendmsg+0x8ba/0xbe0 [ 628.181385][T14257] ? netlink_getsockopt+0x570/0x570 [ 628.186624][T14257] ? aa_sock_msg_perm+0x94/0x150 [ 628.191609][T14257] ? apparmor_socket_sendmsg+0x88/0x230 [ 628.197316][T14257] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 628.203083][T14257] ? security_socket_sendmsg+0x7c/0xa0 [ 628.209579][T14257] __sys_sendto+0x46d/0x620 [ 628.214135][T14257] ? __ia32_sys_getpeername+0x80/0x80 [ 628.219668][T14257] ? lock_chain_count+0x20/0x20 [ 628.224782][T14257] __x64_sys_sendto+0xda/0xf0 [ 628.229599][T14257] do_syscall_64+0x4c/0xa0 [ 628.234078][T14257] ? clear_bhb_loop+0x30/0x80 [ 628.239264][T14257] ? clear_bhb_loop+0x30/0x80 [ 628.244107][T14257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 628.250042][T14257] RIP: 0033:0x7f05e268098e [ 628.254690][T14257] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 628.275452][T14257] RSP: 002b:00007f05e0916de8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 628.284323][T14257] RAX: ffffffffffffffda RBX: 00007f05e09186c0 RCX: 00007f05e268098e [ 628.293514][T14257] RDX: 0000000000000024 RSI: 00007f05e0916fe0 RDI: 0000000000000003 [ 628.301941][T14257] RBP: 0000000000000000 R08: 00007f05e0916e64 R09: 000000000000000c [ 628.310550][T14257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 628.318587][T14257] R13: 0000000000000000 R14: 00007f05e0916fe0 R15: 0000000000000000 [ 628.326903][T14257] [ 628.330812][T14257] Kernel Offset: disabled [ 628.335706][T14257] Rebooting in 86400 seconds..