last executing test programs: 3m11.809866593s ago: executing program 1 (id=505): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, 0x0) 3m10.427425578s ago: executing program 1 (id=510): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m7.068330106s ago: executing program 1 (id=513): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 3m6.541796131s ago: executing program 1 (id=517): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@abort}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x2, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c000020c00200", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c20ff50c07ff2e50d000f000000000000000000004000", [0x0, 0x6]}) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) 3m3.750916502s ago: executing program 1 (id=532): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080) 3m2.357127167s ago: executing program 1 (id=538): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m1.839305942s ago: executing program 32 (id=538): syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.430376875s ago: executing program 4 (id=1153): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="25a688a800a34400000012f2c834", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.381848867s ago: executing program 0 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.155230168s ago: executing program 4 (id=1156): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 5.08994376s ago: executing program 0 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000140)={0x8001, 0x2, 0x10000}) recvfrom(r2, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) 4.45530328s ago: executing program 3 (id=1160): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) userfaultfd(0x801) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0xc0800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)) 4.323280367s ago: executing program 3 (id=1162): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x200000, &(0x7f0000000100), 0x1, 0x50d, &(0x7f0000001bc0)="$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") getgroups(0x0, 0x0) chown(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000280)='.\x00', 0x0, 0xca3, 0x0) 4.089691468s ago: executing program 0 (id=1163): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.283852006s ago: executing program 0 (id=1164): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="25a688a800a34400000012f2c834", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.108428114s ago: executing program 0 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000000000000021"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000000000)='./file0\x00', 0x20c443, &(0x7f0000000100)={[{@noquota}, {@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@noquota}]}, 0x1, 0x5d71, &(0x7f0000005d80)="$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") syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000000000000000100010000060202020202020101822d1a00080800000000000000800900e7"], 0x54) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 3.102255464s ago: executing program 4 (id=1167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xd, @loopback, 0x9}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x40180, 0x0) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x7, 0x0, &(0x7f0000000100)="e09f547ed3f02d", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r0, 0x1) 3.056458656s ago: executing program 3 (id=1168): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(0x3) 2.831020577s ago: executing program 3 (id=1170): setuid(0xee00) r0 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.698423563s ago: executing program 3 (id=1171): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f0000000140)={0x8001, 0x2, 0x10000}) recvfrom(r2, &(0x7f0000001780)=""/4101, 0x1010, 0x400020a4, 0x0, 0xba) 2.665747105s ago: executing program 2 (id=1172): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c1122334400080000000500050000000580080008"], 0x4a) 2.462382494s ago: executing program 4 (id=1173): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES8, @ANYBLOB="af613ac396302976355ad642f567454761bf62bd96d53f7b4c0ce4df073d5b251e5027f898b9ccf422b304288c11ab43e98e30b1b49aa480cc9a808376289d5520abf1207c6024490e3fb1cb337c9129c962414367a2bcc7656c8ac0d7eec773ece3134e900384d26b81d4282ecce12200457d123eefb177bf2adc6b96ec2c93a653491e45a05d268e5fba0e", @ANYBLOB, @ANYRES16=0x0], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) tkill(0x0, 0x2a) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000001900)={r6}, &(0x7f0000000340)=0x8) 2.12870086s ago: executing program 2 (id=1174): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1100000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="25a688a800a34400000012f2c834", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.573592266s ago: executing program 3 (id=1175): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/245, 0xf5}], 0x1}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 1.339137887s ago: executing program 2 (id=1176): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.247869311s ago: executing program 4 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xb, &(0x7f0000000240)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xbd, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.126321227s ago: executing program 2 (id=1178): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(0x3) 1.04844658s ago: executing program 4 (id=1179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) close(0x3) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) r4 = openat$tun(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="6b25986300b30600fc010000000000000000000000000000ff0200000000000000000000000000016c06040306080000fe8000000000000000000000000000bb00000000000000000000ffffac1414aafc00000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="7001feff9078000b220c1fbd64270d790044e1a5fea729d901ee22d318f11fe1521b140606e2d4c3d97bd10000000700000008fe0df989a54928de5e48ca582a020400010411e486d6446b102af749c19dbe3e8aa24321e2bfc3d901010000e565807f183ebdc0c69dd09c7643b937f8000000000000"], 0xdb) syz_emit_ethernet(0x10ee, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 959.064005ms ago: executing program 2 (id=1180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x6c, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9f, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 45.448148ms ago: executing program 0 (id=1181): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r1, r2) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004081}, 0x4004040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x4, 0x8000, 0x4, 0xffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x401}, 0x0, 0x0) 0s ago: executing program 2 (id=1182): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000019080)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) kernel console output (not intermixed with test programs): 1024 [ 136.460859][ T6360] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 136.553625][ T6360] JBD2: no valid journal superblock found [ 136.617961][ T6360] EXT4-fs (loop3): Could not load journal inode [ 138.154081][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.915836][ T6400] loop2: detected capacity change from 0 to 512 [ 139.991878][ T6400] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 140.059641][ T6405] xt_bpf: check failed: parse error [ 140.293873][ T6400] EXT4-fs (loop2): orphan cleanup on readonly fs [ 140.461937][ T6400] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.178: Block bitmap for bg 0 marked uninitialized [ 140.685087][ T6400] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.772782][ T6400] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.178: Block bitmap for bg 0 marked uninitialized [ 140.898456][ T6400] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 140.945496][ T6400] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.178: Block bitmap for bg 0 marked uninitialized [ 141.020509][ T6400] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 142.127207][ T6414] loop1: detected capacity change from 0 to 512 [ 142.137018][ T6414] EXT4-fs: Ignoring removed bh option [ 142.209641][ T6400] EXT4-fs (loop2): 1 orphan inode deleted [ 142.247865][ T6400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.295651][ T6414] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.182: corrupted in-inode xattr: e_value size too large [ 142.319197][ T6414] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.182: couldn't read orphan inode 15 (err -117) [ 142.333135][ T6414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.696352][ T6400] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 143.151107][ T6422] xt_bpf: check failed: parse error [ 143.680836][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.729256][ T6400] EXT4-fs: error -4 creating inode table initialization thread [ 143.737212][ T6400] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 143.880733][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.104218][ T6467] loop3: detected capacity change from 0 to 1024 [ 147.143935][ T6467] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 147.199126][ T6467] JBD2: no valid journal superblock found [ 147.234495][ T6467] EXT4-fs (loop3): Could not load journal inode [ 149.955376][ T6484] loop3: detected capacity change from 0 to 512 [ 149.970139][ T6484] EXT4-fs: Ignoring removed bh option [ 150.067452][ T6484] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.204: corrupted in-inode xattr: e_value size too large [ 150.085180][ T6484] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.204: couldn't read orphan inode 15 (err -117) [ 150.128521][ T6484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.864754][ T6496] xt_bpf: check failed: parse error [ 153.891007][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.692527][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 155.752548][ T6537] xt_bpf: check failed: parse error [ 155.911477][ T6539] ======================================================= [ 155.911477][ T6539] WARNING: The mand mount option has been deprecated and [ 155.911477][ T6539] and is ignored by this kernel. Remove the mand [ 155.911477][ T6539] option from the mount to silence this warning. [ 155.911477][ T6539] ======================================================= [ 156.177032][ T28] audit: type=1326 audit(1790097026.999:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 156.225791][ T28] audit: type=1326 audit(1790097026.999:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 156.304119][ T6553] ip_tables: iptables: counters copy to user failed while replacing table [ 156.605905][ T28] audit: type=1326 audit(1790097026.999:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f489415e98e code=0x7ffc0000 [ 157.148237][ T28] audit: type=1326 audit(1790097026.999:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.184085][ T28] audit: type=1326 audit(1790097026.999:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.274223][ T6557] loop1: detected capacity change from 0 to 1024 [ 157.288295][ T28] audit: type=1326 audit(1790097026.999:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.399325][ T6557] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 157.438084][ T28] audit: type=1326 audit(1790097026.999:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.494263][ T6557] JBD2: no valid journal superblock found [ 157.573837][ T6557] EXT4-fs (loop1): Could not load journal inode [ 157.609903][ T28] audit: type=1326 audit(1790097026.999:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.687731][ T28] audit: type=1326 audit(1790097026.999:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 157.749308][ T6564] loop2: detected capacity change from 0 to 512 [ 157.762769][ T6564] EXT4-fs: Ignoring removed bh option [ 158.002642][ T6564] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.226: corrupted in-inode xattr: e_value size too large [ 158.021008][ T6564] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.226: couldn't read orphan inode 15 (err -117) [ 158.044780][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.406112][ T28] audit: type=1326 audit(1790097026.999:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.3.224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489419e159 code=0x7ffc0000 [ 158.658026][ T6542] Set syz0 is full, maxelem 65536 reached [ 159.344801][ T5827] IPVS: starting estimator thread 0... [ 159.830044][ T6583] IPVS: using max 18 ests per chain, 43200 per kthread [ 160.541723][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.359176][ T6621] FAULT_INJECTION: forcing a failure. [ 162.359176][ T6621] name failslab, interval 1, probability 0, space 0, times 0 [ 162.433678][ T6621] CPU: 1 PID: 6621 Comm: syz.3.244 Not tainted syzkaller #0 [ 162.441076][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.451189][ T6621] Call Trace: [ 162.454511][ T6621] [ 162.457484][ T6621] dump_stack_lvl+0x18c/0x250 [ 162.462266][ T6621] ? show_regs_print_info+0x20/0x20 [ 162.467544][ T6621] ? load_image+0x420/0x420 [ 162.472118][ T6621] ? __might_sleep+0xe0/0xe0 [ 162.476769][ T6621] ? __lock_acquire+0x7d80/0x7d80 [ 162.481858][ T6621] should_fail_ex+0x394/0x4c0 [ 162.486592][ T6621] should_failslab+0x9/0x20 [ 162.491140][ T6621] slab_pre_alloc_hook+0x59/0x300 [ 162.496213][ T6621] ? kvmalloc_node+0x70/0x180 [ 162.500924][ T6621] ? kvmalloc_node+0x70/0x180 [ 162.505627][ T6621] __kmem_cache_alloc_node+0x53/0x250 [ 162.511035][ T6621] ? kvmalloc_node+0x70/0x180 [ 162.515747][ T6621] __kmalloc_node+0xa6/0x240 [ 162.520375][ T6621] kvmalloc_node+0x70/0x180 [ 162.524915][ T6621] pfifo_fast_init+0x363/0x6a0 [ 162.529715][ T6621] qdisc_create_dflt+0x11e/0x430 [ 162.534692][ T6621] mq_init+0x2c7/0x660 [ 162.538810][ T6621] ? trace_net_dev_xmit_timeout+0x1c0/0x1c0 [ 162.544757][ T6621] ? qdisc_alloc+0x7a2/0xa80 [ 162.549386][ T6621] qdisc_create_dflt+0x11e/0x430 [ 162.554356][ T6621] ? dev_activate+0x1bb/0x1160 [ 162.559162][ T6621] dev_activate+0x1e0/0x1160 [ 162.563796][ T6621] __dev_open+0x347/0x430 [ 162.568161][ T6621] ? dev_open+0x190/0x190 [ 162.572529][ T6621] __dev_change_flags+0x1e8/0x6a0 [ 162.577595][ T6621] ? dev_load+0x21/0x1f0 [ 162.581882][ T6621] ? __lock_acquire+0x7d80/0x7d80 [ 162.586956][ T6621] ? dev_get_flags+0x1c0/0x1c0 [ 162.591780][ T6621] ? full_name_hash+0x92/0xe0 [ 162.596503][ T6621] dev_change_flags+0x7c/0x1a0 [ 162.601342][ T6621] dev_ioctl+0x7b4/0x1140 [ 162.605726][ T6621] sock_do_ioctl+0x239/0x310 [ 162.610373][ T6621] ? sock_show_fdinfo+0xb0/0xb0 [ 162.615290][ T6621] sock_ioctl+0x5be/0x7e0 [ 162.619662][ T6621] ? sock_poll+0x3e0/0x3e0 [ 162.624125][ T6621] ? bpf_lsm_file_ioctl+0x9/0x10 [ 162.629094][ T6621] ? security_file_ioctl+0x80/0xa0 [ 162.634250][ T6621] ? sock_poll+0x3e0/0x3e0 [ 162.638696][ T6621] __se_sys_ioctl+0xfd/0x170 [ 162.643321][ T6621] do_syscall_64+0x55/0xb0 [ 162.647803][ T6621] ? clear_bhb_loop+0x40/0x90 [ 162.652520][ T6621] ? clear_bhb_loop+0x40/0x90 [ 162.657230][ T6621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.663161][ T6621] RIP: 0033:0x7f489419e159 [ 162.667600][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.687237][ T6621] RSP: 002b:00007f4894fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.695726][ T6621] RAX: ffffffffffffffda RBX: 00007f4894425fa0 RCX: 00007f489419e159 [ 162.703740][ T6621] RDX: 00002000000000c0 RSI: 0000000000008914 RDI: 0000000000000006 [ 162.711739][ T6621] RBP: 00007f489423506b R08: 0000000000000000 R09: 0000000000000000 [ 162.719735][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.727735][ T6621] R13: 00007f4894426038 R14: 00007f4894425fa0 R15: 00007ffc9c900518 [ 162.735746][ T6621] [ 162.967809][ T6621] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 165.408049][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 165.986972][ T6672] xt_bpf: check failed: parse error [ 166.783277][ T6680] loop2: detected capacity change from 0 to 512 [ 166.895890][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.985618][ T6680] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.321139][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.190295][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 168.638662][ T6719] syz_tun: entered allmulticast mode [ 169.553634][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'. [ 169.685888][ T6742] loop3: detected capacity change from 0 to 512 [ 169.699235][ T6742] EXT4-fs: Ignoring removed bh option [ 169.887967][ T6742] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.285: corrupted in-inode xattr: e_value size too large [ 169.905182][ T6742] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.285: couldn't read orphan inode 15 (err -117) [ 169.927353][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.389006][ T6759] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 171.560683][ T6762] syz_tun: entered allmulticast mode [ 171.786588][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.421422][ T6779] loop3: detected capacity change from 0 to 512 [ 172.433250][ T6779] EXT4-fs: Ignoring removed bh option [ 172.738407][ T6779] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.295: corrupted in-inode xattr: e_value size too large [ 172.760896][ T6779] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.295: couldn't read orphan inode 15 (err -117) [ 172.781531][ T6779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.846823][ T6779] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #12: comm syz.3.295: corrupted in-inode xattr: bad e_name length [ 173.878236][ T6793] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 174.618696][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.867520][ T6810] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 175.217726][ T6821] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 175.298297][ T6824] xt_bpf: check failed: parse error [ 177.250384][ T6846] device-mapper: ioctl: name not supplied when creating device [ 177.470173][ T6850] syz_tun: entered allmulticast mode [ 178.932751][ T6877] device-mapper: ioctl: name not supplied when creating device [ 179.453705][ T6887] xt_bpf: check failed: parse error [ 181.547152][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 182.699999][ T6917] loop1: detected capacity change from 0 to 32768 [ 182.727520][ T6917] Only 4K block size supported! [ 182.749055][ T6917] Mount JFS Failure: -22 [ 182.787829][ T6917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.975547][ T6954] syz_tun: entered allmulticast mode [ 187.484722][ T7003] loop3: detected capacity change from 0 to 32768 [ 187.508928][ T7003] Only 4K block size supported! [ 187.516561][ T7003] Mount JFS Failure: -22 [ 187.532391][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.614864][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 188.457685][ T7054] loop3: detected capacity change from 0 to 1024 [ 188.512340][ T7054] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 188.540712][ T7054] JBD2: no valid journal superblock found [ 188.576224][ T7054] EXT4-fs (loop3): Could not load journal inode [ 190.998032][ T7098] loop2: detected capacity change from 0 to 1024 [ 191.042140][ T7098] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 191.097441][ T7098] JBD2: no valid journal superblock found [ 191.130100][ T7098] EXT4-fs (loop2): Could not load journal inode [ 191.398287][ T7079] loop3: detected capacity change from 0 to 32768 [ 191.444647][ T7079] Only 4K block size supported! [ 191.449803][ T7079] Mount JFS Failure: -22 [ 191.509766][ T6306] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.968678][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.410411][ T7122] xt_bpf: check failed: parse error [ 194.474639][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.498941][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.572703][ T7158] loop3: detected capacity change from 0 to 32768 [ 195.594541][ T7158] Only 4K block size supported! [ 195.634704][ T7158] Mount JFS Failure: -22 [ 195.674984][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.040977][ T7190] loop2: detected capacity change from 0 to 1024 [ 196.105436][ T7190] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 196.183526][ T7190] JBD2: no valid journal superblock found [ 196.258883][ T7190] EXT4-fs (loop2): Could not load journal inode [ 199.860711][ T7247] loop3: detected capacity change from 0 to 32768 [ 199.883939][ T7247] Only 4K block size supported! [ 199.941979][ T7247] Mount JFS Failure: -22 [ 200.018945][ T7247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.179870][ T7260] loop2: detected capacity change from 0 to 512 [ 200.192788][ T7260] EXT4-fs: Ignoring removed bh option [ 200.433717][ T7260] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.431: corrupted in-inode xattr: e_value size too large [ 200.452208][ T7260] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.431: couldn't read orphan inode 15 (err -117) [ 200.478283][ T7260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.566069][ T7260] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #12: comm syz.2.431: corrupted in-inode xattr: bad e_name length [ 202.265497][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.613338][ T7288] loop2: detected capacity change from 0 to 1024 [ 202.640099][ T7288] EXT4-fs: quotafile must be on filesystem root [ 204.924889][ T7323] loop3: detected capacity change from 0 to 512 [ 204.938638][ T7323] EXT4-fs: Ignoring removed bh option [ 205.249008][ T7323] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.445: corrupted in-inode xattr: e_value size too large [ 205.265137][ T7323] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.445: couldn't read orphan inode 15 (err -117) [ 205.289469][ T7323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.061435][ T7331] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 206.558495][ T7308] loop2: detected capacity change from 0 to 32768 [ 206.651945][ T7308] Only 4K block size supported! [ 206.656885][ T7308] Mount JFS Failure: -22 [ 206.772236][ T7307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.070977][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.224533][ T7351] loop1: detected capacity change from 0 to 512 [ 207.308245][ T7351] EXT4-fs: Ignoring removed bh option [ 207.438931][ T7351] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.452: corrupted in-inode xattr: e_value size too large [ 207.561530][ T7351] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.452: couldn't read orphan inode 15 (err -117) [ 207.625909][ T7351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.048745][ T7368] xt_bpf: check failed: parse error [ 208.678257][ T7367] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 209.955572][ T7383] loop2: detected capacity change from 0 to 512 [ 209.963351][ T7383] EXT4-fs: Ignoring removed bh option [ 210.346560][ T7383] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.463: corrupted in-inode xattr: e_value size too large [ 210.362418][ T7383] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.463: couldn't read orphan inode 15 (err -117) [ 210.395676][ T7383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.587968][ T7394] loop3: detected capacity change from 0 to 512 [ 211.649260][ T7394] EXT4-fs (loop3): bad s_min_extra_isize: 544 [ 212.120765][ T5797] I/O error, dev loop3, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 212.131641][ T7394] loop3: detected capacity change from 0 to 1024 [ 212.167722][ T7394] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 212.183971][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.195268][ T7394] JBD2: no valid journal superblock found [ 212.210450][ T7394] EXT4-fs (loop3): Could not load journal inode [ 212.462006][ T7396] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 213.734506][ T7389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.096009][ T7410] IPv6: Can't replace route, no match found [ 214.246919][ T7412] xt_bpf: check failed: parse error [ 214.997738][ T7415] loop3: detected capacity change from 0 to 1024 [ 215.036488][ T7415] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 215.121982][ T7415] JBD2: no valid journal superblock found [ 215.144976][ T7415] EXT4-fs (loop3): Could not load journal inode [ 217.032652][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 217.038892][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 217.044940][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 217.564392][ T1207] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 217.769085][ T1207] usb 3-1: Using ep0 maxpacket: 8 [ 217.788999][ T1207] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.810854][ T1207] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 217.832824][ T1207] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 217.853227][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.041968][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.134322][ T7437] loop3: detected capacity change from 0 to 32768 [ 218.170484][ T7437] Only 4K block size supported! [ 218.182835][ T7437] Mount JFS Failure: -22 [ 218.223517][ T7437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.247503][ T7444] FAULT_INJECTION: forcing a failure. [ 218.247503][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 218.280226][ T7444] CPU: 1 PID: 7444 Comm: syz.1.487 Not tainted syzkaller #0 [ 218.287692][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.297895][ T7444] Call Trace: [ 218.301267][ T7444] [ 218.304236][ T7444] dump_stack_lvl+0x18c/0x250 [ 218.308971][ T7444] ? show_regs_print_info+0x20/0x20 [ 218.314254][ T7444] ? load_image+0x420/0x420 [ 218.318817][ T7444] ? __might_sleep+0xe0/0xe0 [ 218.323461][ T7444] ? __lock_acquire+0x7d80/0x7d80 [ 218.328533][ T7444] should_fail_ex+0x394/0x4c0 [ 218.333261][ T7444] should_failslab+0x9/0x20 [ 218.337813][ T7444] slab_pre_alloc_hook+0x59/0x300 [ 218.342883][ T7444] kmem_cache_alloc+0x5a/0x2c0 [ 218.347770][ T7444] ? security_inode_alloc+0x34/0x110 [ 218.353124][ T7444] security_inode_alloc+0x34/0x110 [ 218.358280][ T7444] inode_init_always+0x914/0xc90 [ 218.363255][ T7444] new_inode_pseudo+0x95/0x1d0 [ 218.368059][ T7444] __sock_create+0x12d/0x940 [ 218.372687][ T7444] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 218.378707][ T7444] __sys_socket+0xd7/0x1b0 [ 218.383164][ T7444] __x64_sys_socket+0x7a/0x90 [ 218.387872][ T7444] do_syscall_64+0x55/0xb0 [ 218.392431][ T7444] ? clear_bhb_loop+0x40/0x90 [ 218.397147][ T7444] ? clear_bhb_loop+0x40/0x90 [ 218.401862][ T7444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.407793][ T7444] RIP: 0033:0x7f727f19e159 [ 218.412239][ T7444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.431878][ T7444] RSP: 002b:00007f728012b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 218.440325][ T7444] RAX: ffffffffffffffda RBX: 00007f727f425fa0 RCX: 00007f727f19e159 [ 218.448324][ T7444] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 218.456317][ T7444] RBP: 00007f727f23506b R08: 0000000000000000 R09: 0000000000000000 [ 218.464311][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.472304][ T7444] R13: 00007f727f426038 R14: 00007f727f425fa0 R15: 00007ffeb8db2878 [ 218.480320][ T7444] [ 218.484717][ T7444] socket: no more sockets [ 218.702411][ T7448] loop1: detected capacity change from 0 to 128 [ 219.372086][ T7450] xt_bpf: check failed: parse error [ 219.968604][ T7455] loop3: detected capacity change from 0 to 1024 [ 220.012363][ T7455] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 220.054629][ T7431] loop2: detected capacity change from 0 to 32768 [ 220.072726][ T7455] JBD2: no valid journal superblock found [ 220.113979][ T7455] EXT4-fs (loop3): Could not load journal inode [ 220.178009][ T7431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.480 (7431) [ 220.708098][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.495'. [ 220.858670][ T23] usb 3-1: USB disconnect, device number 2 [ 221.253452][ T7470] FAULT_INJECTION: forcing a failure. [ 221.253452][ T7470] name failslab, interval 1, probability 0, space 0, times 0 [ 221.267665][ T7470] CPU: 1 PID: 7470 Comm: syz.2.497 Not tainted syzkaller #0 [ 221.275028][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.285130][ T7470] Call Trace: [ 221.288448][ T7470] [ 221.291426][ T7470] dump_stack_lvl+0x18c/0x250 [ 221.296167][ T7470] ? show_regs_print_info+0x20/0x20 [ 221.301423][ T7470] ? load_image+0x420/0x420 [ 221.305984][ T7470] ? __lock_acquire+0x7d80/0x7d80 [ 221.311067][ T7470] should_fail_ex+0x394/0x4c0 [ 221.315809][ T7470] should_failslab+0x9/0x20 [ 221.320368][ T7470] slab_pre_alloc_hook+0x59/0x300 [ 221.325458][ T7470] kmem_cache_alloc_lru+0x4d/0x2b0 [ 221.330626][ T7470] ? sock_alloc_inode+0x28/0xc0 [ 221.335539][ T7470] sock_alloc_inode+0x28/0xc0 [ 221.340268][ T7470] ? sockfs_init_fs_context+0xb0/0xb0 [ 221.345694][ T7470] new_inode_pseudo+0x63/0x1d0 [ 221.350514][ T7470] __sock_create+0x12d/0x940 [ 221.355155][ T7470] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 221.361208][ T7470] __sys_socket+0xd7/0x1b0 [ 221.365779][ T7470] __x64_sys_socket+0x7a/0x90 [ 221.370519][ T7470] do_syscall_64+0x55/0xb0 [ 221.374999][ T7470] ? clear_bhb_loop+0x40/0x90 [ 221.379742][ T7470] ? clear_bhb_loop+0x40/0x90 [ 221.384478][ T7470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.390433][ T7470] RIP: 0033:0x7f3206d9e159 [ 221.394895][ T7470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.414559][ T7470] RSP: 002b:00007f3207c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 221.423026][ T7470] RAX: ffffffffffffffda RBX: 00007f3207025fa0 RCX: 00007f3206d9e159 [ 221.431045][ T7470] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 221.439058][ T7470] RBP: 00007f3206e3506b R08: 0000000000000000 R09: 0000000000000000 [ 221.447246][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.455259][ T7470] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 221.463297][ T7470] [ 222.147037][ T7470] socket: no more sockets [ 222.163118][ T7467] loop1: detected capacity change from 0 to 1024 [ 222.190530][ T7467] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 222.283282][ T7467] JBD2: no valid journal superblock found [ 222.336777][ T7467] EXT4-fs (loop1): Could not load journal inode [ 223.105449][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'. [ 223.347691][ T7498] loop2: detected capacity change from 0 to 764 [ 223.456830][ T7480] loop3: detected capacity change from 0 to 32768 [ 223.515038][ T7501] serio: Serial port ttyS3 [ 224.080876][ T7480] Only 4K block size supported! [ 224.116365][ T7480] Mount JFS Failure: -22 [ 224.172924][ T7480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.878519][ T7515] loop2: detected capacity change from 0 to 512 [ 224.886260][ T7515] EXT4-fs: Ignoring removed bh option [ 227.770587][ T7515] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 227.770962][ T7515] EXT4-fs: failed to create workqueue [ 227.786010][ T7515] EXT4-fs (loop2): mount failed [ 228.218511][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 228.435741][ T7527] loop1: detected capacity change from 0 to 512 [ 228.527651][ T7527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.630417][ T7527] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.079152][ T7537] loop1: detected capacity change from 512 to 0 [ 229.267755][ T2994] loop: Write error at byte offset 9223372036854831103, length 2048. [ 229.657021][ C1] I/O error, dev loop1, sector 108 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 229.667440][ C1] Buffer I/O error on dev loop1, logical block 27, lost sync page write [ 229.688360][ T7527] EXT4-fs error (device loop1): ext4_ext_insert_extent:2206: inode #16: block 27: comm syz.1.517: IO error syncing itable block [ 229.781181][ T7527] syz.1.517: attempt to access beyond end of device [ 229.781181][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 229.813054][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 229.822425][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 229.838692][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 229.852336][ T7527] syz.1.517: attempt to access beyond end of device [ 229.852336][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 229.866221][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 229.874615][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 229.885704][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 229.906941][ T7527] syz.1.517: attempt to access beyond end of device [ 229.906941][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 229.925807][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 229.935368][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 229.947015][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.008990][ T7527] syz.1.517: attempt to access beyond end of device [ 230.008990][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.034177][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 230.089149][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.113984][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.152360][ T7527] syz.1.517: attempt to access beyond end of device [ 230.152360][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.198615][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 230.242435][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.253113][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.294053][ T7527] syz.1.517: attempt to access beyond end of device [ 230.294053][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.308368][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 230.323787][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.332320][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.345990][ T7527] syz.1.517: attempt to access beyond end of device [ 230.345990][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.375230][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 230.405335][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.419724][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.442719][ T7558] loop2: detected capacity change from 0 to 128 [ 230.444770][ T7527] syz.1.517: attempt to access beyond end of device [ 230.444770][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.480657][ T7558] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.498482][ T7558] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.518973][ T7527] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 230.571306][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.578369][ T7527] syz.1.517: attempt to access beyond end of device [ 230.578369][ T7527] loop1: rw=14337, sector=108, nr_sectors = 4 limit=0 [ 230.592852][ T7527] Buffer I/O error on dev loop1, logical block 27, lost sync page write [ 230.601433][ T7527] EXT4-fs error (device loop1): ext4_ext_rm_leaf:2755: inode #16: block 27: comm syz.1.517: IO error syncing itable block [ 230.615872][ T7527] syz.1.517: attempt to access beyond end of device [ 230.615872][ T7527] loop1: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 230.629240][ T7527] EXT4-fs (loop1): I/O error while writing superblock [ 230.636364][ T7527] EXT4-fs error (device loop1): ext4_check_bdev_write_error:225: comm syz.1.517: Error while async write back metadata [ 230.685777][ T7527] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 38) [ 230.710834][ T7527] Buffer I/O error on device loop1, logical block 38 [ 230.717896][ T7527] Buffer I/O error on device loop1, logical block 39 [ 230.738547][ T7527] Buffer I/O error on device loop1, logical block 40 [ 230.745311][ T7527] Buffer I/O error on device loop1, logical block 41 [ 230.766236][ T7527] Buffer I/O error on device loop1, logical block 42 [ 230.774323][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.783979][ T7527] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 20) [ 230.807844][ T7527] Buffer I/O error on device loop1, logical block 20 [ 230.825588][ T7527] Buffer I/O error on device loop1, logical block 21 [ 230.832351][ T7527] Buffer I/O error on device loop1, logical block 22 [ 230.846484][ T7527] Buffer I/O error on device loop1, logical block 23 [ 230.854194][ T7527] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 44) [ 230.938089][ T7527] Buffer I/O error on device loop1, logical block 44 [ 230.955382][ T7527] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 24) [ 230.973084][ T7527] EXT4-fs warning (device loop1): ext4_end_bio:357: I/O error 10 writing to inode 16 starting block 48) [ 231.006391][ T7566] capability: warning: `syz.2.530' uses deprecated v2 capabilities in a way that may be insecure [ 231.051777][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 231.104824][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 231.120981][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 231.167601][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 231.194307][ T5780] EXT4-fs warning (device loop1): ext4_empty_dir:3141: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 231.213711][ T7571] loop2: detected capacity change from 0 to 1024 [ 231.230077][ T7571] EXT4-fs: quotafile must be on filesystem root [ 231.292614][ T5797] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.218667][ T5780] syz_tun (unregistering): left allmulticast mode [ 232.442090][ T5780] syz-executor (5780) used greatest stack depth: 20936 bytes left [ 232.443006][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.556801][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.845640][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.967628][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.070560][ T7591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.541'. [ 233.397223][ T7593] loop3: detected capacity change from 0 to 512 [ 233.404865][ T7593] EXT4-fs: Ignoring removed bh option [ 233.422424][ T7593] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.542: corrupted in-inode xattr: e_value size too large [ 233.437972][ T7593] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.542: couldn't read orphan inode 15 (err -117) [ 233.468330][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.704118][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.713950][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.730694][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.749151][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.757579][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.768941][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.837953][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 233.838027][ T28] audit: type=1326 audit(1790097104.659:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.093853][ T28] audit: type=1326 audit(1790097104.659:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.186721][ T28] audit: type=1326 audit(1790097104.719:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.222278][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.229397][ T28] audit: type=1326 audit(1790097104.769:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.337353][ T28] audit: type=1326 audit(1790097104.769:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.366423][ T7611] FAULT_INJECTION: forcing a failure. [ 234.366423][ T7611] name fail_futex, interval 1, probability 0, space 0, times 0 [ 234.409508][ T7611] CPU: 1 PID: 7611 Comm: syz.2.546 Not tainted syzkaller #0 [ 234.416888][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.427096][ T7611] Call Trace: [ 234.430447][ T7611] [ 234.433433][ T7611] dump_stack_lvl+0x18c/0x250 [ 234.438181][ T7611] ? show_regs_print_info+0x20/0x20 [ 234.443454][ T7611] ? load_image+0x420/0x420 [ 234.448031][ T7611] ? plist_add+0x3db/0x490 [ 234.452526][ T7611] ? verify_lock_unused+0x140/0x140 [ 234.457833][ T7611] should_fail_ex+0x394/0x4c0 [ 234.462584][ T7611] get_futex_key+0x136/0x1030 [ 234.467313][ T7611] ? futex_unqueue+0xcb/0xf0 [ 234.471955][ T7611] ? futex_wait+0x4a7/0x5c0 [ 234.476513][ T7611] ? futex_setup_timer+0xc0/0xc0 [ 234.481552][ T7611] futex_wake+0x127/0x4f0 [ 234.485938][ T7611] ? __fget_files+0x28/0x460 [ 234.490605][ T7611] ? futex_wake_mark+0x150/0x150 [ 234.495612][ T7611] ? __fget_files+0x3fc/0x460 [ 234.500355][ T7611] do_futex+0x35d/0x3e0 [ 234.504571][ T7611] ? __ia32_sys_get_robust_list+0x110/0x110 [ 234.510523][ T7611] ? __sys_getsockname+0x19e/0x2d0 [ 234.515703][ T7611] __se_sys_futex+0x3a9/0x440 [ 234.520446][ T7611] ? __x64_sys_futex+0xf0/0xf0 [ 234.525288][ T7611] ? __x64_sys_futex+0x21/0xf0 [ 234.530122][ T7611] do_syscall_64+0x55/0xb0 [ 234.534601][ T7611] ? clear_bhb_loop+0x40/0x90 [ 234.539342][ T7611] ? clear_bhb_loop+0x40/0x90 [ 234.544080][ T7611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.550041][ T7611] RIP: 0033:0x7f3206d9e159 [ 234.554514][ T7611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.559210][ T28] audit: type=1326 audit(1790097104.769:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.574150][ T7611] RSP: 002b:00007f3207c360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 234.574178][ T7611] RAX: ffffffffffffffda RBX: 00007f3207025fa8 RCX: 00007f3206d9e159 [ 234.574194][ T7611] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3207025fac [ 234.574208][ T7611] RBP: 00007f3207025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 234.574222][ T7611] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 234.574236][ T7611] R13: 00007f3207026038 R14: 00007fff959fa1b0 R15: 00007fff959fa298 [ 234.574267][ T7611] [ 234.660028][ T28] audit: type=1326 audit(1790097104.769:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.690896][ T28] audit: type=1326 audit(1790097104.769:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.721072][ T28] audit: type=1326 audit(1790097104.769:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 234.750645][ T28] audit: type=1326 audit(1790097104.769:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7602 comm="syz.0.545" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf7b99e159 code=0x7ffc0000 [ 235.829591][ T5087] Bluetooth: hci3: command tx timeout [ 235.837973][ T7598] chnl_net:caif_netlink_parms(): no params data found [ 236.554824][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.576048][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.601510][ T7598] bridge_slave_0: entered allmulticast mode [ 236.630451][ T7598] bridge_slave_0: entered promiscuous mode [ 236.636991][ T7649] FAULT_INJECTION: forcing a failure. [ 236.636991][ T7649] name fail_futex, interval 1, probability 0, space 0, times 0 [ 236.663426][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.679086][ T7649] CPU: 1 PID: 7649 Comm: syz.2.555 Not tainted syzkaller #0 [ 236.686455][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.696558][ T7649] Call Trace: [ 236.699888][ T7649] [ 236.702871][ T7649] dump_stack_lvl+0x18c/0x250 [ 236.707618][ T7649] ? show_regs_print_info+0x20/0x20 [ 236.712881][ T7649] ? load_image+0x420/0x420 [ 236.717463][ T7649] ? plist_add+0x3db/0x490 [ 236.721943][ T7649] ? verify_lock_unused+0x140/0x140 [ 236.727209][ T7649] should_fail_ex+0x394/0x4c0 [ 236.731964][ T7649] get_futex_key+0x136/0x1030 [ 236.736688][ T7649] ? futex_unqueue+0xcb/0xf0 [ 236.741358][ T7649] ? futex_wait+0x4a7/0x5c0 [ 236.745950][ T7649] ? futex_setup_timer+0xc0/0xc0 [ 236.750943][ T7649] futex_wake+0x127/0x4f0 [ 236.755326][ T7649] ? __fget_files+0x28/0x460 [ 236.759981][ T7649] ? futex_wake_mark+0x150/0x150 [ 236.764978][ T7649] ? __fget_files+0x3fc/0x460 [ 236.769763][ T7649] do_futex+0x35d/0x3e0 [ 236.773980][ T7649] ? __ia32_sys_get_robust_list+0x110/0x110 [ 236.779971][ T7649] ? __sys_getsockname+0x19e/0x2d0 [ 236.785391][ T7649] __se_sys_futex+0x3a9/0x440 [ 236.790099][ T7649] ? __x64_sys_futex+0xf0/0xf0 [ 236.794907][ T7649] ? __x64_sys_futex+0x21/0xf0 [ 236.799699][ T7649] do_syscall_64+0x55/0xb0 [ 236.804148][ T7649] ? clear_bhb_loop+0x40/0x90 [ 236.808870][ T7649] ? clear_bhb_loop+0x40/0x90 [ 236.813586][ T7649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.819512][ T7649] RIP: 0033:0x7f3206d9e159 [ 236.823951][ T7649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.843595][ T7649] RSP: 002b:00007f3207c360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 236.852043][ T7649] RAX: ffffffffffffffda RBX: 00007f3207025fa8 RCX: 00007f3206d9e159 [ 236.860044][ T7649] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3207025fac [ 236.868051][ T7649] RBP: 00007f3207025fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 236.876050][ T7649] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 236.884046][ T7649] R13: 00007f3207026038 R14: 00007fff959fa1b0 R15: 00007fff959fa298 [ 236.892055][ T7649] [ 236.896683][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.917163][ T7598] bridge_slave_1: entered allmulticast mode [ 236.931123][ T7598] bridge_slave_1: entered promiscuous mode [ 237.228591][ T7654] loop2: detected capacity change from 0 to 1024 [ 237.259205][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.274688][ T7654] EXT4-fs: quotafile must be on filesystem root [ 237.319230][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.909000][ T5087] Bluetooth: hci3: command tx timeout [ 238.169966][ T7598] team0: Port device team_slave_0 added [ 238.222576][ T7598] team0: Port device team_slave_1 added [ 238.412165][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.434253][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.530646][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.631877][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.672998][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.766845][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.018627][ T7598] hsr_slave_0: entered promiscuous mode [ 239.045996][ T7598] hsr_slave_1: entered promiscuous mode [ 239.055664][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.073741][ T7598] Cannot create hsr debugfs directory [ 239.156358][ T49] hsr_slave_0: left promiscuous mode [ 239.170601][ T49] hsr_slave_1: left promiscuous mode [ 239.192646][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.217965][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.244515][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.266902][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.285478][ T49] bridge_slave_1: left allmulticast mode [ 239.294751][ T49] bridge_slave_1: left promiscuous mode [ 239.310376][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.374133][ T49] bridge_slave_0: left allmulticast mode [ 239.391703][ T49] bridge_slave_0: left promiscuous mode [ 239.411315][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.516907][ T49] veth1_macvtap: left promiscuous mode [ 239.569253][ T49] veth0_macvtap: left promiscuous mode [ 239.575091][ T49] veth1_vlan: left promiscuous mode [ 239.589486][ T49] veth0_vlan: left promiscuous mode [ 239.989244][ T5087] Bluetooth: hci3: command tx timeout [ 240.842997][ T7687] FAULT_INJECTION: forcing a failure. [ 240.842997][ T7687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.868815][ T7687] CPU: 1 PID: 7687 Comm: syz.2.563 Not tainted syzkaller #0 [ 240.876217][ T7687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.886336][ T7687] Call Trace: [ 240.889671][ T7687] [ 240.892668][ T7687] dump_stack_lvl+0x18c/0x250 [ 240.897416][ T7687] ? show_regs_print_info+0x20/0x20 [ 240.902682][ T7687] ? load_image+0x420/0x420 [ 240.907232][ T7687] ? __might_fault+0xaa/0x120 [ 240.911958][ T7687] ? __lock_acquire+0x7d80/0x7d80 [ 240.917032][ T7687] should_fail_ex+0x394/0x4c0 [ 240.921771][ T7687] _copy_from_user+0x2f/0xe0 [ 240.926412][ T7687] __sys_bpf+0x23e/0x890 [ 240.930700][ T7687] ? bpf_link_show_fdinfo+0x560/0x560 [ 240.936120][ T7687] ? __sys_getsockname+0x19e/0x2d0 [ 240.941286][ T7687] ? lock_chain_count+0x20/0x20 [ 240.946183][ T7687] __x64_sys_bpf+0x7c/0x90 [ 240.950676][ T7687] do_syscall_64+0x55/0xb0 [ 240.955137][ T7687] ? clear_bhb_loop+0x40/0x90 [ 240.959861][ T7687] ? clear_bhb_loop+0x40/0x90 [ 240.964594][ T7687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.970533][ T7687] RIP: 0033:0x7f3206d9e159 [ 240.974990][ T7687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.994629][ T7687] RSP: 002b:00007f3207c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.003093][ T7687] RAX: ffffffffffffffda RBX: 00007f3207025fa0 RCX: 00007f3206d9e159 [ 241.011105][ T7687] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 241.019113][ T7687] RBP: 00007f3206e3506b R08: 0000000000000000 R09: 0000000000000000 [ 241.027115][ T7687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.035112][ T7687] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 241.043129][ T7687] [ 241.223491][ T49] team0 (unregistering): Port device team_slave_1 removed [ 241.292895][ T49] team0 (unregistering): Port device team_slave_0 removed [ 241.314488][ T7690] loop2: detected capacity change from 0 to 1024 [ 241.342364][ T7690] EXT4-fs: quotafile must be on filesystem root [ 241.372806][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.847210][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.092512][ T5790] Bluetooth: hci3: command tx timeout [ 242.645448][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 243.058288][ T7630] Set syz0 is full, maxelem 65536 reached [ 243.088323][ T49] bond0 (unregistering): Released all slaves [ 243.167075][ T7696] loop3: detected capacity change from 0 to 1024 [ 243.190680][ T7696] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 243.221028][ T7696] JBD2: no valid journal superblock found [ 243.234812][ T7696] EXT4-fs (loop3): Could not load journal inode [ 244.028071][ T7598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.083000][ T7598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.143066][ T7598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.171951][ T7718] FAULT_INJECTION: forcing a failure. [ 244.171951][ T7718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.187895][ T7718] CPU: 0 PID: 7718 Comm: syz.2.571 Not tainted syzkaller #0 [ 244.195287][ T7718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.205398][ T7718] Call Trace: [ 244.208714][ T7718] [ 244.211690][ T7718] dump_stack_lvl+0x18c/0x250 [ 244.216427][ T7718] ? show_regs_print_info+0x20/0x20 [ 244.221689][ T7718] ? load_image+0x420/0x420 [ 244.226264][ T7718] ? __might_fault+0xaa/0x120 [ 244.231005][ T7718] ? __lock_acquire+0x7d80/0x7d80 [ 244.236082][ T7718] should_fail_ex+0x394/0x4c0 [ 244.240828][ T7718] _copy_from_user+0x2f/0xe0 [ 244.245468][ T7718] __sys_bpf+0x23e/0x890 [ 244.249765][ T7718] ? bpf_link_show_fdinfo+0x560/0x560 [ 244.255189][ T7718] ? __sys_getsockname+0x19e/0x2d0 [ 244.260377][ T7718] ? lock_chain_count+0x20/0x20 [ 244.265323][ T7718] __x64_sys_bpf+0x7c/0x90 [ 244.269820][ T7718] do_syscall_64+0x55/0xb0 [ 244.274294][ T7718] ? clear_bhb_loop+0x40/0x90 [ 244.279031][ T7718] ? clear_bhb_loop+0x40/0x90 [ 244.283795][ T7718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.289764][ T7718] RIP: 0033:0x7f3206d9e159 [ 244.294279][ T7718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.313934][ T7718] RSP: 002b:00007f3207c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.322411][ T7718] RAX: ffffffffffffffda RBX: 00007f3207025fa0 RCX: 00007f3206d9e159 [ 244.330430][ T7718] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 244.338453][ T7718] RBP: 00007f3206e3506b R08: 0000000000000000 R09: 0000000000000000 [ 244.346480][ T7718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.354523][ T7718] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 244.362580][ T7718] [ 244.384646][ T7717] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 244.397066][ T7598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.536068][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.558440][ T7598] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.583956][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.592117][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.697609][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.704865][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.396024][ T7743] loop2: detected capacity change from 0 to 1024 [ 245.429612][ T7743] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 245.500035][ T7743] JBD2: no valid journal superblock found [ 245.552757][ T7743] EXT4-fs (loop2): Could not load journal inode [ 245.586584][ T5797] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 245.596770][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.734433][ T7751] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 245.807288][ T7751] device-mapper: ioctl: error adding target to table [ 247.326418][ T7791] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 247.346220][ T7791] device-mapper: ioctl: error adding target to table [ 247.491989][ T7598] veth0_vlan: entered promiscuous mode [ 247.536514][ T7598] veth1_vlan: entered promiscuous mode [ 247.567615][ T7796] FAULT_INJECTION: forcing a failure. [ 247.567615][ T7796] name failslab, interval 1, probability 0, space 0, times 0 [ 247.616890][ T7796] CPU: 0 PID: 7796 Comm: syz.2.591 Not tainted syzkaller #0 [ 247.624268][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.634371][ T7796] Call Trace: [ 247.637687][ T7796] [ 247.640660][ T7796] dump_stack_lvl+0x18c/0x250 [ 247.645398][ T7796] ? show_regs_print_info+0x20/0x20 [ 247.650668][ T7796] ? load_image+0x420/0x420 [ 247.655225][ T7796] ? __might_sleep+0xe0/0xe0 [ 247.659871][ T7796] ? __lock_acquire+0x7d80/0x7d80 [ 247.664947][ T7796] ? ida_alloc_range+0x826/0x860 [ 247.669928][ T7796] ? urandom_read_iter+0x140/0x140 [ 247.675100][ T7796] should_fail_ex+0x394/0x4c0 [ 247.679842][ T7796] should_failslab+0x9/0x20 [ 247.684400][ T7796] slab_pre_alloc_hook+0x59/0x300 [ 247.689503][ T7796] kmem_cache_alloc+0x5a/0x2c0 [ 247.694333][ T7796] ? proc_net_ns_init+0x4e/0x360 [ 247.699326][ T7796] proc_net_ns_init+0x4e/0x360 [ 247.704151][ T7796] ops_init+0x391/0x640 [ 247.708371][ T7796] setup_net+0x3b6/0xa20 [ 247.712702][ T7796] ? copy_net_ns+0x530/0x530 [ 247.717358][ T7796] ? copy_net_ns+0x347/0x530 [ 247.722006][ T7796] ? down_read_killable+0x1d0/0x340 [ 247.727265][ T7796] copy_net_ns+0x361/0x530 [ 247.731750][ T7796] create_new_namespaces+0x3ce/0x700 [ 247.737104][ T7796] unshare_nsproxy_namespaces+0x11a/0x160 [ 247.742861][ T7796] ksys_unshare+0x4fa/0x8f0 [ 247.747491][ T7796] ? sighand_ctor+0x50/0x50 [ 247.752026][ T7796] ? lock_chain_count+0x20/0x20 [ 247.756907][ T7796] ? syscall_enter_from_user_mode+0x25/0x80 [ 247.762832][ T7796] __x64_sys_unshare+0x38/0x40 [ 247.767648][ T7796] do_syscall_64+0x55/0xb0 [ 247.772102][ T7796] ? clear_bhb_loop+0x40/0x90 [ 247.776815][ T7796] ? clear_bhb_loop+0x40/0x90 [ 247.781522][ T7796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.787454][ T7796] RIP: 0033:0x7f3206d9e159 [ 247.791991][ T7796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.811650][ T7796] RSP: 002b:00007f3207c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 247.820097][ T7796] RAX: ffffffffffffffda RBX: 00007f3207025fa0 RCX: 00007f3206d9e159 [ 247.828110][ T7796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 247.836105][ T7796] RBP: 00007f3206e3506b R08: 0000000000000000 R09: 0000000000000000 [ 247.844099][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.852096][ T7796] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 247.860129][ T7796] [ 247.886158][ T7598] veth0_macvtap: entered promiscuous mode [ 247.906855][ T7598] veth1_macvtap: entered promiscuous mode [ 247.945745][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.987901][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.022833][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.036062][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.050771][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.064191][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.100576][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.145888][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.171671][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.195400][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.225191][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.258325][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.384773][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.397449][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.424639][ T7598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.525503][ T7809] serio: Serial port ttyS3 [ 249.063685][ T7598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.073669][ T7598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.118884][ T7598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.530262][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.538188][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.642752][ T458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.663202][ T458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.959672][ T7823] device-mapper: table: 248:0: mirror: Insufficient mirror log arguments (-EINVAL) [ 250.001209][ T7823] device-mapper: ioctl: error adding target to table [ 251.760539][ T7855] xt_bpf: check failed: parse error [ 252.843155][ T28] kauditd_printk_skb: 166 callbacks suppressed [ 252.843170][ T28] audit: type=1326 audit(1790097123.669:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 252.954679][ T28] audit: type=1326 audit(1790097123.669:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.275018][ T28] audit: type=1326 audit(1790097123.719:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.399318][ T28] audit: type=1326 audit(1790097123.719:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.549842][ T28] audit: type=1326 audit(1790097123.719:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.683625][ T28] audit: type=1326 audit(1790097123.719:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.802634][ T28] audit: type=1326 audit(1790097123.719:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 253.938586][ T28] audit: type=1326 audit(1790097123.719:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 254.012676][ T28] audit: type=1326 audit(1790097123.719:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 254.064214][ T28] audit: type=1326 audit(1790097123.729:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7861 comm="syz.4.607" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd226b9e159 code=0x7ffc0000 [ 255.914616][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.921569][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.606872][ T7921] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 257.656180][ T7925] loop2: detected capacity change from 0 to 512 [ 257.697113][ T7924] FAULT_INJECTION: forcing a failure. [ 257.697113][ T7924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.752027][ T7924] CPU: 1 PID: 7924 Comm: syz.4.626 Not tainted syzkaller #0 [ 257.759407][ T7924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.769514][ T7924] Call Trace: [ 257.772906][ T7924] [ 257.775871][ T7924] dump_stack_lvl+0x18c/0x250 [ 257.780624][ T7924] ? show_regs_print_info+0x20/0x20 [ 257.785856][ T7924] ? load_image+0x420/0x420 [ 257.790388][ T7924] ? __lock_acquire+0x7d80/0x7d80 [ 257.795442][ T7924] ? do_futex+0x2ff/0x3e0 [ 257.799818][ T7924] should_fail_ex+0x394/0x4c0 [ 257.804529][ T7924] strncpy_from_user+0x36/0x2f0 [ 257.809412][ T7924] __se_sys_add_key+0xdc/0x410 [ 257.814210][ T7924] ? __x64_sys_add_key+0xc0/0xc0 [ 257.819191][ T7924] ? lockdep_hardirqs_on+0x98/0x150 [ 257.824428][ T7924] ? __x64_sys_add_key+0x20/0xc0 [ 257.829415][ T7924] do_syscall_64+0x55/0xb0 [ 257.833883][ T7924] ? clear_bhb_loop+0x40/0x90 [ 257.838598][ T7924] ? clear_bhb_loop+0x40/0x90 [ 257.843316][ T7924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.849246][ T7924] RIP: 0033:0x7fd226b9e159 [ 257.853694][ T7924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.873336][ T7924] RSP: 002b:00007fd2279a3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 257.881787][ T7924] RAX: ffffffffffffffda RBX: 00007fd226e25fa0 RCX: 00007fd226b9e159 [ 257.889794][ T7924] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 257.897813][ T7924] RBP: 00007fd226c3506b R08: 0000000000000000 R09: 0000000000000000 [ 257.905814][ T7924] R10: 00000000000001d3 R11: 0000000000000246 R12: 0000000000000000 [ 257.913808][ T7924] R13: 00007fd226e26038 R14: 00007fd226e25fa0 R15: 00007fff73691868 [ 257.921828][ T7924] [ 257.927343][ T7925] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.947901][ T7925] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 258.131229][ T7925] EXT4-fs (loop2): 1 truncate cleaned up [ 258.138895][ T7925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.344040][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.499964][ T7942] loop4: detected capacity change from 0 to 512 [ 258.648021][ T7942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.677759][ T7942] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.839094][ T7942] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.057743][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.617045][ T7982] loop2: detected capacity change from 0 to 8192 [ 261.737076][ T7997] loop3: detected capacity change from 0 to 512 [ 261.792541][ T7982] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.819016][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 261.819031][ T28] audit: type=1800 audit(1790097132.639:351): pid=7982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.642" name="bus" dev="loop2" ino=1048600 res=0 errno=0 [ 264.006383][ T8036] syz_tun: entered allmulticast mode [ 264.652769][ T8042] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.995377][ T8069] loop4: detected capacity change from 0 to 128 [ 266.054435][ T8069] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 266.122275][ T8069] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.250558][ T7598] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.921246][ T8084] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 267.393257][ T8092] loop2: detected capacity change from 0 to 1024 [ 267.411128][ T8092] EXT4-fs: quotafile must be on filesystem root [ 269.110662][ T8106] loop2: detected capacity change from 0 to 128 [ 269.193608][ T8106] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.218473][ T8106] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 269.486872][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.188854][ C1] net_ratelimit: 51 callbacks suppressed [ 272.629575][ T8153] serio: Serial port ttyS3 [ 273.069064][ T8166] netlink: 'syz.2.695': attribute type 1 has an invalid length. [ 273.233008][ T8166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.458087][ T8170] bond1: (slave geneve2): making interface the new active one [ 273.553694][ T8170] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 273.818158][ T8170] syz.2.695 (8170) used greatest stack depth: 18056 bytes left [ 273.890394][ T8177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.698'. [ 275.342586][ T8198] FAULT_INJECTION: forcing a failure. [ 275.342586][ T8198] name failslab, interval 1, probability 0, space 0, times 0 [ 275.392600][ T8198] CPU: 0 PID: 8198 Comm: syz.0.703 Not tainted syzkaller #0 [ 275.399955][ T8198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 275.399990][ T8198] Call Trace: [ 275.399999][ T8198] [ 275.400009][ T8198] dump_stack_lvl+0x18c/0x250 [ 275.400054][ T8198] ? show_regs_print_info+0x20/0x20 [ 275.400086][ T8198] ? load_image+0x420/0x420 [ 275.400115][ T8198] ? __might_sleep+0xe0/0xe0 [ 275.410406][ T8198] ? __lock_acquire+0x7d80/0x7d80 [ 275.410444][ T8198] should_fail_ex+0x394/0x4c0 [ 275.410483][ T8198] should_failslab+0x9/0x20 [ 275.416723][ T8198] slab_pre_alloc_hook+0x59/0x300 [ 275.455261][ T8198] ? x509_cert_parse+0xfe/0x7b0 [ 275.455304][ T8198] __kmem_cache_alloc_node+0x53/0x250 [ 275.455344][ T8198] ? x509_cert_parse+0xfe/0x7b0 [ 275.460386][ T8198] kmalloc_trace+0x2a/0xe0 [ 275.470791][ T8198] x509_cert_parse+0xfe/0x7b0 [ 275.470843][ T8198] x509_key_preparse+0x64/0x6c0 [ 275.470880][ T8198] ? down_read+0x1ac/0x2e0 [ 275.480201][ T8198] asymmetric_key_preparse+0xa9/0x140 [ 275.480244][ T8198] __key_create_or_update+0x3a6/0xa60 [ 275.489745][ T8198] ? key_create_or_update+0x60/0x60 [ 275.489780][ T8198] ? bpf_lsm_key_permission+0x9/0x10 [ 275.511192][ T8198] ? lookup_user_key+0xb66/0x1140 [ 275.516267][ T8198] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 275.522327][ T8198] key_create_or_update+0x42/0x60 [ 275.527428][ T8198] __se_sys_add_key+0x34f/0x410 [ 275.532341][ T8198] ? __x64_sys_add_key+0xc0/0xc0 [ 275.537342][ T8198] ? lockdep_hardirqs_on+0x98/0x150 [ 275.542583][ T8198] ? __x64_sys_add_key+0x20/0xc0 [ 275.547568][ T8198] do_syscall_64+0x55/0xb0 [ 275.552029][ T8198] ? clear_bhb_loop+0x40/0x90 [ 275.556751][ T8198] ? clear_bhb_loop+0x40/0x90 [ 275.561466][ T8198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.567405][ T8198] RIP: 0033:0x7fbf7b99e159 [ 275.571853][ T8198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.591499][ T8198] RSP: 002b:00007fbf79bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 275.599952][ T8198] RAX: ffffffffffffffda RBX: 00007fbf7bc25fa0 RCX: 00007fbf7b99e159 [ 275.607974][ T8198] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 275.615975][ T8198] RBP: 00007fbf7ba3506b R08: ffffffffffffffff R09: 0000000000000000 [ 275.623980][ T8198] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 275.631976][ T8198] R13: 00007fbf7bc26038 R14: 00007fbf7bc25fa0 R15: 00007ffc3807b498 [ 275.639994][ T8198] [ 276.229047][ C1] net_ratelimit: 46 callbacks suppressed [ 278.325719][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 278.463057][ T8238] serio: Serial port ttyS3 [ 279.678374][ T8249] loop2: detected capacity change from 0 to 1024 [ 279.749243][ T8249] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 279.811269][ T8249] JBD2: no valid journal superblock found [ 279.843543][ T8249] EXT4-fs (loop2): Could not load journal inode [ 279.940976][ T8237] loop3: detected capacity change from 0 to 32768 [ 279.984620][ T8237] Only 4K block size supported! [ 280.003181][ T8237] Mount JFS Failure: -22 [ 280.529667][ T8237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.268825][ C1] net_ratelimit: 42 callbacks suppressed [ 284.195667][ T8310] loop4: detected capacity change from 0 to 512 [ 284.236201][ T8310] EXT4-fs: Ignoring removed bh option [ 284.253589][ T8310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 284.292403][ T8310] EXT4-fs (loop4): 1 truncate cleaned up [ 284.380231][ T8315] serio: Serial port ttyS3 [ 284.638595][ T8310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.070237][ T8320] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.4.725: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 285.159144][ T8320] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem [ 285.192876][ T8320] EXT4-fs warning (device loop4): ext4_rename_delete:3780: inode #2: comm syz.4.725: Deleting old file: nlink 4, error=-117 [ 285.511756][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.376586][ T8330] loop3: detected capacity change from 0 to 1024 [ 286.395489][ C1] net_ratelimit: 41 callbacks suppressed [ 287.968657][ T8330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 287.989139][ T8330] JBD2: no valid journal superblock found [ 288.212548][ T8330] EXT4-fs (loop3): Could not load journal inode [ 288.796137][ T8361] serio: Serial port ttyS3 [ 289.921990][ T8376] loop4: detected capacity change from 0 to 1024 [ 289.967817][ T8376] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 289.987754][ T8379] loop2: detected capacity change from 0 to 2048 [ 290.012323][ T8376] JBD2: no valid journal superblock found [ 290.031169][ T8376] EXT4-fs (loop4): Could not load journal inode [ 290.154395][ T8381] batman_adv: batadv0: Adding interface: syzkaller0 [ 290.174628][ T8381] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.330681][ T8381] batman_adv: batadv0: Interface activated: syzkaller0 [ 290.918206][ T8395] FAULT_INJECTION: forcing a failure. [ 290.918206][ T8395] name fail_futex, interval 1, probability 0, space 0, times 0 [ 290.969354][ T8395] CPU: 1 PID: 8395 Comm: syz.0.746 Not tainted syzkaller #0 [ 290.976736][ T8395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.986848][ T8395] Call Trace: [ 290.990182][ T8395] [ 290.993161][ T8395] dump_stack_lvl+0x18c/0x250 [ 290.997908][ T8395] ? show_regs_print_info+0x20/0x20 [ 291.003169][ T8395] ? load_image+0x420/0x420 [ 291.007731][ T8395] ? stack_trace_save+0xaa/0x100 [ 291.012778][ T8395] should_fail_ex+0x394/0x4c0 [ 291.017521][ T8395] get_futex_key+0x136/0x1030 [ 291.022264][ T8395] ? futex_setup_timer+0xc0/0xc0 [ 291.027263][ T8395] futex_wake+0x127/0x4f0 [ 291.031657][ T8395] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 291.037701][ T8395] ? futex_wake_mark+0x150/0x150 [ 291.042701][ T8395] ? lockdep_hardirqs_on+0x98/0x150 [ 291.047968][ T8395] do_futex+0x35d/0x3e0 [ 291.052181][ T8395] ? __ia32_sys_get_robust_list+0x110/0x110 [ 291.058229][ T8395] __se_sys_futex+0x3a9/0x440 [ 291.062977][ T8395] ? __x64_sys_futex+0xf0/0xf0 [ 291.067813][ T8395] ? __x64_sys_futex+0x21/0xf0 [ 291.072632][ T8395] do_syscall_64+0x55/0xb0 [ 291.077104][ T8395] ? clear_bhb_loop+0x40/0x90 [ 291.081848][ T8395] ? clear_bhb_loop+0x40/0x90 [ 291.086591][ T8395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.092539][ T8395] RIP: 0033:0x7fbf7b99e159 [ 291.097095][ T8395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.117030][ T8395] RSP: 002b:00007fbf79bd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 291.125511][ T8395] RAX: ffffffffffffffda RBX: 00007fbf7bc26098 RCX: 00007fbf7b99e159 [ 291.133534][ T8395] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf7bc2609c [ 291.141565][ T8395] RBP: 00007fbf7bc26090 R08: 0000000000745d1e R09: 0000000000000000 [ 291.149582][ T8395] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 291.157595][ T8395] R13: 00007fbf7bc26128 R14: 00007ffc3807b3b0 R15: 00007ffc3807b498 [ 291.165630][ T8395] [ 291.737513][ C0] net_ratelimit: 40 callbacks suppressed [ 291.762615][ T8384] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 291.981089][ T8384] batman_adv: batadv0: Removing interface: syzkaller0 [ 292.642211][ T8425] serio: Serial port ttyS3 [ 293.393584][ T8429] loop4: detected capacity change from 0 to 1024 [ 293.452356][ T8429] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 293.501640][ T8429] JBD2: no valid journal superblock found [ 293.578492][ T8429] EXT4-fs (loop4): Could not load journal inode [ 293.593071][ T8438] FAULT_INJECTION: forcing a failure. [ 293.593071][ T8438] name failslab, interval 1, probability 0, space 0, times 0 [ 293.719547][ T8438] CPU: 1 PID: 8438 Comm: syz.0.755 Not tainted syzkaller #0 [ 293.726930][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.737072][ T8438] Call Trace: [ 293.740408][ T8438] [ 293.743385][ T8438] dump_stack_lvl+0x18c/0x250 [ 293.748127][ T8438] ? show_regs_print_info+0x20/0x20 [ 293.753445][ T8438] ? load_image+0x420/0x420 [ 293.758015][ T8438] ? __might_sleep+0xe0/0xe0 [ 293.762655][ T8438] ? __lock_acquire+0x7d80/0x7d80 [ 293.767727][ T8438] should_fail_ex+0x394/0x4c0 [ 293.772487][ T8438] should_failslab+0x9/0x20 [ 293.777232][ T8438] slab_pre_alloc_hook+0x59/0x300 [ 293.782337][ T8438] ? snd_virmidi_output_open+0xbb/0x5c0 [ 293.787949][ T8438] __kmem_cache_alloc_node+0x53/0x250 [ 293.793397][ T8438] ? snd_virmidi_output_open+0xbb/0x5c0 [ 293.798996][ T8438] kmalloc_trace+0x2a/0xe0 [ 293.803473][ T8438] snd_virmidi_output_open+0xbb/0x5c0 [ 293.808914][ T8438] open_substream+0x3e5/0x760 [ 293.813660][ T8438] rawmidi_open_priv+0xc4/0x620 [ 293.818572][ T8438] snd_rawmidi_open+0x465/0xaf0 [ 293.823523][ T8438] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 293.829330][ T8438] ? do_task_dead+0xd0/0xd0 [ 293.833900][ T8438] ? __kobject_del+0x2e0/0x2e0 [ 293.838714][ T8438] ? __asan_memset+0x22/0x40 [ 293.843345][ T8438] ? snd_open+0x302/0x390 [ 293.848031][ T8438] chrdev_open+0x58c/0x600 [ 293.852513][ T8438] ? cd_forget+0x160/0x160 [ 293.856990][ T8438] ? fsnotify_perm+0x3ed/0x5e0 [ 293.861892][ T8438] do_dentry_open+0x880/0x14b0 [ 293.866731][ T8438] ? cd_forget+0x160/0x160 [ 293.871217][ T8438] path_openat+0x284f/0x3270 [ 293.875883][ T8438] ? do_sys_openat2+0xda/0x1d0 [ 293.880709][ T8438] ? __x64_sys_openat+0x139/0x160 [ 293.885775][ T8438] ? verify_lock_unused+0x140/0x140 [ 293.885808][ T8438] ? do_filp_open+0x430/0x430 [ 293.885851][ T8438] do_filp_open+0x1f2/0x430 [ 293.900461][ T8438] ? vfs_tmpfile+0x620/0x620 [ 293.905156][ T8438] ? _raw_spin_unlock+0x28/0x40 [ 293.910050][ T8438] ? alloc_fd+0x590/0x640 [ 293.910095][ T8438] do_sys_openat2+0x134/0x1d0 [ 293.914652][ T8438] ? do_sys_open+0xe0/0xe0 [ 293.914687][ T8438] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 293.930056][ T8438] ? lock_chain_count+0x20/0x20 [ 293.935070][ T8438] ? lock_chain_count+0x20/0x20 [ 293.939981][ T8438] __x64_sys_openat+0x139/0x160 [ 293.944914][ T8438] do_syscall_64+0x55/0xb0 [ 293.949396][ T8438] ? clear_bhb_loop+0x40/0x90 [ 293.954149][ T8438] ? clear_bhb_loop+0x40/0x90 [ 293.958896][ T8438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.964860][ T8438] RIP: 0033:0x7fbf7b95e98e [ 293.969344][ T8438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 293.989076][ T8438] RSP: 002b:00007fbf79bf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 293.997550][ T8438] RAX: ffffffffffffffda RBX: 00007fbf79bf66c0 RCX: 00007fbf7b95e98e [ 294.005583][ T8438] RDX: 0000000000141102 RSI: 00007fbf79bf5c00 RDI: ffffffffffffff9c [ 294.013617][ T8438] RBP: 00007fbf79bf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 294.021651][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 294.029679][ T8438] R13: 00007fbf7bc26038 R14: 00007fbf7bc25fa0 R15: 00007ffc3807b498 [ 294.037743][ T8438] [ 294.912069][ T8453] loop2: detected capacity change from 0 to 1024 [ 294.958535][ T8445] syzkaller0: entered promiscuous mode [ 295.021575][ T8445] syzkaller0: entered allmulticast mode [ 295.090456][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.113500][ T8447] netlink: 'syz.3.756': attribute type 4 has an invalid length. [ 295.507780][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.873345][ C0] net_ratelimit: 46 callbacks suppressed [ 297.134107][ T8487] serio: Serial port ttyS3 [ 299.105941][ T8505] bond0: option slaves: interface -bo does not exist! [ 299.307510][ T8511] loop3: detected capacity change from 0 to 1024 [ 299.341179][ T8509] batman_adv: batadv0: Adding interface: syzkaller0 [ 299.371600][ T8511] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 299.386624][ T8509] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.422072][ T8511] JBD2: no valid journal superblock found [ 299.443684][ T8511] EXT4-fs (loop3): Could not load journal inode [ 299.481000][ T8509] batman_adv: batadv0: Interface activated: syzkaller0 [ 299.503742][ T8515] loop4: detected capacity change from 0 to 1024 [ 299.570453][ T8508] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 299.640285][ T8508] batman_adv: batadv0: Removing interface: syzkaller0 [ 299.651852][ T8515] EXT4-fs: quotafile must be on filesystem root [ 300.779896][ T8532] serio: Serial port ttyS3 [ 301.988827][ C1] net_ratelimit: 37 callbacks suppressed [ 302.122688][ T8550] FAULT_INJECTION: forcing a failure. [ 302.122688][ T8550] name failslab, interval 1, probability 0, space 0, times 0 [ 302.199492][ T8550] CPU: 0 PID: 8550 Comm: syz.0.777 Not tainted syzkaller #0 [ 302.206951][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.217050][ T8550] Call Trace: [ 302.217068][ T8550] [ 302.217079][ T8550] dump_stack_lvl+0x18c/0x250 [ 302.217118][ T8550] ? show_regs_print_info+0x20/0x20 [ 302.217149][ T8550] ? load_image+0x420/0x420 [ 302.217177][ T8550] ? __might_sleep+0xe0/0xe0 [ 302.217207][ T8550] ? __lock_acquire+0x7d80/0x7d80 [ 302.217239][ T8550] should_fail_ex+0x394/0x4c0 [ 302.217276][ T8550] should_failslab+0x9/0x20 [ 302.217308][ T8550] slab_pre_alloc_hook+0x59/0x300 [ 302.217345][ T8550] ? snd_virmidi_output_open+0xbb/0x5c0 [ 302.217374][ T8550] __kmem_cache_alloc_node+0x53/0x250 [ 302.217411][ T8550] ? snd_virmidi_output_open+0xbb/0x5c0 [ 302.217437][ T8550] kmalloc_trace+0x2a/0xe0 [ 302.217471][ T8550] snd_virmidi_output_open+0xbb/0x5c0 [ 302.288822][ T8550] open_substream+0x3e5/0x760 [ 302.293612][ T8550] rawmidi_open_priv+0xc4/0x620 [ 302.298542][ T8550] snd_rawmidi_open+0x465/0xaf0 [ 302.303483][ T8550] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 302.309256][ T8550] ? do_task_dead+0xd0/0xd0 [ 302.313817][ T8550] ? __kobject_del+0x2e0/0x2e0 [ 302.318733][ T8550] ? __asan_memset+0x22/0x40 [ 302.323402][ T8550] ? snd_open+0x302/0x390 [ 302.327782][ T8550] chrdev_open+0x58c/0x600 [ 302.332246][ T8550] ? cd_forget+0x160/0x160 [ 302.336721][ T8550] ? fsnotify_perm+0x3ed/0x5e0 [ 302.341533][ T8550] do_dentry_open+0x880/0x14b0 [ 302.346348][ T8550] ? cd_forget+0x160/0x160 [ 302.350805][ T8550] path_openat+0x284f/0x3270 [ 302.355453][ T8550] ? do_sys_openat2+0xda/0x1d0 [ 302.360275][ T8550] ? __x64_sys_openat+0x139/0x160 [ 302.365364][ T8550] ? verify_lock_unused+0x140/0x140 [ 302.370640][ T8550] ? do_filp_open+0x430/0x430 [ 302.375380][ T8550] do_filp_open+0x1f2/0x430 [ 302.379945][ T8550] ? vfs_tmpfile+0x620/0x620 [ 302.384587][ T8550] ? _raw_spin_unlock+0x28/0x40 [ 302.389657][ T8550] ? alloc_fd+0x590/0x640 [ 302.389709][ T8550] do_sys_openat2+0x134/0x1d0 [ 302.389745][ T8550] ? do_sys_open+0xe0/0xe0 [ 302.398802][ T8550] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 302.398840][ T8550] ? lock_chain_count+0x20/0x20 [ 302.409266][ T8550] ? lock_chain_count+0x20/0x20 [ 302.409305][ T8550] __x64_sys_openat+0x139/0x160 [ 302.409343][ T8550] do_syscall_64+0x55/0xb0 [ 302.419314][ T8550] ? clear_bhb_loop+0x40/0x90 [ 302.419350][ T8550] ? clear_bhb_loop+0x40/0x90 [ 302.428652][ T8550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.438041][ T8550] RIP: 0033:0x7fbf7b95e98e [ 302.438076][ T8550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 302.468102][ T8550] RSP: 002b:00007fbf79bf5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 302.468133][ T8550] RAX: ffffffffffffffda RBX: 00007fbf79bf66c0 RCX: 00007fbf7b95e98e [ 302.468150][ T8550] RDX: 0000000000141102 RSI: 00007fbf79bf5c00 RDI: ffffffffffffff9c [ 302.468167][ T8550] RBP: 00007fbf79bf5c00 R08: 0000000000000000 R09: 0000000000000000 [ 302.468183][ T8550] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 302.484607][ T8550] R13: 00007fbf7bc26038 R14: 00007fbf7bc25fa0 R15: 00007ffc3807b498 [ 302.484652][ T8550] [ 302.945002][ T8563] FAULT_INJECTION: forcing a failure. [ 302.945002][ T8563] name failslab, interval 1, probability 0, space 0, times 0 [ 302.998905][ T8563] CPU: 1 PID: 8563 Comm: syz.0.782 Not tainted syzkaller #0 [ 303.006287][ T8563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 303.016370][ T8563] Call Trace: [ 303.016383][ T8563] [ 303.016395][ T8563] dump_stack_lvl+0x18c/0x250 [ 303.027423][ T8563] ? show_regs_print_info+0x20/0x20 [ 303.032690][ T8563] ? load_image+0x420/0x420 [ 303.037309][ T8563] ? __might_sleep+0xe0/0xe0 [ 303.041982][ T8563] ? __lock_acquire+0x7d80/0x7d80 [ 303.047068][ T8563] should_fail_ex+0x394/0x4c0 [ 303.051786][ T8563] should_failslab+0x9/0x20 [ 303.056332][ T8563] slab_pre_alloc_hook+0x59/0x300 [ 303.061404][ T8563] ? __register_sysctl_table+0x71/0x1210 [ 303.061433][ T8563] ? __register_sysctl_table+0x71/0x1210 [ 303.061458][ T8563] __kmem_cache_alloc_node+0x53/0x250 [ 303.061496][ T8563] ? __register_sysctl_table+0x71/0x1210 [ 303.061521][ T8563] __kmalloc+0xa7/0x240 [ 303.061562][ T8563] __register_sysctl_table+0x71/0x1210 [ 303.061588][ T8563] ? kmemdup+0x55/0x70 [ 303.061619][ T8563] ? __asan_memcpy+0x40/0x70 [ 303.102377][ T8563] setup_ipc_sysctls+0x247/0x2e0 [ 303.107470][ T8563] copy_ipcs+0x333/0x500 [ 303.111790][ T8563] create_new_namespaces+0x212/0x700 [ 303.117209][ T8563] unshare_nsproxy_namespaces+0x11a/0x160 [ 303.123067][ T8563] ksys_unshare+0x4fa/0x8f0 [ 303.127623][ T8563] ? sighand_ctor+0x50/0x50 [ 303.132161][ T8563] ? lock_chain_count+0x20/0x20 [ 303.132193][ T8563] ? syscall_enter_from_user_mode+0x25/0x80 [ 303.132223][ T8563] __x64_sys_unshare+0x38/0x40 [ 303.132250][ T8563] do_syscall_64+0x55/0xb0 [ 303.152783][ T8563] ? clear_bhb_loop+0x40/0x90 [ 303.157530][ T8563] ? clear_bhb_loop+0x40/0x90 [ 303.162272][ T8563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.168229][ T8563] RIP: 0033:0x7fbf7b99e159 [ 303.172707][ T8563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.192381][ T8563] RSP: 002b:00007fbf79bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.200919][ T8563] RAX: ffffffffffffffda RBX: 00007fbf7bc25fa0 RCX: 00007fbf7b99e159 [ 303.200939][ T8563] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 303.200953][ T8563] RBP: 00007fbf7ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 303.200967][ T8563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.200980][ T8563] R13: 00007fbf7bc26038 R14: 00007fbf7bc25fa0 R15: 00007ffc3807b498 [ 303.201013][ T8563] [ 303.644473][ T8573] serio: Serial port ttyS3 [ 305.268228][ T8604] loop2: detected capacity change from 0 to 1024 [ 305.330829][ T8604] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 305.394273][ T8604] JBD2: no valid journal superblock found [ 305.420836][ T8604] EXT4-fs (loop2): Could not load journal inode [ 307.108967][ C0] net_ratelimit: 31 callbacks suppressed [ 307.284326][ T8622] FAULT_INJECTION: forcing a failure. [ 307.284326][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 307.306199][ T8622] CPU: 1 PID: 8622 Comm: syz.2.801 Not tainted syzkaller #0 [ 307.313574][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.323696][ T8622] Call Trace: [ 307.327026][ T8622] [ 307.330004][ T8622] dump_stack_lvl+0x18c/0x250 [ 307.334753][ T8622] ? show_regs_print_info+0x20/0x20 [ 307.340008][ T8622] ? load_image+0x420/0x420 [ 307.344574][ T8622] ? __might_sleep+0xe0/0xe0 [ 307.349216][ T8622] ? __lock_acquire+0x7d80/0x7d80 [ 307.354276][ T8622] should_fail_ex+0x394/0x4c0 [ 307.359010][ T8622] should_failslab+0x9/0x20 [ 307.359045][ T8622] slab_pre_alloc_hook+0x59/0x300 [ 307.359084][ T8622] ? snd_virmidi_output_open+0xbb/0x5c0 [ 307.368641][ T8622] __kmem_cache_alloc_node+0x53/0x250 [ 307.379867][ T8622] ? snd_virmidi_output_open+0xbb/0x5c0 [ 307.379899][ T8622] kmalloc_trace+0x2a/0xe0 [ 307.379937][ T8622] snd_virmidi_output_open+0xbb/0x5c0 [ 307.389922][ T8622] open_substream+0x3e5/0x760 [ 307.400010][ T8622] rawmidi_open_priv+0xc4/0x620 [ 307.400048][ T8622] snd_rawmidi_open+0x465/0xaf0 [ 307.409910][ T8622] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 307.415692][ T8622] ? do_task_dead+0xd0/0xd0 [ 307.420438][ T8622] ? __kobject_del+0x2e0/0x2e0 [ 307.425256][ T8622] ? __asan_memset+0x22/0x40 [ 307.429910][ T8622] ? snd_open+0x302/0x390 [ 307.434306][ T8622] chrdev_open+0x58c/0x600 [ 307.438784][ T8622] ? cd_forget+0x160/0x160 [ 307.443263][ T8622] ? fsnotify_perm+0x3ed/0x5e0 [ 307.448078][ T8622] do_dentry_open+0x880/0x14b0 [ 307.448118][ T8622] ? cd_forget+0x160/0x160 [ 307.453088][ T8622] path_openat+0x284f/0x3270 [ 307.453137][ T8622] ? do_sys_openat2+0xda/0x1d0 [ 307.453165][ T8622] ? __x64_sys_openat+0x139/0x160 [ 307.453197][ T8622] ? verify_lock_unused+0x140/0x140 [ 307.462303][ T8622] ? do_filp_open+0x430/0x430 [ 307.472124][ T8622] do_filp_open+0x1f2/0x430 [ 307.482050][ T8622] ? vfs_tmpfile+0x620/0x620 [ 307.482129][ T8622] ? _raw_spin_unlock+0x28/0x40 [ 307.491208][ T8622] ? alloc_fd+0x590/0x640 [ 307.491250][ T8622] do_sys_openat2+0x134/0x1d0 [ 307.505274][ T8622] ? do_sys_open+0xe0/0xe0 [ 307.509762][ T8622] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 307.515807][ T8622] ? lock_chain_count+0x20/0x20 [ 307.520711][ T8622] ? lock_chain_count+0x20/0x20 [ 307.525626][ T8622] __x64_sys_openat+0x139/0x160 [ 307.530563][ T8622] do_syscall_64+0x55/0xb0 [ 307.535080][ T8622] ? clear_bhb_loop+0x40/0x90 [ 307.539820][ T8622] ? clear_bhb_loop+0x40/0x90 [ 307.544601][ T8622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.550559][ T8622] RIP: 0033:0x7f3206d5e98e [ 307.555116][ T8622] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 307.574873][ T8622] RSP: 002b:00007f3207c35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.583351][ T8622] RAX: ffffffffffffffda RBX: 00007f3207c366c0 RCX: 00007f3206d5e98e [ 307.591415][ T8622] RDX: 0000000000141102 RSI: 00007f3207c35c00 RDI: ffffffffffffff9c [ 307.599441][ T8622] RBP: 00007f3207c35c00 R08: 0000000000000000 R09: 0000000000000000 [ 307.607457][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 307.615474][ T8622] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 307.623513][ T8622] [ 307.792733][ T8628] loop4: detected capacity change from 0 to 1024 [ 307.852411][ T8628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 307.910305][ T8628] JBD2: no valid journal superblock found [ 307.939212][ T8628] EXT4-fs (loop4): Could not load journal inode [ 309.678144][ T8654] FAULT_INJECTION: forcing a failure. [ 309.678144][ T8654] name failslab, interval 1, probability 0, space 0, times 0 [ 309.715646][ T8654] CPU: 0 PID: 8654 Comm: syz.2.813 Not tainted syzkaller #0 [ 309.723033][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.733144][ T8654] Call Trace: [ 309.736464][ T8654] [ 309.739439][ T8654] dump_stack_lvl+0x18c/0x250 [ 309.744195][ T8654] ? show_regs_print_info+0x20/0x20 [ 309.749453][ T8654] ? load_image+0x420/0x420 [ 309.754022][ T8654] ? __might_sleep+0xe0/0xe0 [ 309.758669][ T8654] ? __lock_acquire+0x7d80/0x7d80 [ 309.763755][ T8654] should_fail_ex+0x394/0x4c0 [ 309.768502][ T8654] should_failslab+0x9/0x20 [ 309.773077][ T8654] slab_pre_alloc_hook+0x59/0x300 [ 309.778154][ T8654] ? snd_virmidi_output_open+0xbb/0x5c0 [ 309.783739][ T8654] __kmem_cache_alloc_node+0x53/0x250 [ 309.789591][ T8654] ? snd_virmidi_output_open+0xbb/0x5c0 [ 309.795177][ T8654] kmalloc_trace+0x2a/0xe0 [ 309.799632][ T8654] snd_virmidi_output_open+0xbb/0x5c0 [ 309.805045][ T8654] open_substream+0x3e5/0x760 [ 309.809768][ T8654] rawmidi_open_priv+0xc4/0x620 [ 309.814661][ T8654] snd_rawmidi_open+0x465/0xaf0 [ 309.819583][ T8654] ? snd_rawmidi_ioctl_compat+0x800/0x800 [ 309.825349][ T8654] ? do_task_dead+0xd0/0xd0 [ 309.829887][ T8654] ? __kobject_del+0x2e0/0x2e0 [ 309.834683][ T8654] ? __asan_memset+0x22/0x40 [ 309.839324][ T8654] ? snd_open+0x302/0x390 [ 309.843696][ T8654] chrdev_open+0x58c/0x600 [ 309.848238][ T8654] ? cd_forget+0x160/0x160 [ 309.852695][ T8654] ? fsnotify_perm+0x3ed/0x5e0 [ 309.857497][ T8654] do_dentry_open+0x880/0x14b0 [ 309.862347][ T8654] ? cd_forget+0x160/0x160 [ 309.866803][ T8654] path_openat+0x284f/0x3270 [ 309.871535][ T8654] ? do_sys_openat2+0xda/0x1d0 [ 309.876420][ T8654] ? __x64_sys_openat+0x139/0x160 [ 309.881479][ T8654] ? verify_lock_unused+0x140/0x140 [ 309.886719][ T8654] ? do_filp_open+0x430/0x430 [ 309.891437][ T8654] do_filp_open+0x1f2/0x430 [ 309.895999][ T8654] ? vfs_tmpfile+0x620/0x620 [ 309.900641][ T8654] ? _raw_spin_unlock+0x28/0x40 [ 309.905528][ T8654] ? alloc_fd+0x590/0x640 [ 309.909927][ T8654] do_sys_openat2+0x134/0x1d0 [ 309.914643][ T8654] ? do_sys_open+0xe0/0xe0 [ 309.919100][ T8654] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 309.925120][ T8654] ? lock_chain_count+0x20/0x20 [ 309.930002][ T8654] ? lock_chain_count+0x20/0x20 [ 309.934884][ T8654] __x64_sys_openat+0x139/0x160 [ 309.939781][ T8654] do_syscall_64+0x55/0xb0 [ 309.944273][ T8654] ? clear_bhb_loop+0x40/0x90 [ 309.948992][ T8654] ? clear_bhb_loop+0x40/0x90 [ 309.953729][ T8654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.959660][ T8654] RIP: 0033:0x7f3206d5e98e [ 309.964106][ T8654] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 309.983748][ T8654] RSP: 002b:00007f3207c35b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.992285][ T8654] RAX: ffffffffffffffda RBX: 00007f3207c366c0 RCX: 00007f3206d5e98e [ 310.000282][ T8654] RDX: 0000000000141102 RSI: 00007f3207c35c00 RDI: ffffffffffffff9c [ 310.008286][ T8654] RBP: 00007f3207c35c00 R08: 0000000000000000 R09: 0000000000000000 [ 310.016301][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 310.024304][ T8654] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 310.032328][ T8654] [ 311.916916][ T8699] loop3: detected capacity change from 0 to 1024 [ 311.927855][ T8699] EXT4-fs: quotafile must be on filesystem root [ 312.228888][ C0] net_ratelimit: 38 callbacks suppressed [ 314.016193][ T8731] syzkaller0: entered allmulticast mode [ 314.040767][ T8727] syzkaller0: left allmulticast mode [ 315.512390][ T8743] loop2: detected capacity change from 0 to 1024 [ 315.563146][ T8743] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 315.620051][ T8743] JBD2: no valid journal superblock found [ 315.647063][ T8743] EXT4-fs (loop2): Could not load journal inode [ 315.767728][ T8751] FAULT_INJECTION: forcing a failure. [ 315.767728][ T8751] name failslab, interval 1, probability 0, space 0, times 0 [ 315.781026][ T8751] CPU: 0 PID: 8751 Comm: syz.0.849 Not tainted syzkaller #0 [ 315.788366][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.798465][ T8751] Call Trace: [ 315.801827][ T8751] [ 315.804803][ T8751] dump_stack_lvl+0x18c/0x250 [ 315.809567][ T8751] ? show_regs_print_info+0x20/0x20 [ 315.814822][ T8751] ? load_image+0x420/0x420 [ 315.819393][ T8751] should_fail_ex+0x394/0x4c0 [ 315.824133][ T8751] ? __sigqueue_alloc+0x32/0x520 [ 315.829241][ T8751] should_failslab+0x9/0x20 [ 315.833826][ T8751] slab_pre_alloc_hook+0x59/0x300 [ 315.838934][ T8751] ? __lock_acquire+0x7d80/0x7d80 [ 315.844042][ T8751] ? __sigqueue_alloc+0x32/0x520 [ 315.849050][ T8751] kmem_cache_alloc+0x5a/0x2c0 [ 315.853894][ T8751] ? __sigqueue_alloc+0x40c/0x520 [ 315.858985][ T8751] ? __sigqueue_alloc+0x32/0x520 [ 315.863984][ T8751] __sigqueue_alloc+0x40c/0x520 [ 315.868994][ T8751] __send_signal_locked+0x22f/0xe00 [ 315.874286][ T8751] do_notify_parent+0xb26/0xd10 [ 315.879250][ T8751] ? trace_signal_generate+0x1c0/0x1c0 [ 315.884895][ T8751] ? __lock_acquire+0x7d80/0x7d80 [ 315.890005][ T8751] release_task+0x1227/0x1690 [ 315.894774][ T8751] ? do_exit+0x1888/0x2530 [ 315.899264][ T8751] ? delayed_put_task_struct+0x2a0/0x2a0 [ 315.904968][ T8751] ? _raw_write_lock_irq+0xbb/0xf0 [ 315.910151][ T8751] ? _raw_write_lock_irqsave+0x100/0x100 [ 315.915863][ T8751] ? _raw_write_unlock_irq+0x23/0x50 [ 315.921212][ T8751] ? lockdep_hardirqs_on+0x98/0x150 [ 315.926476][ T8751] do_exit+0x1888/0x2530 [ 315.930794][ T8751] ? put_task_struct+0xc0/0xc0 [ 315.935646][ T8751] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 315.941683][ T8751] ? get_signal+0x100e/0x1390 [ 315.946417][ T8751] ? lock_chain_count+0x20/0x20 [ 315.951319][ T8751] ? _raw_spin_lock_irq+0xbb/0xf0 [ 315.956394][ T8751] do_group_exit+0x22d/0x2f0 [ 315.961054][ T8751] ? lockdep_hardirqs_on+0x98/0x150 [ 315.966331][ T8751] get_signal+0x12a6/0x1390 [ 315.970997][ T8751] arch_do_signal_or_restart+0xc2/0x7b0 [ 315.976608][ T8751] ? __ia32_sys_get_robust_list+0x110/0x110 [ 315.982543][ T8751] ? arch_do_signal_or_restart+0x4bd/0x7b0 [ 315.988433][ T8751] ? get_sigframe_size+0x20/0x20 [ 315.993450][ T8751] ? exit_to_user_mode_loop+0x3b/0x110 [ 315.998964][ T8751] exit_to_user_mode_loop+0x70/0x110 [ 316.004318][ T8751] exit_to_user_mode_prepare+0xee/0x180 [ 316.009919][ T8751] syscall_exit_to_user_mode+0x1a/0x50 [ 316.015439][ T8751] do_syscall_64+0x61/0xb0 [ 316.019907][ T8751] ? clear_bhb_loop+0x40/0x90 [ 316.024633][ T8751] ? clear_bhb_loop+0x40/0x90 [ 316.029459][ T8751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.035406][ T8751] RIP: 0033:0x7fbf7b99e159 [ 316.039869][ T8751] Code: Unable to access opcode bytes at 0x7fbf7b99e12f. [ 316.046918][ T8751] RSP: 002b:00007fbf79bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 316.055358][ T8751] RAX: fffffffffffffe00 RBX: 00007fbf7bc25fa8 RCX: 00007fbf7b99e159 [ 316.063392][ T8751] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf7bc25fa8 [ 316.071386][ T8751] RBP: 00007fbf7bc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 316.071402][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.071416][ T8751] R13: 00007fbf7bc26038 R14: 00007ffc3807b3b0 R15: 00007ffc3807b498 [ 316.071451][ T8751] [ 317.354574][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357285][ C0] net_ratelimit: 39 callbacks suppressed [ 317.361345][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.047065][ T8772] loop4: detected capacity change from 0 to 512 [ 318.112183][ T8772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.126004][ T8772] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.240922][ T8772] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 318.428483][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.192104][ T8790] loop4: detected capacity change from 0 to 1024 [ 319.232132][ T8790] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 319.295953][ T8790] JBD2: no valid journal superblock found [ 319.371039][ T8790] EXT4-fs (loop4): Could not load journal inode [ 322.004734][ T8824] serio: Serial port ttyS3 [ 322.936526][ C1] net_ratelimit: 30 callbacks suppressed [ 323.693793][ T8845] 9pnet_virtio: no channels available for device syz [ 323.726170][ T8845] process 'syz.3.876' launched '/dev/fd/10' with NULL argv: empty string added [ 323.903612][ T8843] loop4: detected capacity change from 0 to 1024 [ 324.059392][ T8843] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 324.466034][ T8843] JBD2: no valid journal superblock found [ 324.553368][ T8843] EXT4-fs (loop4): Could not load journal inode [ 324.635431][ T5797] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 325.024113][ T8860] serio: Serial port ttyS3 [ 326.336875][ T8870] (null): rxe_set_mtu: Set mtu to 1024 [ 327.238272][ T8871] syz.2.884 (8871) used greatest stack depth: 17032 bytes left [ 327.766472][ T8870] infiniband syz0: set down [ 327.772213][ T8870] infiniband syz0: added bond0 [ 327.789591][ T8870] syz0: rxe_create_cq: returned err = -12 [ 327.798062][ T8870] infiniband syz0: Couldn't create ib_mad CQ [ 327.807380][ T8870] infiniband syz0: Couldn't open port 1 [ 327.999745][ C1] net_ratelimit: 47 callbacks suppressed [ 328.132845][ T8897] serio: Serial port ttyS3 [ 328.580422][ T8870] RDS/IB: syz0: added [ 328.727146][ T8870] smc: adding ib device syz0 with port count 1 [ 328.744112][ T8870] smc: ib device syz0 port 1 has pnetid [ 333.028817][ C1] net_ratelimit: 16 callbacks suppressed [ 335.122954][ T8935] serio: Serial port ttyS3 [ 336.631011][ T8954] batman_adv: batadv0: Adding interface: syzkaller0 [ 336.686932][ T8954] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.752850][ T8954] batman_adv: batadv0: Interface activated: syzkaller0 [ 336.880892][ T8952] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 337.058558][ T8952] batman_adv: batadv0: Removing interface: syzkaller0 [ 337.464199][ T8971] serio: Serial port ttyS3 [ 338.087152][ T5787] net_ratelimit: 38 callbacks suppressed [ 338.508225][ T8980] jffs2: notice: (8980) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 338.717823][ T8982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 339.448196][ T8990] FAULT_INJECTION: forcing a failure. [ 339.448196][ T8990] name failslab, interval 1, probability 0, space 0, times 0 [ 339.462348][ T8990] CPU: 0 PID: 8990 Comm: syz.2.918 Not tainted syzkaller #0 [ 339.469708][ T8990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 339.479817][ T8990] Call Trace: [ 339.483110][ T8990] [ 339.486072][ T8990] dump_stack_lvl+0x18c/0x250 [ 339.490779][ T8990] ? show_regs_print_info+0x20/0x20 [ 339.496021][ T8990] ? load_image+0x420/0x420 [ 339.500551][ T8990] ? __might_sleep+0xe0/0xe0 [ 339.505181][ T8990] ? __lock_acquire+0x7d80/0x7d80 [ 339.510244][ T8990] should_fail_ex+0x394/0x4c0 [ 339.514987][ T8990] should_failslab+0x9/0x20 [ 339.519532][ T8990] slab_pre_alloc_hook+0x59/0x300 [ 339.524696][ T8990] ? __ns_get_path+0x2e/0x5f0 [ 339.529425][ T8990] kmem_cache_alloc_lru+0x4d/0x2b0 [ 339.534594][ T8990] ? new_inode_pseudo+0x82/0x1d0 [ 339.539581][ T8990] new_inode_pseudo+0x82/0x1d0 [ 339.544387][ T8990] __ns_get_path+0x249/0x5f0 [ 339.549029][ T8990] ns_get_path+0x54/0x90 [ 339.553320][ T8990] proc_ns_get_link+0x16c/0x2d0 [ 339.558208][ T8990] ? proc_ns_instantiate+0xf0/0xf0 [ 339.563362][ T8990] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 339.568945][ T8990] ? security_inode_follow_link+0xb7/0x100 [ 339.574815][ T8990] ? proc_ns_instantiate+0xf0/0xf0 [ 339.579958][ T8990] pick_link+0x666/0xdd0 [ 339.580036][ T8990] step_into+0xc18/0xee0 [ 339.588545][ T8990] ? __up_read+0x2b8/0x6b0 [ 339.588578][ T8990] ? set_root+0x3a0/0x3a0 [ 339.597347][ T8990] ? d_splice_alias+0x114/0x330 [ 339.597379][ T8990] ? proc_ns_dir_lookup+0x7bb/0x800 [ 339.597420][ T8990] path_openat+0x1656/0x3270 [ 339.607554][ T8990] ? do_filp_open+0x430/0x430 [ 339.616793][ T8990] do_filp_open+0x1f2/0x430 [ 339.616831][ T8990] ? vfs_tmpfile+0x620/0x620 [ 339.625989][ T8990] ? _raw_spin_unlock+0x28/0x40 [ 339.626021][ T8990] ? alloc_fd+0x590/0x640 [ 339.635225][ T8990] do_sys_openat2+0x134/0x1d0 [ 339.635264][ T8990] ? do_sys_open+0xe0/0xe0 [ 339.644424][ T8990] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 339.650433][ T8990] ? lock_chain_count+0x20/0x20 [ 339.650467][ T8990] __x64_sys_openat+0x139/0x160 [ 339.660227][ T8990] do_syscall_64+0x55/0xb0 [ 339.660260][ T8990] ? clear_bhb_loop+0x40/0x90 [ 339.660293][ T8990] ? clear_bhb_loop+0x40/0x90 [ 339.674132][ T8990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 339.680077][ T8990] RIP: 0033:0x7f3206d5e98e [ 339.684698][ T8990] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.704336][ T8990] RSP: 002b:00007f3207c35f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.712789][ T8990] RAX: ffffffffffffffda RBX: 00007f3207c366c0 RCX: 00007f3206d5e98e [ 339.720794][ T8990] RDX: 0000000000000000 RSI: 00007f3206e347a6 RDI: ffffffffffffff9c [ 339.728795][ T8990] RBP: 00007f3206e3506b R08: 0000000000000000 R09: 0000000000000000 [ 339.736797][ T8990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.744805][ T8990] R13: 00007f3207026038 R14: 00007f3207025fa0 R15: 00007fff959fa298 [ 339.752826][ T8990] [ 339.937443][ T5784] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 340.000462][ T5784] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 340.338257][ T8995] bridge0: port 3(syz_tun) entered blocking state [ 340.377126][ T8995] bridge0: port 3(syz_tun) entered disabled state [ 340.475844][ T8995] syz_tun: entered promiscuous mode [ 340.552409][ T8995] bridge0: port 3(syz_tun) entered blocking state [ 340.560636][ T8995] bridge0: port 3(syz_tun) entered forwarding state [ 340.686004][ T9006] netlink: 'syz.4.919': attribute type 9 has an invalid length. [ 340.815690][ T9009] serio: Serial port ttyS3 [ 342.231899][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 342.631478][ T9034] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 343.005189][ T9043] xt_bpf: check failed: parse error [ 343.150873][ C0] net_ratelimit: 46 callbacks suppressed [ 345.026551][ T9056] serio: Serial port ttyS3 [ 346.366958][ T9069] Bluetooth: MGMT ver 1.22 [ 348.404552][ T9092] loop2: detected capacity change from 0 to 1024 [ 348.465382][ T9092] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 348.534839][ T9092] JBD2: no valid journal superblock found [ 348.548806][ C1] net_ratelimit: 47 callbacks suppressed [ 348.560052][ T9092] EXT4-fs (loop2): Could not load journal inode [ 348.897867][ T9096] xt_bpf: check failed: parse error [ 351.760187][ T9129] loop3: detected capacity change from 0 to 1024 [ 351.810722][ T9129] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 351.834776][ T9129] JBD2: no valid journal superblock found [ 351.872421][ T9129] EXT4-fs (loop3): Could not load journal inode [ 353.989608][ C1] net_ratelimit: 44 callbacks suppressed [ 354.714718][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 355.950149][ T5784] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 356.204527][ T5784] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.374272][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 356.499501][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 356.672465][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 356.898853][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 356.937009][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 357.008833][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 357.031266][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 357.062435][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 357.086003][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 357.111504][ T5784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 357.137131][ T5784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 357.160060][ T9182] loop3: detected capacity change from 0 to 32768 [ 357.167697][ T5784] usb 3-1: config 1 interface 0 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 14 [ 357.193800][ T9182] Only 4K block size supported! [ 357.226871][ T9182] Mount JFS Failure: -22 [ 357.236123][ T5784] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 357.255358][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.270537][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.285372][ T5784] usb 3-1: Product: syz [ 357.292499][ T5784] usb 3-1: Manufacturer: syz [ 357.297228][ T5784] usb 3-1: SerialNumber: syz [ 357.327338][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.344128][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.366160][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.376400][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.397053][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.429136][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.436552][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.479137][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.486568][ T9180] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.539423][ T5784] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 357.556858][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 357.597542][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 357.640871][ T5784] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 357.662839][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 357.691760][ T5784] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 357.715275][ T5784] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 358.927902][ T9] usb 3-1: USB disconnect, device number 3 [ 359.028860][ C1] net_ratelimit: 40 callbacks suppressed [ 359.420197][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 359.510385][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 359.540421][ T9] keyspan 3-1:1.0: device disconnected [ 360.394985][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 361.128528][ T9235] serio: Serial port ttyS3 [ 362.179664][ T9241] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.245752][ T9241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 363.273953][ T9241] siw: device registration error -19 [ 363.348282][ T9231] loop4: detected capacity change from 0 to 32768 [ 363.391733][ T9231] Only 4K block size supported! [ 363.396919][ T9231] Mount JFS Failure: -22 [ 363.460946][ T9231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.308826][ C1] net_ratelimit: 28 callbacks suppressed [ 365.036252][ T9276] loop3: detected capacity change from 0 to 1024 [ 365.119381][ T9277] serio: Serial port ttyS3 [ 365.562477][ T9276] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 365.729403][ T9276] JBD2: no valid journal superblock found [ 365.861423][ T9276] EXT4-fs (loop3): Could not load journal inode [ 368.870687][ T9306] serio: Serial port ttyS3 [ 369.508799][ C1] net_ratelimit: 57 callbacks suppressed [ 369.966880][ T9294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.995887][ T9323] loop3: detected capacity change from 0 to 512 [ 371.060358][ T9323] EXT4-fs: Ignoring removed bh option [ 371.126934][ T9323] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.1019: corrupted in-inode xattr: e_value size too large [ 371.174031][ T9323] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1019: couldn't read orphan inode 15 (err -117) [ 371.193930][ T9323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.398852][ T9322] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1019: Unrecognised inode hash code 4 [ 371.517880][ T9322] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1019: Corrupt directory, running e2fsck is recommended [ 371.952741][ T9322] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #12: comm syz.3.1019: corrupted in-inode xattr: bad e_name length [ 372.731050][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.520821][ T9381] loop4: detected capacity change from 0 to 512 [ 374.535267][ T9356] loop3: detected capacity change from 0 to 32768 [ 374.575474][ T9356] Only 4K block size supported! [ 374.587664][ T9356] Mount JFS Failure: -22 [ 374.624240][ T9381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.659094][ T9356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.659089][ T9381] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.773294][ T9381] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 374.788766][ C1] net_ratelimit: 40 callbacks suppressed [ 374.888927][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.186490][ T9388] loop2: detected capacity change from 0 to 512 [ 375.223540][ T9388] EXT4-fs: Ignoring removed bh option [ 375.373229][ T9388] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.1040: corrupted in-inode xattr: e_value size too large [ 375.463069][ T9388] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.1040: couldn't read orphan inode 15 (err -117) [ 375.500598][ T9388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.652812][ T9388] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.1040: Unrecognised inode hash code 4 [ 375.732318][ T9388] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1040: Corrupt directory, running e2fsck is recommended [ 375.833557][ T9388] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #12: comm syz.2.1040: corrupted in-inode xattr: bad e_name length [ 377.049349][ T9421] serio: Serial port ttyS3 [ 378.794861][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.801549][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.984025][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.518594][ T27] libceph: connect (1)[c::]:6789 error -101 [ 379.539177][ T9439] ceph: No mds server is up or the cluster is laggy [ 379.633871][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 379.828785][ C1] net_ratelimit: 42 callbacks suppressed [ 380.442147][ T5845] libceph: connect (1)[c::]:6789 error -101 [ 380.448996][ T5845] libceph: mon0 (1)[c::]:6789 connect error [ 380.537412][ T9447] loop4: detected capacity change from 0 to 512 [ 382.036260][ T9447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.119107][ T9447] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.413224][ T9447] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 383.195103][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.608013][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.724961][ T9481] jffs2: notice: (9481) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 383.756753][ T9481] netlink: 'syz.2.1071': attribute type 12 has an invalid length. [ 384.171608][ T9479] loop4: detected capacity change from 0 to 32768 [ 384.180979][ T9479] Only 4K block size supported! [ 384.185999][ T9479] Mount JFS Failure: -22 [ 384.205737][ T9479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.948770][ C0] net_ratelimit: 33 callbacks suppressed [ 385.315634][ T9496] loop2: detected capacity change from 0 to 1024 [ 385.393604][ T9496] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 385.453750][ T9496] JBD2: no valid journal superblock found [ 385.528657][ T9496] EXT4-fs (loop2): Could not load journal inode [ 386.960187][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 387.633049][ T9530] loop4: detected capacity change from 0 to 512 [ 387.715170][ T9530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.739175][ T9530] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.860257][ T9530] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 387.949701][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.094161][ T9538] bond0: option slaves: interface -b does not exist! [ 388.148419][ T9528] loop2: detected capacity change from 0 to 32768 [ 388.196432][ T9528] Only 4K block size supported! [ 388.243137][ T9528] Mount JFS Failure: -22 [ 388.283157][ T9528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.466567][ T9552] loop2: detected capacity change from 0 to 1024 [ 389.540398][ T9552] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 389.567459][ T9552] JBD2: no valid journal superblock found [ 389.590115][ T9552] EXT4-fs (loop2): Could not load journal inode [ 389.988816][ C0] net_ratelimit: 52 callbacks suppressed [ 390.646178][ T9567] loop4: detected capacity change from 0 to 512 [ 390.745863][ T9567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.779485][ T9567] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.933938][ T9567] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 391.074192][ T7598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.360509][ T9578] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1101'. [ 392.627650][ T9579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.227304][ T9595] nvme nvme0: failed to connect socket: -512 [ 394.247264][ T9601] serio: Serial port ttyS3 [ 395.014682][ C0] net_ratelimit: 52 callbacks suppressed [ 395.084373][ T9609] loop3: detected capacity change from 0 to 512 [ 395.350270][ T9609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.363019][ T9609] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.604010][ T9609] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 396.167657][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.469142][ T9631] netlink: 'syz.4.1119': attribute type 16 has an invalid length. [ 396.488417][ T9631] netlink: 'syz.4.1119': attribute type 17 has an invalid length. [ 397.350012][ T9632] loop3: detected capacity change from 0 to 32768 [ 397.379204][ T9632] Only 4K block size supported! [ 397.384167][ T9632] Mount JFS Failure: -22 [ 397.462541][ T9628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.574425][ T9649] serio: Serial port ttyS3 [ 400.317626][ C0] net_ratelimit: 53 callbacks suppressed [ 401.701177][ T9716] loop3: detected capacity change from 0 to 1024 [ 402.055898][ T9716] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 402.093441][ T9716] JBD2: no valid journal superblock found [ 402.186713][ T9716] EXT4-fs (loop3): Could not load journal inode [ 402.568072][ T9731] serio: Serial port ttyS3 [ 403.036338][ T9735] block device autoloading is deprecated and will be removed. [ 403.409546][ T9669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.453034][ T5087] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 403.493349][ T9742] loop2: detected capacity change from 0 to 1024 [ 403.542353][ T9742] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 403.579523][ T9742] JBD2: no valid journal superblock found [ 403.591939][ T9742] EXT4-fs (loop2): Could not load journal inode [ 405.588884][ C1] net_ratelimit: 43 callbacks suppressed [ 405.864818][ T9765] MTD: Couldn't look up './dev/mtdblock0': -2 [ 408.436005][ T9776] loop3: detected capacity change from 0 to 32768 [ 408.508249][ T9776] Only 4K block size supported! [ 408.513267][ T9776] Mount JFS Failure: -22 [ 409.384006][ T9084] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 409.691982][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.632269][ T9824] loop3: detected capacity change from 0 to 512 [ 410.774832][ T9824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.788780][ C0] net_ratelimit: 46 callbacks suppressed [ 410.794865][ T9824] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.021336][ T9824] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 411.752569][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.625366][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.847756][ T9879] [ 414.850157][ T9879] ====================================================== [ 414.851961][ T9881] kcov: kcov_start: t = ffff88802c3f0000, size = 524288, area = ffffc9000d59c000 [ 414.857197][ T9879] WARNING: possible circular locking dependency detected [ 414.857227][ T9879] syzkaller #0 Not tainted [ 414.867391][ T9881] debugfs: creating file '9880' [ 414.873385][ T9879] ------------------------------------------------------ [ 414.873393][ T9879] syz.0.1181/9879 is trying to acquire lock: [ 414.873406][ T9879] ffff8880659980b8 (&hdev->lock){+.+.}-{3:3}, at: l2cap_chan_connect+0xfc/0xe30 [ 414.904897][ T9879] [ 414.904897][ T9879] but task is already holding lock: [ 414.912305][ T9879] ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 414.921320][ T9879] [ 414.921320][ T9879] which lock already depends on the new lock. [ 414.921320][ T9879] [ 414.931765][ T9879] [ 414.931765][ T9879] the existing dependency chain (in reverse order) is: [ 414.940820][ T9879] [ 414.940820][ T9879] -> #2 (rfcomm_mutex){+.+.}-{3:3}: [ 414.948262][ T9879] __mutex_lock+0x135/0xc80 [ 414.953434][ T9879] rfcomm_security_cfm+0x41/0x550 [ 414.958997][ T9879] hci_auth_complete_evt+0x366/0xba0 [ 414.964890][ T9879] hci_event_packet+0x807/0x1280 [ 414.970365][ T9879] hci_rx_work+0x43a/0xd60 [ 414.975366][ T9879] process_scheduled_works+0xa60/0x1600 [ 414.981465][ T9879] worker_thread+0xa5e/0xfe0 [ 414.986627][ T9879] kthread+0x2fa/0x390 [ 414.989323][ T9881] get_next iter={node=ffff8880254991a0 index=0 depth=1} [ 414.991352][ T9879] ret_from_fork+0x48/0x80 [ 414.998334][ T9881] get_next iter={node=ffff88801baea620 index=0 depth=2} [ 415.003300][ T9879] ret_from_fork_asm+0x11/0x20 [ 415.003359][ T9879] [ 415.003359][ T9879] -> #1 (hci_cb_list_lock){+.+.}-{3:3}: [ 415.003391][ T9879] __mutex_lock+0x135/0xc80 [ 415.003411][ T9879] hci_remote_features_evt+0x535/0x900 [ 415.003430][ T9879] hci_event_packet+0x807/0x1280 [ 415.003449][ T9879] hci_rx_work+0x43a/0xd60 [ 415.003472][ T9879] process_scheduled_works+0xa60/0x1600 [ 415.003498][ T9879] worker_thread+0xa5e/0xfe0 [ 415.003524][ T9879] kthread+0x2fa/0x390 [ 415.003543][ T9879] ret_from_fork+0x48/0x80 [ 415.003568][ T9879] ret_from_fork_asm+0x11/0x20 [ 415.003594][ T9879] [ 415.003594][ T9879] -> #0 (&hdev->lock){+.+.}-{3:3}: [ 415.003629][ T9879] __lock_acquire+0x37ef/0x7d80 [ 415.010723][ T9881] get_next iter={node=ffff88802e0c27a0 index=0 depth=3} [ 415.015905][ T9879] lock_acquire+0x19e/0x420 [ 415.023745][ T9881] get_next iter={node=ffff88802e0c27a0 index=1 depth=3} [ 415.028655][ T9879] __mutex_lock+0x135/0xc80 [ 415.034741][ T9881] get_next iter={node=ffff88802e0c27a0 index=2 depth=3} [ 415.040095][ T9879] l2cap_chan_connect+0xfc/0xe30 [ 415.040120][ T9879] l2cap_sock_connect+0x586/0x760 [ 415.045072][ T9881] get_next iter={node=ffff88801baea620 index=4 depth=2} [ 415.051219][ T9879] kernel_connect+0x142/0x1c0 [ 415.051313][ T9879] rfcomm_dlc_open+0xa1f/0xec0 [ 415.051333][ T9879] rfcomm_sock_connect+0x2ed/0x600 [ 415.056500][ T9881] get_next iter={node=ffff88805ee1b020 index=0 depth=2} [ 415.061083][ T9879] __sys_connect+0x3da/0x470 [ 415.061111][ T9879] __x64_sys_connect+0x7a/0x90 [ 415.066066][ T9881] get_next iter={node=ffff88805d48d420 index=0 depth=3} [ 415.071368][ T9879] do_syscall_64+0x55/0xb0 [ 415.079371][ T9881] get_next iter={node=ffff88805d48d420 index=1 depth=3} [ 415.084067][ T9879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.091215][ T9881] get_next iter={node=ffff8880254991a0 index=0 depth=1} [ 415.096115][ T9879] [ 415.096115][ T9879] other info that might help us debug this: [ 415.096115][ T9879] [ 415.096125][ T9879] Chain exists of: [ 415.096125][ T9879] [ 415.103346][ T9881] get_next iter={node=ffff88801baea620 index=0 depth=2} [ 415.108077][ T9879] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 415.108077][ T9879] [ 415.108110][ T9879] Possible unsafe locking scenario: [ 415.108110][ T9879] [ 415.108116][ T9879] CPU0 CPU1 [ 415.108122][ T9879] ---- ---- [ 415.108128][ T9879] lock(rfcomm_mutex); [ 415.108142][ T9879] lock(hci_cb_list_lock); [ 415.108158][ T9879] lock(rfcomm_mutex); [ 415.108172][ T9879] lock(&hdev->lock); [ 415.108185][ T9879] [ 415.108185][ T9879] *** DEADLOCK *** [ 415.108185][ T9879] [ 415.108190][ T9879] 1 lock held by syz.0.1181/9879: [ 415.108204][ T9879] #0: ffffffff8e562248 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_open+0x95/0xec0 [ 415.108261][ T9879] [ 415.108261][ T9879] stack backtrace: [ 415.108270][ T9879] CPU: 1 PID: 9879 Comm: syz.0.1181 Not tainted syzkaller #0 [ 415.108291][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.108319][ T9879] Call Trace: [ 415.108327][ T9879] [ 415.115325][ T9881] get_next iter={node=ffff88802e0c27a0 index=0 depth=3} [ 415.120726][ T9879] dump_stack_lvl+0x18c/0x250 [ 415.126308][ T9881] get_next iter={node=ffff88802e0c27a0 index=1 depth=3} [ 415.133250][ T9879] ? load_image+0x420/0x420 [ 415.138601][ T9881] get_next iter={node=ffff88802e0c27a0 index=2 depth=3} [ 415.143887][ T9879] ? show_regs_print_info+0x20/0x20 [ 415.143925][ T9879] ? print_circular_bug+0x12b/0x1a0 [ 415.149772][ T9881] get_next iter={node=ffff88801baea620 index=4 depth=2} [ 415.156487][ T9879] check_noncircular+0x2fc/0x400 [ 415.161669][ T9881] get_next iter={node=ffff88805ee1b020 index=0 depth=2} [ 415.166983][ T9879] ? print_deadlock_bug+0x5d0/0x5d0 [ 415.173974][ T9881] get_next iter={node=ffff88805d48d420 index=0 depth=3} [ 415.178847][ T9879] ? lockdep_lock+0xf5/0x230 [ 415.178888][ T9879] ? _find_first_zero_bit+0xd6/0x100 [ 415.185799][ T9881] get_next iter={node=ffff88805d48d420 index=1 depth=3} [ 415.192214][ T9879] __lock_acquire+0x37ef/0x7d80 [ 415.199463][ T9881] get_next iter={node=ffff88805d48d420 index=11 depth=3} [ 415.209514][ T9879] ? verify_lock_unused+0x140/0x140 [ 415.209543][ T9879] ? _printk+0xde/0x130 [ 415.209571][ T9879] ? load_image+0x420/0x420 [ 415.209601][ T9879] lock_acquire+0x19e/0x420 [ 415.209626][ T9879] ? l2cap_chan_connect+0xfc/0xe30 [ 415.209652][ T9879] ? __might_sleep+0xe0/0xe0 [ 415.209680][ T9879] ? read_lock_is_recursive+0x20/0x20 [ 415.209705][ T9879] ? hci_get_route+0x3a5/0x4d0 [ 415.209737][ T9879] ? __lock_acquire+0x7d80/0x7d80 [ 415.215856][ T9881] get_next iter={node=ffff88805d48d420 index=12 depth=3} [ 415.222765][ T9879] __mutex_lock+0x135/0xc80 [ 415.222790][ T9879] ? l2cap_chan_connect+0xfc/0xe30 [ 415.231607][ T9881] get_next iter={node=ffff88805d48d420 index=13 depth=3} [ 415.239005][ T9879] ? do_raw_read_unlock+0x3d/0x80 [ 415.244407][ T9881] get_next iter={node=ffff88805d48d420 index=15 depth=3} [ 415.249791][ T9879] ? _raw_read_unlock+0x28/0x40 [ 415.249818][ T9879] ? hci_get_route+0x3a5/0x4d0 [ 415.249846][ T9879] ? l2cap_chan_connect+0xfc/0xe30 [ 415.249866][ T9879] ? mutex_lock_nested+0x20/0x20 [ 415.249891][ T9879] ? mark_lock+0x94/0x320 [ 415.249920][ T9879] l2cap_chan_connect+0xfc/0xe30 [ 415.249942][ T9879] ? lock_chain_count+0x20/0x20 [ 415.249969][ T9879] ? l2cap_chan_le_send_credits+0x4e0/0x4e0 [ 415.254131][ T9881] get_next iter={node=ffff88805d48d420 index=16 depth=3} [ 415.261144][ T9879] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.261171][ T9879] ? _local_bh_enable+0xa0/0xa0 [ 415.267859][ T9881] get_next iter={node=ffff88805d48d420 index=17 depth=3} [ 415.271924][ T9879] ? bacmp+0xe/0x30 [ 415.271952][ T9879] l2cap_sock_connect+0x586/0x760 [ 415.280149][ T9881] get_next iter={node=ffff88805d48d420 index=18 depth=3} [ 415.285114][ T9879] ? l2cap_sock_bind+0x940/0x940 [ 415.294459][ T9881] get_next iter={node=ffff88805d48d420 index=19 depth=3} [ 415.300279][ T9879] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 415.300310][ T9879] ? __lock_acquire+0x7d80/0x7d80 [ 415.300342][ T9879] ? kernel_connect+0xf2/0x1c0 [ 415.300373][ T9879] kernel_connect+0x142/0x1c0 [ 415.300403][ T9879] ? kernel_accept+0x350/0x350 [ 415.300438][ T9879] ? rfcomm_dlc_open+0x9e3/0xec0 [ 415.300462][ T9879] rfcomm_dlc_open+0xa1f/0xec0 [ 415.300483][ T9879] ? rfcomm_sock_connect+0x2c6/0x600 [ 415.307874][ T9881] get_next iter={node=ffff88805d48d420 index=20 depth=3} [ 415.317922][ T9879] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.317949][ T9879] ? rfcomm_dlc_free+0x50/0x50 [ 415.317970][ T9879] ? __local_bh_enable_ip+0x13a/0x1c0 [ 415.317992][ T9879] ? _local_bh_enable+0xa0/0xa0 [ 415.318015][ T9879] ? do_raw_spin_unlock+0x121/0x230 [ 415.318047][ T9879] rfcomm_sock_connect+0x2ed/0x600 [ 415.318075][ T9879] __sys_connect+0x3da/0x470 [ 415.318103][ T9879] ? __sys_connect_file+0x170/0x170 [ 415.318140][ T9879] __x64_sys_connect+0x7a/0x90 [ 415.318167][ T9879] do_syscall_64+0x55/0xb0 [ 415.321554][ T9881] get_next iter={node=ffff88805d48d420 index=21 depth=3} [ 415.324426][ T9879] ? clear_bhb_loop+0x40/0x90 [ 415.331435][ T9881] get_next iter={node=ffff88805d48d420 index=22 depth=3} [ 415.336044][ T9879] ? clear_bhb_loop+0x40/0x90 [ 415.343150][ T9881] get_next iter={node=ffff88805d48d420 index=23 depth=3} [ 415.347571][ T9879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.354704][ T9881] get_next iter={node=ffff88805d48d420 index=24 depth=3} [ 415.359710][ T9879] RIP: 0033:0x7fbf7b99e159 [ 415.359736][ T9879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.364968][ T9881] get_next iter={node=ffff88805d48d420 index=25 depth=3} [ 415.371879][ T9879] RSP: 002b:00007fbf79bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 415.371906][ T9879] RAX: ffffffffffffffda RBX: 00007fbf7bc25fa0 RCX: 00007fbf7b99e159 [ 415.376891][ T9881] get_next iter={node=ffff88805d48d420 index=26 depth=3} [ 415.383813][ T9879] RDX: 000000000000000a RSI: 0000200000000040 RDI: 0000000000000004 [ 415.383831][ T9879] RBP: 00007fbf7ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 415.383846][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.389166][ T9881] get_next iter={node=ffff88805d48d420 index=27 depth=3} [ 415.396090][ T9879] R13: 00007fbf7bc26038 R14: 00007fbf7bc25fa0 R15: 00007ffc3807b498 [ 415.400808][ T9881] get_next iter={node=ffff88805d48d420 index=28 depth=3} [ 415.405967][ T9879] [ 415.413710][ T9881] get_next iter={node=ffff88805d48d420 index=29 depth=3} [ 415.418126][ C1] virtqueue callback for ffff8880217e6400 (ffffffff85c745d0) [ 415.425113][ T9881] get_next iter={node=ffff88805d48d420 index=30 depth=3} [ 415.431842][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 415.434346][ T9881] get_next iter={node=ffff88805d48d420 index=31 depth=3} [ 415.448843][ C1] No more buffers in queue [ 415.453257][ T9881] get_next iter={node=ffff88805d48d420 index=32 depth=3} [ 415.458502][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 415.458504][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 415.458535][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 415.458559][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 415.458573][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 415.458586][ C1] Receiving skb proto 0x0800 len 52 type 0 [ 415.458615][ C1] No more buffers in queue [ 415.463397][ T9881] get_next iter={node=ffff88805d19e420 index=0 depth=3} [ 415.468457][ C1] Added buffer head 2264 to ffff8880217e6400 [ 415.475596][ T9881] get_next iter={node=ffff88805d19e420 index=1 depth=3} [ 415.480025][ C1] Added buffer head 2263 to ffff8880217e6400 [ 415.485165][ T9881] get_next iter={node=ffff88805d19e420 index=2 depth=3} [ 415.492332][ C1] Added buffer head 2262 to ffff8880217e6400 [ 415.497330][ T9881] get_next iter={node=ffff88805d19e420 index=3 depth=3} [ 415.504550][ C1] Added buffer head 2261 to ffff8880217e6400 [ 415.509293][ T9881] get_next iter={node=ffff88805d19e420 index=4 depth=3} [ 415.514075][ C1] Added buffer head 2260 to ffff8880217e6400 [ 415.514095][ C1] Added buffer head 2259 to ffff8880217e6400 [ 415.514112][ C1] Added buffer head 2258 to ffff8880217e6400 [ 415.514128][ C1] Added buffer head 2257 to ffff8880217e6400 [ 415.514145][ C1] Added buffer head 2256 to ffff8880217e6400 [ 415.514161][ C1] Added buffer head 2255 to ffff8880217e6400 [ 415.514178][ C1] Added buffer head 2320 to ffff8880217e6400 [ 415.514195][ C1] Added buffer head 2319 to ffff8880217e6400 [ 415.514212][ C1] Added buffer head 2318 to ffff8880217e6400 [ 415.514229][ C1] Added buffer head 2317 to ffff8880217e6400 [ 415.514247][ C1] Added buffer head 2316 to ffff8880217e6400 [ 415.514264][ C1] Added buffer head 2315 to ffff8880217e6400 [ 415.514281][ C1] Added buffer head 2314 to ffff8880217e6400 [ 415.514299][ C1] Added buffer head 2313 to ffff8880217e6400 [ 415.514317][ C1] Added buffer head 2312 to ffff8880217e6400 [ 415.514334][ C1] Added buffer head 2311 to ffff8880217e6400 [ 415.519489][ T9881] get_next iter={node=ffff88805d19e420 index=5 depth=3} [ 415.524437][ C1] Added buffer head 2310 to ffff8880217e6400 [ 415.528879][ T9881] get_next iter={node=ffff88805d19e420 index=7 depth=3} [ 415.533763][ C1] Added buffer head 2309 to ffff8880217e6400 [ 415.538804][ T9881] get_next iter={node=ffff88805d19e420 index=8 depth=3} [ 415.544653][ C1] Added buffer head 2308 to ffff8880217e6400 [ 415.551725][ T9881] get_next iter={node=ffff88805d19e420 index=9 depth=3} [ 415.557267][ C1] Added buffer head 2307 to ffff8880217e6400 [ 415.562154][ T9881] get_next iter={node=ffff88805d19e420 index=10 depth=3} [ 415.569323][ C1] Added buffer head 2306 to ffff8880217e6400 [ 415.573008][ T9881] get_next iter={node=ffff88805d19e420 index=11 depth=3} [ 415.578024][ C1] Added buffer head 2305 to ffff8880217e6400 [ 415.585076][ T9881] get_next iter={node=ffff88805d19e420 index=12 depth=3} [ 415.590117][ C1] Added buffer head 2304 to ffff8880217e6400 [ 415.590134][ C1] Added buffer head 2303 to ffff8880217e6400 [ 415.590150][ C1] Added buffer head 2302 to ffff8880217e6400 [ 415.597175][ T9881] get_next iter={node=ffff88805d19e420 index=13 depth=3} [ 415.603176][ C1] Added buffer head 2301 to ffff8880217e6400 [ 415.603194][ C1] Added buffer head 2300 to ffff8880217e6400 [ 415.608226][ T9881] get_next iter={node=ffff88805d19e420 index=14 depth=3} [ 415.613001][ C1] Added buffer head 2299 to ffff8880217e6400 [ 415.618422][ T9881] get_next iter={node=ffff88805d19e420 index=15 depth=3} [ 415.622483][ C1] Added buffer head 2298 to ffff8880217e6400 [ 415.623375][ C1] No more buffers in queue [ 415.627446][ T9881] get_next iter={node=ffff88805d19e420 index=16 depth=3} [ 415.632223][ C1] eth0: xmit ffff88805f5813c0 42:01:0a:80:00:01 [ 415.637534][ T9881] get_next iter={node=ffff88805d19e420 index=17 depth=3} [ 415.644663][ C1] Added buffer head 2 to ffff8880217e6600 [ 415.650064][ C1] virtqueue callback for ffff8880217e6600 (ffffffff85c746c0) [ 415.650082][ T9881] get_next iter={node=ffff88805d19e420 index=18 depth=3} [ 415.655433][ C1] Sent skb ffff88805f5813c0 [ 415.660319][ T9881] get_next iter={node=ffff88805d19e420 index=19 depth=3} [ 415.665285][ C1] No more buffers in queue [ 415.670576][ T9881] get_next iter={node=ffff88805d19e420 index=20 depth=3} [ 415.675442][ C1] eth0: xmit ffff88805f581140 42:01:0a:80:00:01 [ 415.680056][ T9881] get_next iter={node=ffff88805d19e420 index=21 depth=3} [ 415.685262][ C1] Added buffer head 2 to ffff8880217e6600 [ 415.685325][ C1] virtqueue callback for ffff8880217e6600 (ffffffff85c746c0) [ 415.690098][ T9881] get_next iter={node=ffff88805d19e420 index=22 depth=3} [ 415.701489][ T9881] get_next iter={node=ffff88805d19e420 index=23 depth=3} [ 415.708429][ C1] Sent skb ffff88805f581140 [ 415.713255][ T9881] get_next iter={node=ffff88805d19e420 index=24 depth=3} [ 415.717954][ C1] No more buffers in queue [ 415.725648][ T9881] get_next iter={node=ffff88805d19e420 index=25 depth=3} [ 415.732664][ C1] No more buffers in queue [ 415.737894][ T9881] get_next iter={node=ffff88805d19e420 index=26 depth=3} [ 415.828894][ C1] net_ratelimit: 41 callbacks suppressed [ 415.828942][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 415.832370][ T9881] get_next iter={node=ffff88805d19e420 index=27 depth=3} [ 415.839316][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 415.842196][ T9881] get_next iter={node=ffff88805d19e420 index=28 depth=3} [ 415.849385][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 415.856613][ T9881] get_next iter={node=ffff88805d19e420 index=29 depth=3} [ 415.863904][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 415.875205][ T9881] get_next iter={node=ffff88805d19e420 index=30 depth=3} [ 415.882528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 415.886672][ T9881] get_next iter={node=ffff88805d19e420 index=31 depth=3} [ 415.908790][ C1] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 415.913083][ T9881] get_next iter={node=ffff88805d19e420 index=32 depth=3} [ 415.920145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 415.927575][ T9881] get_next iter={node=ffff8880297a4d20 index=0 depth=3} [ 416.478862][ C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0) [ 416.510650][ T9881] get_next iter={node=ffff8880297a4d20 index=1 depth=3} [ 416.517629][ T9881] get_next iter={node=ffff8880297a4d20 index=2 depth=3} [ 416.524621][ T9881] get_next iter={node=ffff8880297a4d20 index=3 depth=3} [ 416.531600][ T9881] get_next iter={node=ffff8880297a4d20 index=4 depth=3} [ 416.538769][ T9881] get_next iter={node=ffff8880297a4d20 index=5 depth=3} [ 416.545903][ T9881] get_next iter={node=ffff88805ee1b020 index=6 depth=2} [ 416.553379][ T5844] Added buffer head 0 to ffff88801b663c00 [ 416.555180][ T9865] kcov: kcov_task_exit: t = ffff888018738000, kcov->t = ffff888018738000 [ 416.559597][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 416.575079][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 416.576531][ T9709] wireguard: wg1: Sending handshake initiation to peer 22 (127.0.0.1:20003) [ 416.582044][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 416.589859][ C0] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 416.606821][ T5845] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 416.606989][ T1207] Added buffer head 0 to ffff88801b663c00 [ 416.615737][ T5845] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 416.621814][ C0] wireguard: wg2: Receiving keepalive packet from peer 5 ([::1]:20001/0%0) [ 416.631194][ T9712] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 416.639367][ C0] wireguard: wg0: Sending keepalive packet to peer 26 ([::1]:20003/0%0) [ 416.657568][ T9879] hci3: dst 10:aa:aa:aa:aa:aa [ 416.662890][ T9879] hci3: dst 10:aa:aa:aa:aa:aa handle 0x0f00 [ 416.669387][ T9879] hci3 orig refcnt 7 [ 416.673401][ T9879] hci3: conn ffff88807bbc0000 [ 416.679347][ T9879] hcon ffff88807bbc0000 orig refcnt 0 [ 416.684811][ T9881] kcov: kcov_task_exit: t = ffff88802c3f0000, kcov->t = ffff88802c3f0000 [ 416.704512][ T9882] kcov: kcov_start: t = ffff88802afe8000, size = 524288, area = ffffc9000d99d000 [ 416.718418][ T9879] hci3 hcon ffff88807bbc0000 [ 416.723181][ T5087] hci3: [ 416.726073][ T5087] hci3: entry ffff888075cb2f00 [ 416.730930][ T5087] cache ffff888065998f10, 10:aa:aa:aa:aa:aa [ 416.736884][ T5087] hci3: Opcode 0x0405 [ 416.740961][ T5087] hci3: opcode 0x0405 plen 13 [ 416.745919][ T5087] hci3: skb len 16 [ 416.749754][ T5087] hci3: length 1 [ 416.753344][ T5087] hci3: end: err -110 [ 416.757385][ T5790] hci3 cmd_cnt 1 cmd queued 1 [ 416.762199][ T5790] hci3: skb ffff888050943140 [ 416.766822][ T5790] hci3 type 1 len 16 [ 416.771677][ T5776] send_to_group: group=ffff88807d632000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880525e0900 data_type=1 dir=0000000000000000 cookie=0 [ 416.789615][ T7598] send_to_group: group=ffff88807d632000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff8880525e0e00 data_type=1 dir=0000000000000000 cookie=0 [ 416.804616][ T7598] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff88807557e578 mask=8 [ 416.810403][ T9879] hcon ffff88807bbc0000 conn ffff888023d05800 hchan ffff888075d60200 [ 416.814587][ T9883] kcov: kcov_start: t = ffff88802afebc00, size = 524288, area = ffffc9000e9a1000 [ 416.825422][ T5776] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff888074fc7640 mask=8 [ 416.836904][ T7598] fsnotify_insert_event: group=ffff88807d632000 event=ffff88802169c0c0 [ 416.862148][ T5776] fsnotify_insert_event: group=ffff88807d632000 event=ffff888065dc5b00 [ 416.871608][ T5142] get_one_event: group=ffff88807d632000 event=ffff888065dc5b00 [ 416.879390][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff888065dc5b00 [ 416.901468][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff888065dc5b00 [ 416.909306][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff888065dc5b00 [ 416.917406][ T5142] get_one_event: group=ffff88807d632000 event=ffff88802169c0c0 [ 416.925072][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff88802169c0c0 [ 416.938612][ T9879] conn ffff888023d05800, psm 0x03, dcid 0x0000 [ 416.957005][ T9879] chan ffff888079f60000 orig refcnt 1 [ 416.973206][ T9879] hcon ffff88807bbc0000 orig refcnt 1 [ 416.981710][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff88802169c0c0 [ 417.001763][ T9879] hcon ffff88807bbc0000 orig refcnt 2 [ 417.007301][ T9879] chan ffff888079f60000 BT_BOUND -> BT_CONNECT [ 417.013888][ T9879] chan ffff888079f60000 state BT_CONNECT timeout 4000 [ 417.019857][ T9883] kcov: kcov_task_exit: t = ffff88802afebc00, kcov->t = ffff88802afebc00 [ 417.029508][ T9879] chan ffff888079f60000 orig refcnt 2 [ 417.031049][ T9882] kcov: kcov_task_exit: t = ffff88802afe8000, kcov->t = ffff88802afe8000 [ 417.035242][ T9879] hci3 orig refcnt 8 [ 417.047487][ T9879] sk ffff888079f67000 [ 417.051797][ T9879] ffff88805c393c00 [ 417.055638][ T9879] dlc ffff88805c393c00 session ffff888076710d00 [ 417.062028][ T9879] session ffff888076710d00 state 3 [ 417.067256][ T9879] dlc ffff88805c393c00 state 7 timeout 3000 [ 417.073297][ T9879] sk ffff888079f66000 [ 417.077414][ T9879] sock ffff8880743a8c00, sk ffff888079f66000 [ 417.083927][ T9879] sock ffff8880743a8c00, sk ffff888079f66000 [ 417.090207][ T9879] sk ffff888079f66000 state 5 socket ffff8880743a8c00 [ 417.097136][ T9879] dlc ffff88805c393c00 state 7 dlci 6 err 0 [ 417.103358][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff88802169c0c0 [ 417.103411][ T5142] inotify_read: group=ffff88807d632000 kevent=0000000000000000 [ 417.119185][ T1207] nf_nat: Already setup manip DST for ct ffff888075fc2300 (status bits 0x188) [ 417.121628][ T9879] dlc ffff88805c393c00 state 7 dlci 6 err 0 session ffff888076710d00 [ 417.128072][ T1207] nf_nat: Already setup manip SRC for ct ffff888075fc2300 (status bits 0x188) [ 417.136453][ T9879] dlc ffff88805c393c00 state 7 [ 417.152924][ T9879] dlc ffff88805c393c00 state 9 err 0 [ 417.158345][ T9879] dlc ffff88805c393c00 refcnt 2 session ffff888076710d00 [ 417.165697][ T9879] session ffff888076710d00 state 3 timeout 200 [ 417.174100][ T9879] sk ffff888079f66000 state 9 refcnt 2 [ 417.179788][ T9879] sk ffff888079f66000 dlc ffff88805c393c00 [ 417.185806][ T9879] ffff88805c393c00 [ 417.192425][ T9879] kcov: kcov_task_exit: t = ffff888028433c00, kcov->t = ffff888028433c00 [ 417.201318][ T5104] sd 0:0:1:0: cmd ffff888025037910 CDB: 0x2a [ 417.227964][ T5104] Added buffer head 187 to ffff8880217d1000 [ 417.234369][ T5142] kobject: 'loop2' (ffff888020103ca8): kobject_uevent_env [ 417.238790][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 417.245743][ T5142] kobject: 'loop2' (ffff888020103ca8): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 417.248904][ C1] sd 0:0:1:0: cmd ffff888025037910 response 0 status 0x0 sense_len 0 [ 417.248931][ C1] No more buffers in queue [ 417.249921][ T24] sd 0:0:1:0: cmd ffff8880231f0910 CDB: 0x35 [ 417.278235][ T24] Added buffer head 187 to ffff8880217d1000 [ 417.278761][ C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 417.284323][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 417.297217][ T9712] nf_nat: Already setup manip DST for ct ffff888030cdf380 (status bits 0x188) [ 417.303200][ C1] sd 0:0:1:0: cmd ffff8880231f0910 response 0 status 0x0 sense_len 0 [ 417.312139][ T9712] nf_nat: Already setup manip SRC for ct ffff888030cdf380 (status bits 0x188) [ 417.320245][ C1] No more buffers in queue [ 417.333875][ T24] sd 0:0:1:0: cmd ffff888025024fd0 CDB: 0x2a [ 417.340007][ T24] Added buffer head 187 to ffff8880217d1000 [ 417.351910][ T5142] kobject: 'loop4' (ffff888020105428): kobject_uevent_env [ 417.359403][ T5142] kobject: 'loop4' (ffff888020105428): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 417.369803][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 417.369835][ C1] sd 0:0:1:0: cmd ffff888025024fd0 response 0 status 0x0 sense_len 0 [ 417.369863][ C1] No more buffers in queue [ 417.390282][ T24] sd 0:0:1:0: cmd ffff8880231f0910 CDB: 0x35 [ 417.396320][ T24] Added buffer head 187 to ffff8880217d1000 [ 417.402445][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 417.409874][ C1] sd 0:0:1:0: cmd ffff8880231f0910 response 0 status 0x0 sense_len 0 [ 417.411001][ T9084] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff888074fc7640 mask=8000 [ 417.417973][ C1] No more buffers in queue [ 417.432438][ T8993] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff88807557e578 mask=8000 [ 417.443712][ T9084] fsnotify_insert_event: group=ffff88807d632000 event=ffff888065dc5ec0 [ 417.452604][ T8993] fsnotify_insert_event: group=ffff88807d632000 event=ffff88802169ccc0 [ 417.461266][ T5142] get_one_event: group=ffff88807d632000 event=ffff888065dc5ec0 [ 417.469073][ C0] virtqueue callback for ffff8880217e6000 (ffffffff85c745d0) [ 417.476759][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff888065dc5ec0 [ 417.485636][ C0] No more buffers in queue [ 417.485656][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 417.485672][ C0] No more buffers in queue [ 417.485799][ C0] No more buffers in queue [ 417.485807][ C0] eth0: xmit ffff8880777ef140 42:01:0a:80:00:01 [ 417.485823][ C0] Added buffer head 0 to ffff8880217e6200 [ 417.485869][ C0] virtqueue callback for ffff8880217e6200 (ffffffff85c746c0) [ 417.485887][ C0] Sent skb ffff8880777ef140 [ 417.485912][ C0] No more buffers in queue [ 417.543436][ T5778] send_to_group: group=ffff88807d632000 mask=8 marks_mask=2008 marks_ignore_mask=0 data=ffff888026e72180 data_type=1 dir=0000000000000000 cookie=0 [ 417.553792][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff888065dc5ec0 [ 417.560392][ T5778] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff88807557ec80 mask=8 [ 417.565990][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 417.566046][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 417.566060][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 417.566937][ T1207] Added buffer head 0 to ffff88801b663c00 [ 417.575431][ T5778] fsnotify_insert_event: group=ffff88807d632000 event=ffff88802169c400 [ 417.615674][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff888065dc5ec0 [ 417.624022][ T5142] get_one_event: group=ffff88807d632000 event=ffff88802169ccc0 [ 417.631821][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff88802169ccc0 [ 417.642675][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff88802169ccc0 [ 417.650515][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff88802169ccc0 [ 417.658556][ T5142] get_one_event: group=ffff88807d632000 event=ffff88802169c400 [ 417.666380][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff88802169c400 [ 417.675714][ T5845] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 417.676520][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff88802169c400 [ 417.684620][ T5845] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 417.701348][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff88802169c400 [ 417.709559][ T5142] inotify_read: group=ffff88807d632000 kevent=0000000000000000 [ 417.722034][ T5142] kobject: 'loop3' (ffff888020104868): kobject_uevent_env [ 417.729302][ T5142] kobject: 'loop3' (ffff888020104868): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 417.742112][ T9084] inotify_handle_inode_event: group=ffff88807d632000 mark=ffff88807557ec80 mask=8000 [ 417.751965][ T9084] fsnotify_insert_event: group=ffff88807d632000 event=ffff888065dc58c0 [ 417.761334][ T5142] get_one_event: group=ffff88807d632000 event=ffff888065dc58c0 [ 417.769261][ T5142] fsnotify_remove_first_event: group=ffff88807d632000 event=ffff888065dc58c0 [ 417.778310][ T5142] inotify_read: group=ffff88807d632000 kevent=ffff888065dc58c0 [ 417.786361][ T5142] copy_event_to_user: group=ffff88807d632000 event=ffff888065dc58c0 [ 417.794836][ T5142] inotify_read: group=ffff88807d632000 kevent=0000000000000000 [ 417.800034][ T9707] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 417.811573][ T9707] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 417.820550][ T9707] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 417.829747][ T9707] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 417.838656][ T9707] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 417.847624][ T9707] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 418.559542][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 418.567010][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 418.573952][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 418.581166][ T9] Added buffer head 0 to ffff88801b663c00 [ 418.709887][ T27] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 418.718863][ T27] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 418.788827][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 418.795089][ T5790] hci3: err 0x6e [ 418.798770][ T5790] hci3 cmd_cnt 1 cmd queued 0 [ 418.948922][ T2994] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 418.957904][ T2994] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 418.966840][ T2994] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 418.977749][ T2994] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 418.986714][ T2994] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 418.995643][ T2994] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 419.108767][ C0] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 419.120798][ T2994] nf_nat: Already setup manip DST for ct ffff888030cde180 (status bits 0x188) [ 419.129752][ T2994] nf_nat: Already setup manip SRC for ct ffff888030cde180 (status bits 0x188) [ 419.198729][ C1] session ffff888076710d00 state 3 [ 419.203956][ T3368] ffff888076710d00 dlci 0 [ 419.208401][ T3368] ffff888076710d00 cmd 83 [ 419.212992][ T3368] session ffff888076710d00 len 4 [ 419.217981][ T3368] sock ffff8880743ac200, sk ffff888079f67000 [ 419.510111][ T9709] sd 0:0:1:0: cmd ffff888025037cd0 CDB: 0x2a [ 419.516160][ T9709] Added buffer head 187 to ffff8880217d1000 [ 419.522486][ T9709] sd 0:0:1:0: cmd ffff888025038090 CDB: 0x2a [ 419.528519][ T9709] Added buffer head 137 to ffff8880217d1000 [ 419.550892][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 419.558318][ C1] sd 0:0:1:0: cmd ffff888025038090 response 0 status 0x0 sense_len 0 [ 419.559498][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 419.566400][ C1] No more buffers in queue [ 419.573938][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 419.585151][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 419.592354][ T9] Added buffer head 0 to ffff88801b663c00 [ 419.614670][ C1] virtqueue callback for ffff8880217d1000 (ffffffff857f2980) [ 419.622092][ C1] sd 0:0:1:0: cmd ffff888025037cd0 response 0 status 0x0 sense_len 0 [ 419.630168][ C1] No more buffers in queue [ 419.748789][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 14) [ 419.760566][ C1] wireguard: wg0: Handshake for peer 20 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 10) [ 419.773300][ T5784] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 419.782263][ T5784] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 419.782958][ T9709] nf_nat: Already setup manip DST for ct ffff888075fc2300 (status bits 0x188) [ 419.800170][ T9709] nf_nat: Already setup manip SRC for ct ffff888075fc2300 (status bits 0x188) [ 420.139281][ T9709] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 420.148207][ T9709] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 420.157184][ T9709] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 420.166328][ T9709] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 420.175476][ T9709] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 420.184408][ T9709] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 420.559411][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 420.566904][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 420.573880][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 420.582751][ T5844] Added buffer head 0 to ffff88801b663c00 [ 420.789074][ T23] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 420.798010][ T23] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 420.868898][ C1] net_ratelimit: 46 callbacks suppressed [ 420.868917][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 420.883181][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 420.892065][ C0] wireguard: wg1: Receiving keepalive packet from peer 15 ([::1]:20001/0%0) [ 420.892362][ C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 421.298858][ T2994] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 421.307766][ T2994] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 421.316702][ T2994] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 421.325951][ T2994] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 421.334997][ T2994] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 421.343920][ T2994] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 421.559375][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 421.566886][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 421.573853][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 421.581136][ T5844] Added buffer head 0 to ffff88801b663c00 [ 421.668970][ C1] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4) [ 421.680734][ T9707] wireguard: wg1: Sending handshake initiation to peer 4 (127.0.0.1:20003) [ 421.748826][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 421.757650][ C1] wireguard: wg1: Receiving keepalive packet from peer 3 ([::1]:20001/0%0) [ 421.828823][ C1] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 421.837409][ T5845] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 421.846366][ T5845] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 421.908803][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 421.917299][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 422.308724][ C1] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 2) [ 422.320520][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 13) [ 422.479066][ T9709] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 422.488083][ T9709] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 422.497047][ T9709] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 422.506122][ T9709] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 422.515095][ T9709] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 422.524088][ T9709] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 422.559339][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 422.566833][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 422.573782][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 422.581132][ T5844] Added buffer head 0 to ffff88801b663c00 [ 422.790842][ T1207] nf_nat: Already setup manip DST for ct ffff888075fc2300 (status bits 0x188) [ 422.799786][ T1207] nf_nat: Already setup manip SRC for ct ffff888075fc2300 (status bits 0x188) [ 422.868920][ T5845] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 422.878043][ T5845] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 422.948727][ C0] wireguard: wg2: Handshake for peer 23 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 422.960879][ T458] nf_nat: Already setup manip DST for ct ffff888030cdf380 (status bits 0x188) [ 422.969815][ T458] nf_nat: Already setup manip SRC for ct ffff888030cdf380 (status bits 0x188) [ 423.462200][ C0] virtqueue callback for ffff8880217e6000 (ffffffff85c745d0) [ 423.469736][ C0] No more buffers in queue [ 423.474212][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 423.480109][ C0] No more buffers in queue [ 423.484690][ C0] No more buffers in queue [ 423.489156][ C0] eth0: xmit ffff88805e3a9280 42:01:0a:80:00:01 [ 423.495440][ C0] Added buffer head 0 to ffff8880217e6200 [ 423.501195][ C0] virtqueue callback for ffff8880217e6200 (ffffffff85c746c0) [ 423.508772][ C0] Sent skb ffff88805e3a9280 [ 423.513351][ C0] No more buffers in queue [ 423.559262][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 423.566704][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 423.573721][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 423.580909][ T1207] Added buffer head 0 to ffff88801b663c00 [ 423.638983][ T458] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 423.647894][ T458] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 423.656831][ T458] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 423.666091][ T458] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 423.675139][ T458] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 423.684070][ T458] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188) [ 423.909646][ T27] nf_nat: Already setup manip DST for ct ffff8880766eb800 (status bits 0x188) [ 423.918564][ T27] nf_nat: Already setup manip SRC for ct ffff8880766eb800 (status bits 0x188) [ 424.228742][ C1] wireguard: wg1: Handshake for peer 21 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 7) [ 424.240813][ T9709] nf_nat: Already setup manip DST for ct ffff888030cde180 (status bits 0x188) [ 424.249868][ T9709] nf_nat: Already setup manip SRC for ct ffff888030cde180 (status bits 0x188) [ 424.559243][ C0] virtqueue callback for ffff88801b663c00 (ffffffff84a02460) [ 424.566680][ C0] virtqueue interrupt with no work for ffff88801b663a00 [ 424.573644][ C0] virtqueue interrupt with no work for ffff88801b663800 [ 424.580823][ T1207] Added buffer head 0 to ffff88801b663c00 [ 424.798908][ T458] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 0 [ 424.807906][ T458] nf_nat: Already setup manip DST for ct ffff888075fc2780 (status bits 0x188) [ 424.816883][ T458] nf_nat: Already setup manip SRC for ct ffff888075fc2780 (status bits 0x188) [ 424.826089][ T458] bond1: (slave geneve2): Send learning packet: mac 86:a1:a7:8c:9f:79 vlan 1 [ 424.835322][ T458] nf_nat: Already setup manip DST for ct ffff888075fc2900 (status bits 0x188) [ 424.844281][ T458] nf_nat: Already setup manip SRC for ct ffff888075fc2900 (status bits 0x188)