last executing test programs: 5m10.003656446s ago: executing program 0 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 5m3.215489328s ago: executing program 0 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)="135e018c47dbba593147") pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r3, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 4m59.262359248s ago: executing program 0 (id=407): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x7, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0xa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x2, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffe, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x418, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x0, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x404, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x400001, 0xa, 0x0, 0xff, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m54.381433308s ago: executing program 0 (id=413): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, r4, 0x25, 0x8, @val=@iter={0x0}}, 0x20) syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0x20040) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000001801000000006c2500000000002020207b1af8ff000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4m53.462105448s ago: executing program 0 (id=415): getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, &(0x7f00000002c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, 0x0) writev(r5, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/215, 0xd7}], 0x1}, 0x48002) r9 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0xfffffc01, 0x166}, 0x9c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 4m51.975116601s ago: executing program 0 (id=417): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000500020e00000000000000070000fdfc4d9400000000000000000000000000988500000000000002000100000004d40081000064e684060000005a0c34f8899b7d0fa4f6e632aa61aa23d327456f0000000005000500000000000a004e22fffff800fc010000000000000000000000003a000106f6fffffffffff3f762da1c2b120dc7d8fac380ce0d289b03baddd70ed9e9a586f083c55ddce13380eb6a494c78e3e963857e6c4046dd9d7a78594383447ef4a5d894e2eed25ee048ef80af"], 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) io_uring_enter(r4, 0x48e9, 0x4, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) r8 = dup2(r2, r2) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 4m36.043203397s ago: executing program 32 (id=417): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000500020e00000000000000070000fdfc4d9400000000000000000000000000988500000000000002000100000004d40081000064e684060000005a0c34f8899b7d0fa4f6e632aa61aa23d327456f0000000005000500000000000a004e22fffff800fc010000000000000000000000003a000106f6fffffffffff3f762da1c2b120dc7d8fac380ce0d289b03baddd70ed9e9a586f083c55ddce13380eb6a494c78e3e963857e6c4046dd9d7a78594383447ef4a5d894e2eed25ee048ef80af"], 0x70}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) io_uring_enter(r4, 0x48e9, 0x4, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r7, &(0x7f00000011c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000080)={0x10, 0x0, 0x3}, 0x10) r8 = dup2(r2, r2) r9 = socket(0x2b, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 19.867677604s ago: executing program 1 (id=938): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mkdir(&(0x7f0000000280)='./file1\x00', 0x9f550acf755c461f) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000038000511d25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x8000000000000003, {0x1}, 0xff}, 0xfffffe4e) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x24008800) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000400}, 0x4000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$inet6(r10, &(0x7f0000000340)={&(0x7f0000000280)={0xa, 0x4e20, 0xfffffff4, @loopback, 0x37bf}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000008c0)="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", 0x1000}], 0x1, &(0x7f00000018c0)=ANY=[@ANYRES8=r1], 0x228}, 0x4849) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[], 0x50}, 0x1, 0x4000, 0x0, 0x4884}, 0x0) 16.264652039s ago: executing program 3 (id=942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@userxattr}, {@redirect_dir_on}]}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)={0x32, 0x6, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3e, 0xaa5, [0x8, 0x0]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xa}]}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.23947133s ago: executing program 5 (id=943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', r9, 0x2, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_to_hsr\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000)={@remote, r12}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x3375cb7aa35f5ba3}, 0xc000) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r6, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 16.155605134s ago: executing program 1 (id=944): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xa7, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffff5}, 0x1c, &(0x7f0000000540)=[{0x0}, {0x0}], 0x2}, 0x4800) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x200, 0x200, 0x2d0, 0x410, 0x410, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, &(0x7f00000000c0), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @local, [0x0, 0xffffff00, 0x0, 0xff], [0xffffffff, 0x0, 0xffffff00], 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x2c, 0xf5, 0x3, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x8, 0xfffffffd, 0x5d7, 0x7ae2, 0x0, 0x2, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, [0xff000000, 0xffffffff, 0xff, 0xff000000], [0x0, 0x0, 0xffffff00, 0xffffff00], 'vlan0\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5c, 0xa, 0x1, 0x14}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x82}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, [0xffffff00, 0xff000000, 0x0, 0xffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'macvtap0\x00', 'veth1\x00', {}, {0x7f}, 0x62, 0x3, 0x2, 0x4}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@broadcast, 0x3, 0x21}}}, {{@ipv6={@local, @remote, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff000000, 0xff, 0x0, 0xffffff00], 'dvmrp1\x00', 'geneve0\x00', {}, {0xff}, 0x2b, 0x9, 0x0, 0xc}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd, 0x40, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$I2C(&(0x7f0000003980), 0x0, 0x80801) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) 14.61555364s ago: executing program 2 (id=947): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="af164082951c6e25778b4f7a951329005f8ce829fbcf7b818a8ae397a9a4fced60a1f21d4db103250ef6014570d27f82369bf0363abc47ad185290303e9ae27fc4321651c63f60539ff6427911e180ebd30aff44b125a695cb8fc35a6ca7899839ab27c08fd27f59f45004f3d6a3b57594b479da7ee360ef903378bcd3e132b95aea76bfac4662f4ce0bf383b8bcb2a9ff7792ce19245d037220540114798dd536c5e43d78f320434f361d479755267fd72311b81cbe8b4961c72be0d70a779ea78398cb969a7d9688937fcd2f20ec7cf1bde092b5de19473d664237ed942f44337ba647c199e4f69d732eebd95d5070efaa9820a51b926e32df9327f05553c1237fcf3fe6dc6e7ad95599a1db4e662ef9f04eb3cd1780fb5c1086391e0c580411dbc0e326852010ffad21b6365dfd3f823c74685e2749ca9936bee81dfd63f375b6de41845662c56af6956d19de7999ff2ad79b60e4c3db6b54a2b8815bf1138e55ac0899672ceb22c5e48995c7d0f4d69c0a645610340e5f3f01f5fc24fa986fc8fda8cb17fff69fa7ae1ccd895675556226c4fa8cab7480e7b944f235e1a5b080020aa7e01be8b608467b02368e02e3de12f627a92545560f3ff4217f58f8a7890769709c51a4dcb4b7cd3a1111ccad52b159cbde43f2b74bb19fb15108603680541c09d8c71dff8019e52038fc445fe1dcd82e8cb1c56b88842f060d150f953e4056b88960d21fff56aa4c267d4cb0a2e8046d655d3553a49b5f4c7f57b8f024c1b980c8e99c605b704637ec1e1b3b390f74ce4dd26cf4e8787217574a227ccaaa91c1b551036385b2eb2fe531a87815f0961479ad3959cdc58c09dce628af3fac6db8ce0a3b66bbce38cbaa5c51a0767ea8d714e9b676065d8e2d91b53095c9ba58155a364205608472c87ba6303360ff376413c5184830d8edb7af091ba76cb4ed035ae04a6ac360cb257221b5afafc4b42f4d75e7777962b3228bcec7ae0a9ea2c9a6021a965a021597d6f4ecac2063864dd18be2d854718bae6ccb6bb623115da02dd212feabce695b63fa07d7c94f6d4166dc393e53822d5fae0d3309441e54cb4fd000fc88d01c842c8ced32a7f75c1444d3c2994ae02db4c4c424d0486e7e9febfbe6c9d271cb7f38fc4875d0b676989a102603a3925ddb66305196e280d00eb34470e022d451cf68c839cd14eb50ac532483e2f6aca24183a655274854d77282f3878ef36ea1da700bdf19fef27a8439c9664bedf4ed4424af6d2d6159a42ef825e96498bd93eb2bd1376d0932187f5e24cf79c348a26f2b6e1be612a2838ec7d92f0edd9df1cb304908457f0814d2c7354b9e0d7be2271786af0a5cb75e1c5b3998ad5b03f87af380a564b86ef4b2fdb562599850fe39926f64b5a9c82f9d4cc72b8a86703e1405e221cedce70ce94ba253f9b8efc09f3d09aa88dad3f64d5d4f924284cf8464edb1f0111c3b45fef19526103b7df29bdd2533763a1168f966e8af7651171a3ec590717781a2395de3ddb3317a72231d889932c9c9edc04f5fb70fa71c89b396d7ab903273baaf5dbf78aff96452da5fe4775e770d6ba4d90d26438238a1f9c8bfcf56f7104dc23dd0b8462b2a52bb203228fb04dbb773426dd52ac2bb332cd9633feba73cd528f2016519d2dc0ad4eb354d4d02179bf3ced06188552baf7887a0d4e630d7a8b6fc3b0032fdd36aa7ceb259f847f2ecc0e2dd029c076d46478d8469272689058f720512b09f0aea308a3023156f1e10834fe840bbc2de0a187adfc2a3c4b4e12d4363650f5b627428ee1e20898d82caeb66c9950d175a841533c0f3b95a4d8e0344c344c60ca537f11032b55ffbafbf04ec010b2b81125115c98fc9d154dac05e398549c003e7dcc6870a31469589df42672ff5dc5f00e4ce86178f71fc18372f272b99f6632a4ae962a30ab5d550c886fe2dbf7538c980d607ecd1aa056f6a80e8add0c08d636655bd8de3a09f658fecad38b682199df6d2f41c7a9dccba51500d5294d9cd55190f920ab5d6cd280de3db3671453ca62eda3cb36e1b62ed674847f353447f02cef0fb2df5fb2e85af1b39f0c38e256c754517d99273f73a6c71f9ac444e89fb5a8b6b3cf196887f2d348897ef76485c9dd65b5b67901fa13690e273b8b97e0b807944e8fba9b666376ff41c9373edf9543f583726660995969cb29c15341a923cab2dba70fe1512abab5e7d5cf2220f9db2e490d8191869a47101a26365c3d1118ba738f47f7a1c0a5eab00b0d3477426f1cb692bff237c95c88d0983ef944ec0830c90c2184bcf0f848c76bedb7a32aeaed613941cd11096c6789354d0b1b5bb1bb42c2048e416d763e6d15c4711a57ea51b4dff5b22419fecd08bece8fd8cc0135a8d4f4466b97ba1afc5623cf55708afe63d9ae84a88d76ba354e66aa98e818dbfb412e628cd9241556d36d67d20fb97afcb84ed0c7b47ececf137eeb9782795773fd4964eafadaedfcfd6060abd2733eeab2799d35ea82035edb1c1535330880ba9a969a8ba94056044fb0de52e83081a18cf2c815e1d34abf44e904757a022f2b2306e58f6567979b5381ca160dac92f97e196871ba21db0712dfbfc0c4028e308a6473729edf35a425d2644cdea8b6b6adcb8335c494dc110100b36bb9c150fecf3b981ed67fb9223169a491864f444ff491d65dad25348d13cca80b224bee18c738fcb901482c883bfd5e202cb84ab7dfd7423a57410e82f91602fed6b05af4c9494e40184061cc6674be8e15a472beafe4b5d9de9a2cd48bbc56640406a53f1f26f38120ed69863c91e342a658879915f1755924d7aee262dc439e475b924936b24539b68f425a373518baf4a1bb2f2dda051a0ffbb0173a8a45b23ccba3da481f4c1e1428357a732ed68812d6d3c7ac40c571003dbf8b4897a10b31f7f361014feb1317a57246e8374fcbc9cb8fb842628a8c4675025bd03c218fceb4606212d6a16b54f2ab59fe876579ae29b844b99c5e86eb9d06712fcdc31c5472e746613921f6bcb3e695483fd058afbf54d3653fc4e188a1a97a857302d85c492aeb4fd5f2f108531d1a4c35fd91e65094fb9a58bf9700216252ce982a7f48d72bd9ffc78912e0320109803d9d555df376fda4bb81079ca120f9fb5fc9aa96566d7ed024a1b6c2275188b2336f714ef177ee80dc480cfd98669ed337ad4ef4519b599da442e2cf6344c4b6d3e6ab789910724ee8e65f3873980118b71dd4cc3a5a90236445acc42ae8063af9efb64d3b3f8d88ccb7d994ce5d73d12dc7be90fed224e61edd9e95159492f8b069a0b4bcf4abbfe207af81d66485c5d3ced245114f8d01a75d756734620fcc40d804030daf12dba01c8bed5851766613bc98822ee452db542807c741a146220e10bb5cd6247439295f13d9f7732b8e4ca54a6adeda87da4abf3a59104d0d0c5f991074ff329904a857ad22e36a2fea0c06c1a474911f500ddb5e7635c5882522e509180f9dc9a5830d4db7bc43020a43995716bee246293cda578755d35253aff14ff9da966210a6725edbf6b475556a4e91bd3d0a3f178d9559452a10a28c3167c9f74f196b30dfde9a33cde64deab9c2cd6bd38dd9bb8d38feaf9a4ffe75d74523894ee90a84e93e2436f10f63c2815de3cce27a5ea48c4de8b6fe548a05c4606e072887e8165b6802764407f76f4c5ea10c57063b6df52bbe2ed4309bcade9ec37400406d5706b16d61174bac8a11f314dfa6e7e73227ce20a412c2c4a54c9bdf7f65f690a390c5283586ccf9ddd31952a3404725b4143c66b94c4e5b52de186f15ea971cfa64c705af5b7c1d393ddf67d4e551557fa603ac9fce3d68a74f75a4fb5cb94abbbe94c6fb7cb6f555f83f397c0f45ff02c789ba019e519b31eaac49067b824775fe2e630930d058d566784d8914c5d63803a78ab1e910f0bb430c34f24228a497d714a57ab77cdf4ab6a0a0a113291932b9f2becc34d7767b780f20b0e2c132953c94c59fc0943b5e4f71db79f6bdc93f269ff05b9879c1a731f2ace534d0fb3afc894b712d8d27c1b30364cf9272158c594e3775bb18becb55f7d73a1cc9452444545431c6d55952d8a35b0dde9073d1acb38598592d76a679d830501f2460a3e9f152ef0196a3e26cfb2cce418adcaf813f6a3dca19c5aa4783de1fa7fbf707cbb3ce4d1dd2042f21a06d80656798c447da2e4a115b386e1141d26573f82d058c31e104e144a37c63e807d3dfbf849ed3b66c08acc2d90376a38c1f90838f2861eb53b174b9efd7e7350727d1036c9235387773463decb87e86fd4ccbadda8e9fa0ca6e1c08fafcc204a0a9836188b263259aeb404fa2022fbfc8a04eecce9c4007aa7b1f36e1ca14cf25dfa328fa6f6f941c2b6312f7eb4f8f6ba61058ce7fa1856bf7001ddf2bf5c3bfe9ef63e878d045ce6591d01959297cfaa3d90da2f56af372055c08f3688e1353aac7f674c25d42f3fe71b55b20980c3c99e6e9255d0fc0ea7697cce007f46d9522ca7dd8ecf1d2b841339bac6842cb0255563991381793a5be35b1791208f8902515d359ec3389e2927db9acd2cdf5246dd0c2ceaf85b54b4585cde55a512611894d5b2a54c3ace603d7b5e9e00833676dca70632563fbebe2d59690bc1cd946dc56c647a364c894a00fd01cbdf0464ae1befdfdc1593ae7d2ff63771a87d65bd29e111d80923c4098ab74b04a7266f00d52ce2d37472a21179245959a31593bd7f63dff9615fa1938ccaa78cc665dd5a161ea9ef89dc29d5cfbcbf85e638d08807bf690d2173c375507f0c912382ac6020283fbcf9d75c085d2712ad009ca2e1dcce2406ce829bfa6dcd2746b77aec4467bfa8bb15722d2b482bd039aa263862357b0185bed002c72f0596421faa142ca03b5a8c5663d43e5de6b5d5f6ba79a94c76bc5fa764f0960c6f47ccf09d032acee5b07ae4087bbb967c71c858628f3030e44946b530b4d94630c646f22917630adbe0f1456269be7aa7b9856eb3501a8e8a72fe454ce39b5fc9b40d83feae8fec84dde03672315a282040f3e6e6dd6b04957b245ab8784f93e37c1886c6a3bcfdacb1699b2734131ed4ee114327a3adfcce75d00eda322cdda6b490c3dcd78dc5b7566517179bb8df2bc8250016d75a6a4ce8cc4211545e38ad87466e550d9d42e46852082e19a536e02fd9b26d8d449739b466ef5285110c574734a8fc27a6d0a9b8e80748294deedceac993a9d8e676f6669fb45734e45d77a98431a1e19a67c262fc9d159072c80cf8559e5ba8b322dec3e791b3492e5c5f7b476dc665b63a27a6120edf8546569ba6d0ae26d7afaa3632d54e134763d6ec2e7a481c2c2e9ec2391a43c3d81d551430468ccb7c440ae769af0e70e67df7346d3eb11fd8a57e289ef37780a8c7f6775bd49c0c00ffed2223a019d49c5836c2ee6cd2382dba77317f737fae6cd0ab7238222ae8df3792b052fea46988718e7c73ef95799e80540201cb10cd99608546b2765d584a9cfa29318cb2a0629bb5e0f6a82a65c5f34a4a29fd60f08e83546f1f30c3d313367e53bc7176cc38a35d81e5d6ff226d63717a0c29d89164fe3565b0eb4a3cb9a70aafa21a48a8dcb6179669b02e7004ee051fe6ef7cde2c03a11cfd8fbd0229e959d1cf846f618ae1f2d59e1bd84bbbc9dc629bbcbfedbba7556e0c7be40fa842855e2e7594a9daf3137ee25d4b9b6a3f6e52f147487c3f8f8fa725d9a1817e61a99f48", 0xfdd}, {&(0x7f00000000c0)="3e444c729f37cfe59d9d07a9949032d5a78a47ce62695d9ec17734a43488b20172b82a4b424be91273a297600e2702184802e2a2e693", 0x36}, {&(0x7f0000001380)="014618f368f9293a5436750ce73620d70a67ffe3fb8abcf5d3dd8e08d0c988c66e83b6d8402166d188a5f7678f11e330bd5899aae056784c9328fea3cf6a31e74a1b040bbd41a5eaf674c721ca7e5e6115ba32e460bbe1e0bc69c706cb6e3bedeb2800d03c65b128636be5ca9f6bcec123d8b38807c0c221ae51886690530290c88a0f44fec7fe9da2b5780bb679eb3e4735bebef7c9cffd4776072481e036d5f1a69f7d619c07382c577a831be6240b9be50d7bb854141b42f5", 0xba}], 0x3}, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) shutdown(r5, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 14.513493415s ago: executing program 5 (id=948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)="135e018c47dbba593147") pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r3, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 13.746338528s ago: executing program 2 (id=949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x20006) ioctl$KVM_CAP_SYNC_REGS(r7, 0x4068aea3, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=""/31, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002840)={0x2020}, 0x2020) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) r8 = syz_open_procfs(0x0, 0x0) fchdir(r8) 13.479660579s ago: executing program 5 (id=951): unshare(0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24000000) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000140)=0x1) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000000c0)={0x10, 0x8, 0x200}) 11.61603775s ago: executing program 1 (id=952): syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66602e39800fdd840bbec951b29064"], 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xac, 0x9}, 0x4, 0x2, 0xd56, 0x1, 0x0, r4, 0x26}) ptrace(0x10, r4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r4, 0x101, 0x0) 10.651581141s ago: executing program 4 (id=954): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000000)=0x3fd, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0x6000, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f0000000340)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000000480)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64], 0x4, 0x339, &(0x7f0000000140)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 8.550502511s ago: executing program 4 (id=955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r5 = dup(r4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) write$cgroup_subtree(r5, &(0x7f00000005c0)=ANY=[], 0x32600) write$P9_RRENAME(r5, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0xffe0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x35, 0x88) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 8.543324112s ago: executing program 2 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$peekuser(0x3, r1, 0x4) unshare(0x8000000) semtimedop(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x487, 0x0, 0x9}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 8.471913695s ago: executing program 3 (id=956): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r8, 0x2007ffb) sendfile(r8, r8, 0x0, 0x1000000201005) ftruncate(r8, 0x6) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 8.405624657s ago: executing program 1 (id=957): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000004000073119e00000000001600000000000000951574be1cc19000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$rxrpc(0x21, 0x2, 0x8) r2 = syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x4010586e, &(0x7f0000000180)={0x8, 0x6, 0x0, 0x8004, 0x716, 0x8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r1, {0xfffffff3}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400008bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c00044000000000000000011400"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r9 = syz_io_uring_setup(0x8d2, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) kcmp(r0, r0, 0x1, r2, r9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="f2"], 0x10}, 0x0, 0x24040092}) 7.18909841s ago: executing program 2 (id=958): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file7\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000600)='./file7\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000640)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000740)='./file7\x00', 0xc1c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000800)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000880)='./file7\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000940)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000009c0)='./file7\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000a80)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000ac0)='./file7\x00', 0x0) symlinkat(&(0x7f0000000b00)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000b40)='./file7\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000c00)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000c40)='./file7\x00', 0x0) 7.18747667s ago: executing program 4 (id=959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 5.922373735s ago: executing program 4 (id=960): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000380)="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", 0xfdf}, {&(0x7f00000000c0)="3e444c729f37cfe59d9d07a9949032d5a78a47ce62695d9ec17734a43488b20172b82a4b424be91273a297600e2702184802e2a2e693", 0x36}, {&(0x7f0000001380)="014618f368f9293a5436750ce73620d70a67ffe3fb8abcf5d3dd8e08d0c988c66e83b6d8402166d188a5f7678f11e330bd5899aae056784c9328fea3cf6a31e74a1b040bbd41a5eaf674c721ca7e5e6115ba32e460bbe1e0bc69c706cb6e3bedeb2800d03c65b128636be5ca9f6bcec123d8b38807c0c221ae51886690530290c88a0f44fec7fe9da2b5780bb679eb3e4735bebef7c9cffd4776072481e036d5f1a69f7d619c07382c577a831be6240b9be50d7bb854141b42f5", 0xba}], 0x3}, 0x40090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000280)) shutdown(r5, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 5.908874775s ago: executing program 5 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000000040)="135e018c47dbba593147") pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x40011) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000064c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)={0x34, r3, 0x525, 0x70bd25, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10004000}, 0x8) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000380)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x24) 5.595591999s ago: executing program 2 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) mkdir(0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r8, 0x107, 0x16, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000380)={@broadcast, @random="c0549779110f", @void, {@ipv6={0x86dd, @tcp={0xd, 0x6, '\x00', 0x6c, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@srh={0x16, 0x4, 0x4, 0x2, 0x1, 0x40, 0xffff, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x6}, {"613cb06ba353358e5d1d42c84ff14774ae1dd2ef1ee80f654ee2b77f3796c63d7e6a2d6c71c82a9698aca25cdc37f8cf"}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_IRQCHIP(r9, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x4000, 0x296a, 0x4, 0x1, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x81, '\x00', 0xf5}, {0xe9, 0x1, 0x7, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x7f, 0x91, '\x00', 0x6}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x4, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x9f}, {0xf, 0x8, 0x6, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x2, 0x6, 0x43, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x6}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0xc6, '\x00', 0x8}]}}) syz_open_dev$vbi(0x0, 0x1, 0x2) 3.792225736s ago: executing program 3 (id=963): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000000000080005400000000005"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x56}) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003b40), r1) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x1, '\x00', r9, 0x2, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth0_to_hsr\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000000)={@remote, r12}, 0x14) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x200088c0) getsockname$packet(r5, &(0x7f0000000700)={0x11, 0x0, 0x0}, &(0x7f0000000780)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x40}, @ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x3375cb7aa35f5ba3}, 0xc000) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c00)={&(0x7f0000003b80)={0x14, r6, 0x309, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4040000) 3.791894337s ago: executing program 4 (id=964): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}}], {0x14, 0x10}}, 0x5c}}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x14, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6(0xa, 0x3, 0xff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[@ANYRESHEX=r5, @ANYRES16=r2, @ANYRESDEC, @ANYBLOB="efddbee44629c2e79ffeaa0af023f9a1381ad933a925b5f765338c935bb2a5f2fa4429ba1e4d897c9ae2334912deba6b3200743a2f5a6350c10cd70403be5e0da8a9607e2ef0f23e769f70299553684b639ee30da5bb862070a3104ac7b9a4d345e8feb04ddb6195efe22b59d4e8eb317dbf5099d38e81c638738cd47136b3910a9aa2f6a7af1b0db7474879bd", @ANYBLOB="947fc43ad36936b8f953ff2e2fee58c795c2e45384a9e3828ec2234ee568c68ba7cb506624f6670d98f4f76a0430f5f36288adebf7580d1b882aa0484044a2152f6c4f12fb85de799dd8c44a5df1976944e95a14db10627a470fe3e0baf03d3be9a6ecd36b433b25221ead539deb675f2fba117d0d21f0ec8c006ff002ba93e4eae63906152f2ae4aed04bb5f7de355a86c2e29c616edb3067cab163796aa48bf3815102c23c8bd993426f007c77fe0b6dd382f9ec33146233cfaf6a6c301b7b3c950fff5c76134117e812943d2935ddb264c38aed3c8f6f47d9490d1baf2f62af54826b8026b5259d0fcfc241e046ee70319cc5d7873c778828ca11afdad99b43bb51dccce4a176fdfaa3fec9aaf320ef5723b69e2817575088e73d3faa14d1d37d05ce7fbbc92aeb36e8bca61ea7b75cb4726762840cc32b3b20c720070e69b6d47a835ee1c9ad37a1094b9eeb6fe85467076686d973e057d54821f72d2430cdcb40f5c1e3357a5b2bd052e205b5f3e78b47e8c93a13c437464d2c067ff762f0ef5cf46809a00b0e085715ff161efc9b7193b172311fc19a14f14c210746ed790f21de1270771a1cf18f07c3d23e639f305a18a4cf190d8db64a8c81015143c74b7b56e02c135fa3a1e2514b4fbd0b59fb7a55291f5eb340c2f302b836ca6ef88b976db0a333f5a3d36ca4bfc1a12aa6d80ea1b809a25007d159e1a1fb4b78eee56ccc1f3ad7fd83602ccecf0de78145a43a80ccbf2317166d23385232f557bfd265c872244987fb60d3aef6e47e59b9d22d52a9e050b90d1690bca5914f2476ad4e45f6e34b4536b70f92fed498190458cb213379ee81f5801bc614292f046818a2dbcfbd916d33560478104ff5baf2b11fc59fa566c43d7e7ab5bba9905dbe38f26cde3048abb82eb1515cfc725aea9edb544c76242835ae519859a22c4e69eb848e3651abbc995e5e4f3db8718bd6d323fcef75eabe2900d149f7010d280a8c03c65bdff43b2b3a0ae878e96081fdd9c98977d1199f601392e40cde33a7f193018f8554040d838c77eae1ed915130da28f9dc8cd49bc05537e60f634c95abf8dbd1dd44e2369276d1d559a007b94c71de5900349d0acc33cb99feeb89241655a397f6e0013a00280261628710a8bb835d530402949061446def5d25462dad3c3dae795e05eec9dcd8d19cec80c056137225cd325bd46d01c9bf6cd770dcd556349805d4efeb7b997ee57008491e5c8bcf4003e615e1f61a9344222421c937f87f9e8069cf51fa253b20d36260ed12309f55f0ebf373e7d8f6d2596b66282f6422393516245cca3efaef83c98b80b671510b67aa310292e180567c62e83e5617c8e5e024ef45eafa52b44eacf4f5b35174cc016ea32c8279661167704b517159cd329218dc27a8b82891fb2bdbce19844473c1a4159e2175d898f228db0a6051b83a6953a6f18c4f5cfab84ec7ecc506107fa0f75170ecdc0353d6aae3cf05c7c7be85139440acaf8516e8bcf7e21f91aacdb6549342fdf42bba982df5083453f00df638f83764cde92db0ff4fed06bcddf5b71caf0cc022be7acce8656fa5c3e09160a530df349ad099cd5458b6800fd6015829ec06599fd2d017665f09f1c25441654d6e1142c9c98928a17ddb9b654b297ed023dd688ae1e0b22387d79a607695393b302a2bf66af4a6f1846a81fa8655b223971adce5050f19b3cdf398584c21c9f9176559965990a6721cdbf075dc688a46e82cc464af0d5dde0ab22da6bd52fd491a5c5b33cac30dd9ca36ef4cae1aa8b74012d5f9508234277944b99d137ac46d61affd80c4165164b3b1dd844ea8af5312d0f15e9853fcc576d178c8cc6b5e95327dabf7c57c3c372ce0a8ce513f909eb3f4533f9491f51b63e87521212f21ba6117ce74df0ca8297f25e25c4ccd99cbd3b88d9bb4f991fd94fbe5e18dbb399a52418391f7171ad3a2b1e0831ce1c6fdb0fd120033ce8456786f0b23a6cce15a64ed2e5c013457270e1b8c4e155944f9decf56b0b927af6ecf2a17d813c48883bfecb9415b7ecc32e4ddeb0d8643c8940f9d2cf4b5d7cb17cd59c0b5938c2aa20f13b35aca761762d22a7f67995007dfdb0d80edda7cb4c83b53d370135cd15a98e352ff858370becb1ce3ccfbae3ef0bd01355105232f7402f99b1185e330cd130b50d0e9d44bbfa82fb50ba97b24f66ff3907dd6417839a309c8a66a2ecc9f99fcca4412e600f0ba2923ec95cdda02c1b5f612082cec88889d3a7500e3576cc65bac7cd18fbdd0ea7c6db995e2d43759838da70dd1358334df769b97b5203fbc6007e9966c4758ea5901f5612eb28b0a3f1e87e4cec2fda3a779a842a2f45a3e5dac97161b8b7b389801b6f15d21759c61e15a1799614d30436f7d5b0c923d31429d40dd6a26ff5bd5e7f5cecbe037907f0e78bb286632a28aa0cb9fe7e9f8734437fc8d822c24cd4e6997b7ecb516a869b2852be2dd776cc3ecd4a9fe9d76f01dd74a77021e32a3d6b91e99922df437006d34e037a7f795667d596234ea6e1be9f7a045ab15b4de83f421673707c8e7eff156df028819b34088012c72743c5cc989ea0e7db39515937fa50ff574b5cc5d617a5170c50aa3e8d0e13f9217f45e1de8c1d51606b6be77e9e890a99b987e9c54fdff05b73714a41a8134594f35e6560351bd5e36e8351264c44346093310adbea03d9232bd2a6222cd61bfc3e509b636e3032105eedd4b75cae7d240a84e929c40290b37ee64aeb922e61218838c6bd6c067bfc3e072129fbc4af5d765f5bede51396e67bbfa41b774b0086532781311068fd5fc08e3820ebdac65e599f586446bcb12d9a594d972106498461a03d7c5b3b9830aec93f911012deef77b4547cd90712671ed5cbaafcce32115ede0f142c9b2ad6a8cd58073039d2bc9f90c47ddad7711c2e30d9f3988ae91da17db9b4abbcdf7655a4433a8225134514f49ddb66467c345efe9e8049301e1500c981e5de6fec22e912786b5cc907d83d5f6936eede5058a08b05a896eccc176aea4cf6c3ed14bc45f67caafc3fc5850bf2976d4da933698d9f1feb9cef310e6a230dbf2d0863d83ede74e4fb89b3cc2859a00c83e10f0a98e8b18c176ad3f3f0703fb0f6dcfe6dc216bd1684e04ba4971061912e4929c43f8c0e9ae36726b3593c6fda775bd80c75115fb3718a363937071979af6d452d39faf5c2a505fa1bf23f6a11d5b87568e123d958f636e850de37be531dc4d1bd03a2f03776d0ebf2b28bee287abfa9825cdc244b07d97c358a56cef69fef118df0c16764c12eb86233d3e44436b30a33690317737f07464a882818e20769eaa6fd11d30075221efaa426d20272d6785f5e8c6a2079e252fd6880d06523d1da6bac4f7a4e018007aec9ebeee33b499fab9698ca47cf0a6d4895e9e95254c40596578a0efccdb367195ad88b261e25747cbad6d71a3c8c467c5b200915543414c4826d5b7308f4bb23120a282c19e5516a768067501511f48d8bea357f80e72861df0c685539ca854f030c80a6bd043c884780a24aef17d7b9e4541849de407f03ef2b438c999d866489d26a87b9e17da41b1ea25261223a0490eb692e24767be44f2c1f7b8757686099a4e52a5989c10fb434dcfbfc262e52521e79c33c01a6254200f7ab96086fdf6d1b97ef5f9d4ed21c28f2433f977d02019c383af0e7e0a48cb69a3879b89ba7eac594742dafaa89602cb2f323441196aef893bb19954d87252a3756feabf3b1cb77a50cf05ea88328f446ba87d43ca74f8e69c9cabc65cdec708c62c2a8180ec65f9e951f243a5b4a9ab48121e0f87c1de8a3e17c8a69d36b4967104a5aa14745ed15d77540570dd70ac8b83c00dce8727b41170a6a3df1f57c28fe3cd1296f77c8d0f96c95937e584bb76494ff5f91319a69ce4fe06dba17676c4f3a101641ece20335524228add254004f064d59aece39defe78b8ec169cdc9ab9cd45163a74c09c5ffb12d43e0afc42946bc30c0f80fb361363734e008bc2dfb05312d9779eb1f8e11f141e2b4691b46925cc31a6d67695374ca4ca78cd11fb975939a37f416bbe1de36640c1c8661f807f521979ef9918a238ff5cae2c605429d40f46d4129d110e7ab317aa6359653f307ae18e088a6e34ec11dc9954806907d93046708b23c2907cc4ffdec103e3fb6a18e2a026df31a5fef9db277d2dab29b330dbaca2ffeb26c7e4e9b86fc579e0f2ad4809c8265239a95fabf34d5148ca3843af96d4515e7c509a15d48abfc3e7f8aa29bf59611b35cd623beb0857487527fc18aa79ccc087e3c45d2890ee71a8cb809c7161e60767796706ab0b3dd70943b1606bb8f655e8e3ca235296f42cafcbc1d2a214aa402d472384b34a73517c6ef1121f0c0191f3179ffb95813e1dbec83adccdcbb6fbd7319e27fd468a1e4df6ac30cb79410e4f28ba48d5877f745cc9833e446aaa99d2845f5a9fedd7e196e7d7c2a32ec4c3622c09ff10e2f95c504ff26198e28c505d1010d869ab5af4fb47904a4ea99069bdd23ae3f8c246c3a89f5632480cc35eb3885d697c855b4c6db405c0cd65cb435f4599733b542010ce7dc4c78a9536ab04cc057c0ee2a72c689cf65f03716d23429851d2c4f7840bd0ae64faef254e2b2938c657f2451712969010b8e01ef7f62a69f7cd7685bce87a56106836932dbe3d124d97c872080ecbf37cc7d26e77bd7ca7d064dda5d3e6131a10a9e2e6fa0d605321bc18decfe26980f5214a6af593acc2eaa1ed0ef1d7e67bbe8243a975cfe1d3855a12fcfd7d57deee7cb9bfdefc5e295a4c0a5156d9249b505afef5484f770804c0d5a222393191efcda315070a84f5688d559c306c4d69e3d753ae64e826e57a0a8ad3b2a9bf63297a004aeb7d7f612e4c1efb5fb41ac7894720c54ed7b6529ca3b10abdee1cd242d583a3bad14229d92f31e2a4ebbbcfcd8fa0667e6d8c5ea247afabb859f4ddb498ea17b64515b7e3bfdf5847e66ce37e84679ddfa21f6474eb3745609be510e4d57612e7dea7ee2895290629128caf82b0dfcf509de514352f4a9420e6abab31cd0b268e447621fc05f78debe8f1793b769ff8b0b156dc43d3a22efe9e1e66b9b77e4445766dfa68f646d8a2b7eb03aab48aab862b511efec5aa445776ffd284690c1079fdb3a630adfaf17e9648d86b5fee9fb73675b52005573838601cd60bbc03f55b3123312b6767d9cec204f37481d24d652441b88a2bc7c8fdaccb3e7c02e3654057ffb6e10f9bb8f17171ea3ff745b746b2af1d892b82a909adbac6f844b061c38df060ab723b307f0aa7a01087402e3d9d659174791d09c43bc3939260ae6529e099964db33a98f808a9f73f4d8b7678035536904d5b3a4d432e0d2dcd3df8079d844a486dbd7e09193b4b532ce23971ab66f557a51a744296c6926050169b02bfe38e9770837ab4ff647072bc5241c183108b9dfae8aeba4475f7c83ee7fd1c0349a8bf08db363adf4c8361a8dcbc6f6eaf24526b3b5dfb39580bbc9ac372a1a09558ec755b673cc1cd104abafc29ceb700014df91ff2f03a89b5904dce665d33de562a0dab2b2e4b7a3d7feea2fe02bb9444fd344637cc2852fa24ceecc7e111e72c6a673ac990d42889c0cfac5925223b8510f40c993649505066f9b714b394dc0959937ce9823e490b11f73a08a14a86053181145d69b0ac876db3ac4738c282de2eda154d7611a5b77ae61f035d50d61390d896ed42a77bd3614f9876e3f7748372bf38bafe680aa7445e827cdfbdf020ee09786b6c25e", @ANYRESOCT=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 3.785434097s ago: executing program 5 (id=974): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) sendmsg$tipc(r2, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) connect$tipc(r2, &(0x7f00000000c0)=@name, 0x10) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0xfffffffb) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000024000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x9}, 0x8) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x130c01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x70) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r5, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000b80)=[{{&(0x7f0000000400)=@vsock, 0x80, &(0x7f0000000200)=[{&(0x7f0000000480)=""/169, 0xa9}], 0x1}, 0x76}, {{&(0x7f0000000540)=@tipc=@name, 0x80, &(0x7f0000000300)=[{&(0x7f0000000dc0)=""/4096, 0x1000}], 0x1, &(0x7f00000005c0)=""/31, 0x1f}, 0xff}, {{&(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/54, 0x36}, {&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/234, 0xea}, {&(0x7f0000001dc0)=""/137, 0x89}, {&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f0000000a80)=""/28, 0x1c}], 0x7, &(0x7f0000000b00)=""/115, 0x73}, 0x55fc}], 0x3, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000d40)={0x0}) 3.570081716s ago: executing program 1 (id=966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r0 = getpid() prlimit64(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000000)=0x3fd, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x5, 0x6000, 0x4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r7, &(0x7f0000000340)=[{0x0}], 0x1) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f0000000480)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64], 0x4, 0x339, &(0x7f0000000140)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 3.535254588s ago: executing program 3 (id=967): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0xe20, 0x0, @mcast2, 0x3}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @empty}, 0x1c) 3.392422904s ago: executing program 3 (id=968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@userxattr}, {@redirect_dir_on}]}) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)={0x32, 0x6, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x3e, 0xaa5, [0x8, 0x0]}}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xa}]}, 0x40) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.387804864s ago: executing program 2 (id=969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 470.59496ms ago: executing program 3 (id=970): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x2, 0xfffffffffffffffe}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xd28e, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfdfffe01}}}, 0x108) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000002c0)={0x3, {{0xa, 0x4e20, 0x7, @mcast1, 0xffffffff}}, {{0xa, 0x4e20, 0x5e14, @mcast1, 0x5}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004804}, 0x4000800) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, 0x0, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_setup(0x6, &(0x7f0000001380)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x9}, &(0x7f00000003c0)=0x8) 69.367827ms ago: executing program 5 (id=971): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 9.029969ms ago: executing program 4 (id=972): syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = getpid() io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0xfee}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e901b1bdbdaf6", 0x11}], 0x1, 0x0, 0x0, 0x40010}, 0x0) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000004) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800d1000000fbdbbefb973d065bc3e04400", @ANYRES32=0x0, @ANYBLOB="0180000000000000140012800b0001006261746164760000040002800a0001000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 0s ago: executing program 1 (id=973): unshare(0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1e0000}, 0x18) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x36, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) getsockopt$SO_COOKIE(r5, 0x1, 0x39, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x24000000) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000140)=0x1) r8 = gettid() rt_sigqueueinfo(r8, 0x21, &(0x7f00000000c0)={0x10, 0x8, 0x200}) kernel console output (not intermixed with test programs): o keep mac addresses unique to avoid problems! [ 64.562518][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.572984][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.584446][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.608017][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.616552][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.623205][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.635950][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.645147][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.654614][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.663336][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.672533][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.681416][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.690756][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.703145][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.713974][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.724559][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.735013][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.745716][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.757970][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.771934][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.780660][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.790037][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.798989][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.812406][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.820410][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.823582][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.837319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.846736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.893030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.904023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.917534][ T4265] device veth0_macvtap entered promiscuous mode [ 64.925634][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.950134][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.958002][ T4265] device veth1_macvtap entered promiscuous mode [ 64.975599][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.976045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.993619][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.002044][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.010666][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.019029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.065595][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.076678][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.087321][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.098672][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.108779][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.119610][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.130014][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.140706][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.159905][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.180213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.204185][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.216484][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.227296][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.237605][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.248381][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.258913][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.271916][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.282218][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.292729][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.304035][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.324516][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.337753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.347336][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.362841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.380061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.405304][ T4265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.422035][ T4265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.430785][ T4265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.444236][ T4265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.481491][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.510231][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.529723][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.537635][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.569176][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.632740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.693705][ T4391] loop3: detected capacity change from 0 to 512 [ 67.331871][ T4392] loop1: detected capacity change from 0 to 32768 [ 67.350834][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 67.351241][ T4283] Bluetooth: hci2: command 0x0419 tx timeout [ 67.363472][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 67.370118][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 67.564970][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.714110][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.757222][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 67.790692][ T4392] [ 67.790692][ T4392] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 67.790692][ T4392] [ 67.807473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.816803][ T4392] read_mapping_page failed! [ 67.822146][ T4392] diRead: read_metapage failed [ 68.002330][ T4405] loop2: detected capacity change from 0 to 256 [ 68.018768][ T4405] ======================================================= [ 68.018768][ T4405] WARNING: The mand mount option has been deprecated and [ 68.018768][ T4405] and is ignored by this kernel. Remove the mand [ 68.018768][ T4405] option from the mount to silence this warning. [ 68.018768][ T4405] ======================================================= [ 68.581487][ T4391] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 68.591149][ T4391] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.681433][ T4405] FAT-fs (loop2): count of clusters too big (66845694) [ 68.688644][ T4405] FAT-fs (loop2): Can't find a valid FAT filesystem [ 68.705078][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.739131][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.749015][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.964566][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 69.102593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.111080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 69.270009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 69.313301][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 69.321796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 69.330194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!! [ 69.747722][ T4416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.775848][ T4410] loop1: detected capacity change from 0 to 8 [ 69.821538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.825693][ T4415] overlayfs: missing 'lowerdir' [ 69.829886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.830924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 69.836151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 69.903096][ T4410] process 'syz.1.7' launched './file1' with NULL argv: empty string added [ 69.916407][ T4410] SQUASHFS error: zstd decompression error: 10 [ 69.922800][ T4410] SQUASHFS error: zstd decompression failed, data probably corrupt [ 69.930997][ T4410] SQUASHFS error: Failed to read block 0x60: -5 [ 69.942528][ T4410] SQUASHFS error: zstd decompression error: 10 [ 69.948725][ T4410] SQUASHFS error: zstd decompression failed, data probably corrupt [ 69.956736][ T4410] SQUASHFS error: Failed to read block 0x60: -5 [ 70.317732][ T4423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.519553][ T4423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.553937][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.954358][ T4438] loop2: detected capacity change from 0 to 1024 [ 71.961996][ T4438] hfsplus: unable to parse mount options [ 71.973637][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.980697][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.441134][ T4445] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.486744][ T4447] loop4: detected capacity change from 0 to 1024 [ 72.631099][ T4445] usb 4-1: Using ep0 maxpacket: 32 [ 72.651472][ T4445] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.662443][ T4445] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.680491][ T4445] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 72.689783][ T4445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.697898][ T4445] usb 4-1: Product: syz [ 72.723441][ T4445] usb 4-1: Manufacturer: syz [ 72.728447][ T4445] usb 4-1: SerialNumber: syz [ 72.870387][ T4445] usb 4-1: config 0 descriptor?? [ 73.361976][ T4453] loop2: detected capacity change from 0 to 4096 [ 74.106991][ T4459] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.251291][ T4437] overlayfs: missing 'lowerdir' [ 74.717543][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 75.303670][ T4466] loop0: detected capacity change from 0 to 128 [ 75.583680][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 76.019899][ T3652] usb 4-1: USB disconnect, device number 2 [ 76.717414][ T41] cfg80211: failed to load regulatory.db [ 77.223911][ T4490] device veth0_to_bridge entered promiscuous mode [ 77.833165][ T4481] device veth0_to_bridge left promiscuous mode [ 79.179462][ T4493] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.219994][ T4495] loop2: detected capacity change from 0 to 256 [ 79.267004][ T4495] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 79.574727][ T4500] Bluetooth: MGMT ver 1.22 [ 79.585935][ T4500] netlink: 220 bytes leftover after parsing attributes in process `syz.2.19'. [ 81.115619][ T4508] xt_ipcomp: unknown flags 12 [ 81.655204][ T4526] loop4: detected capacity change from 0 to 1024 [ 81.740167][ T4524] loop1: detected capacity change from 0 to 2048 [ 81.757009][ T4524] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.875847][ T4536] loop3: detected capacity change from 0 to 128 [ 83.884017][ T4536] qnx6: invalid mount options. [ 84.640924][ T4526] hfsplus: failed to load root directory [ 86.149101][ T4540] loop3: detected capacity change from 0 to 8192 [ 87.136410][ T4540] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 87.141564][ T4544] loop4: detected capacity change from 0 to 4096 [ 87.156173][ T4540] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 87.379744][ T4544] NILFS (loop4): invalid segment: Checksum error in segment payload [ 87.393350][ T4544] NILFS (loop4): trying rollback from an earlier position [ 87.403148][ T4544] NILFS (loop4): invalid segment: Checksum error in segment payload [ 88.138281][ T4556] loop2: detected capacity change from 0 to 1024 [ 88.146045][ T4556] hfsplus: unable to parse mount options [ 89.634010][ T4540] REISERFS warning (device loop3): jmacd-8 reiserfs_fill_super: unable to read bitmap [ 89.657284][ T4544] NILFS (loop4): error -22 while searching super root [ 93.085055][ T4589] loop2: detected capacity change from 0 to 1024 [ 94.101937][ T4586] overlayfs: missing 'lowerdir' [ 95.970562][ T9] hfsplus: b-tree write err: -5, ino 3 [ 96.217079][ T4607] loop1: detected capacity change from 0 to 2048 [ 96.263642][ T4607] UDF-fs: bad mount option "volume=00000000&00000000016" or missing value [ 96.369342][ T4609] loop2: detected capacity change from 0 to 8192 [ 96.546739][ T4609] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.941601][ T4609] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 96.970738][ T4609] REISERFS (device loop2): using ordered data mode [ 96.992816][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 97.004583][ T4283] CPU: 0 PID: 4283 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 97.012154][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.022230][ T4283] Workqueue: hci3 hci_rx_work [ 97.026931][ T4283] Call Trace: [ 97.030199][ T4283] [ 97.033128][ T4283] dump_stack_lvl+0x168/0x22e [ 97.037806][ T4283] ? show_regs_print_info+0x12/0x12 [ 97.043015][ T4283] ? load_image+0x3b0/0x3b0 [ 97.047541][ T4283] sysfs_create_dir_ns+0x252/0x280 [ 97.052677][ T4283] ? hci_rx_work+0x3eb/0xd40 [ 97.057283][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 97.061964][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 97.067170][ T4283] kobject_add_internal+0x6b8/0xc80 [ 97.072375][ T4283] kobject_add+0x152/0x210 [ 97.076791][ T4283] ? kobject_init+0x1d0/0x1d0 [ 97.081469][ T4283] ? klist_children_get+0x50/0x50 [ 97.086489][ T4283] ? get_device_parent+0x121/0x3f0 [ 97.091595][ T4283] device_add+0x483/0xfb0 [ 97.095915][ T4283] ? kmem_cache_free+0xf7/0x290 [ 97.100763][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 97.105712][ T4283] le_conn_complete_evt+0xfec/0x15d0 [ 97.111006][ T4283] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 97.117255][ T4283] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 97.122888][ T4283] ? skb_pull_data+0xf7/0x200 [ 97.127563][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 97.133108][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 97.139169][ T4283] hci_event_packet+0x791/0x1210 [ 97.144122][ T4283] ? bis_list+0x280/0x280 [ 97.148542][ T4283] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 97.154449][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 97.159568][ T4283] ? nf_l4proto_log_invalid+0x1f9/0x26e [ 97.165121][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 97.170322][ T4283] hci_rx_work+0x3eb/0xd40 [ 97.174738][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 97.179595][ T4283] ? process_one_work+0x7a1/0x1160 [ 97.184703][ T4283] process_one_work+0x898/0x1160 [ 97.189642][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 97.195268][ T4283] ? _raw_spin_lock_irq+0xab/0xe0 [ 97.200289][ T4283] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 97.205652][ T4283] ? kthread_data+0x4b/0xc0 [ 97.210152][ T4283] worker_thread+0xaa2/0x1250 [ 97.214839][ T4283] ? __kthread_parkme+0x162/0x1c0 [ 97.219859][ T4283] kthread+0x29d/0x330 [ 97.223921][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 97.228944][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 97.233529][ T4283] ret_from_fork+0x1f/0x30 [ 97.237946][ T4283] [ 97.244040][ T4609] reiserfs: using flush barriers [ 97.250110][ T4283] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 97.265888][ T4283] Bluetooth: hci3: failed to register connection device [ 97.265911][ T4609] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 97.452303][ T4609] REISERFS (device loop2): checking transaction log (loop2) [ 97.580401][ T4609] REISERFS (device loop2): Using r5 hash to sort names [ 97.616067][ T4619] loop1: detected capacity change from 0 to 128 [ 97.629800][ T4609] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 97.838625][ T4609] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 98.616550][ T4632] loop0: detected capacity change from 0 to 1024 [ 98.624787][ T4632] hfsplus: unable to parse mount options [ 98.692355][ T4624] device veth0_to_team entered promiscuous mode [ 98.707333][ T4448] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.966494][ T4634] loop3: detected capacity change from 0 to 1024 [ 99.606387][ T4634] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 99.622635][ T26] audit: type=1800 audit(1764005868.706:2): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.52" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 99.961070][ T4644] netlink: 52 bytes leftover after parsing attributes in process `syz.3.52'. [ 100.788614][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 101.674214][ T4664] loop2: detected capacity change from 0 to 2048 [ 101.840707][ T4664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.460684][ T4678] loop3: detected capacity change from 0 to 1024 [ 103.762565][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 105.495522][ T4691] device veth0_to_team entered promiscuous mode [ 106.580269][ T4696] device veth0_to_team entered promiscuous mode [ 106.894019][ T4700] loop0: detected capacity change from 0 to 128 [ 108.678095][ T4711] loop2: detected capacity change from 0 to 128 [ 108.685213][ T4711] qnx6: invalid mount options. [ 108.978764][ T4715] loop3: detected capacity change from 0 to 1024 [ 108.992637][ T4715] hfsplus: unable to parse mount options [ 109.512428][ T4444] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.978056][ T4742] loop0: detected capacity change from 0 to 1024 [ 112.246429][ T4747] capability: warning: `syz.4.75' uses deprecated v2 capabilities in a way that may be insecure [ 114.124998][ T11] hfsplus: b-tree write err: -5, ino 3 [ 114.875238][ T4758] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 115.718996][ T4763] loop3: detected capacity change from 0 to 128 [ 117.838974][ T4773] device veth0_to_bridge entered promiscuous mode [ 118.714231][ T4771] device veth0_to_bridge left promiscuous mode [ 119.965417][ T4781] IPv6: Can't replace route, no match found [ 122.159662][ T4796] loop3: detected capacity change from 0 to 2048 [ 122.307953][ T4796] UDF-fs: bad mount option "volume=00000000&00000000016" or missing value [ 122.894007][ T4800] loop1: detected capacity change from 0 to 1024 [ 122.907799][ T4800] hfsplus: unable to parse mount options [ 124.351367][ T4808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 124.360275][ T4808] netlink: 9 bytes leftover after parsing attributes in process `syz.2.82'. [ 124.408204][ T4283] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 124.418004][ T4283] CPU: 1 PID: 4283 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 124.425558][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 124.435608][ T4283] Workqueue: hci4 hci_rx_work [ 124.440320][ T4283] Call Trace: [ 124.443589][ T4283] [ 124.446512][ T4283] dump_stack_lvl+0x168/0x22e [ 124.451184][ T4283] ? show_regs_print_info+0x12/0x12 [ 124.456379][ T4283] ? load_image+0x3b0/0x3b0 [ 124.460897][ T4283] sysfs_create_dir_ns+0x252/0x280 [ 124.466015][ T4283] ? hci_rx_work+0x3eb/0xd40 [ 124.470603][ T4283] ? sysfs_warn_dup+0xa0/0xa0 [ 124.475278][ T4283] ? do_raw_spin_unlock+0x11d/0x230 [ 124.480499][ T4283] kobject_add_internal+0x6b8/0xc80 [ 124.485727][ T4283] kobject_add+0x152/0x210 [ 124.490156][ T4283] ? kobject_init+0x1d0/0x1d0 [ 124.494845][ T4283] ? klist_children_get+0x50/0x50 [ 124.499868][ T4283] ? get_device_parent+0x121/0x3f0 [ 124.504977][ T4283] device_add+0x483/0xfb0 [ 124.509300][ T4283] ? kmem_cache_free+0xf7/0x290 [ 124.514148][ T4283] hci_conn_add_sysfs+0xd1/0x1e0 [ 124.519171][ T4283] le_conn_complete_evt+0xfec/0x15d0 [ 124.524465][ T4283] ? hci_le_big_info_adv_report_evt+0x310/0x310 [ 124.530704][ T4283] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 124.536511][ T4283] ? skb_pull_data+0xf7/0x200 [ 124.541191][ T4283] hci_le_conn_complete_evt+0x183/0x440 [ 124.546733][ T4283] ? hci_remote_host_features_evt+0x270/0x270 [ 124.552797][ T4283] hci_event_packet+0x791/0x1210 [ 124.557735][ T4283] ? bis_list+0x280/0x280 [ 124.562073][ T4283] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 124.567965][ T4283] ? kcov_remote_start+0x4c7/0x7e0 [ 124.573065][ T4283] ? nf_l4proto_log_invalid+0x1f9/0x26e [ 124.578603][ T4283] ? hci_send_to_monitor+0x9c/0x4a0 [ 124.583879][ T4283] hci_rx_work+0x3eb/0xd40 [ 124.588290][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 124.593144][ T4283] ? process_one_work+0x7a1/0x1160 [ 124.598268][ T4283] process_one_work+0x898/0x1160 [ 124.603208][ T4283] ? worker_detach_from_pool+0x240/0x240 [ 124.608834][ T4283] ? _raw_spin_lock_irq+0xab/0xe0 [ 124.613850][ T4283] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 124.619217][ T4283] ? kthread_data+0x4b/0xc0 [ 124.623723][ T4283] worker_thread+0xaa2/0x1250 [ 124.628429][ T4283] ? __kthread_parkme+0x162/0x1c0 [ 124.633498][ T4283] kthread+0x29d/0x330 [ 124.637575][ T4283] ? worker_clr_flags+0x1a0/0x1a0 [ 124.642599][ T4283] ? kthread_blkcg+0xd0/0xd0 [ 124.647186][ T4283] ret_from_fork+0x1f/0x30 [ 124.651648][ T4283] [ 124.778982][ T4401] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.796846][ T4283] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.810346][ T4283] Bluetooth: hci4: failed to register connection device [ 126.069990][ T4813] loop3: detected capacity change from 0 to 4096 [ 126.367781][ T4817] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.181566][ T4831] loop2: detected capacity change from 0 to 128 [ 128.981973][ T4842] loop1: detected capacity change from 0 to 256 [ 129.049765][ T4835] netlink: 220 bytes leftover after parsing attributes in process `syz.0.94'. [ 129.299035][ T4842] FAT-fs (loop1): count of clusters too big (66845694) [ 129.306127][ T4842] FAT-fs (loop1): Can't find a valid FAT filesystem [ 129.360586][ T4845] loop4: detected capacity change from 0 to 164 [ 132.670691][ T4868] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 132.680363][ T4868] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 132.690038][ T4868] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.703355][ T26] audit: type=1800 audit(1764005901.746:3): pid=4868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.100" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 132.809442][ T4868] syz.1.100 (4868) used greatest stack depth: 20200 bytes left [ 132.845188][ T4871] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 132.943654][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.950129][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.205652][ T4426] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.103147][ T4932] afs: Unknown parameter '^Kukh/la"/Yvok not found [ 158.506978][ T5097] xt_ipcomp: unknown flags 12 [ 159.959528][ T5109] loop3: detected capacity change from 0 to 512 [ 160.030075][ T5109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 160.062367][ T5109] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.957676][ T5156] loop1: detected capacity change from 0 to 512 [ 166.447609][ T5163] xt_ipcomp: unknown flags 12 [ 166.681138][ T5156] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 166.717577][ T5156] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.815599][ T5156] EXT4-fs (loop1): 1 truncate cleaned up [ 166.823125][ T5156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.137524][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 168.141829][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 168.898601][ T5188] Illegal XDP return value 1340266247 on prog (id 84) dev N/A, expect packet loss! [ 168.919202][ T5188] loop3: detected capacity change from 0 to 1024 [ 168.926669][ T5188] EXT4-fs: Ignoring removed orlov option [ 168.932404][ T5188] EXT4-fs: Ignoring removed i_version option [ 169.444715][ T5185] loop4: detected capacity change from 0 to 1024 [ 169.756078][ T5188] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.768497][ T5188] EXT4-fs (loop3): unmounting filesystem. [ 170.131233][ T5185] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 170.442753][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 170.808801][ T5200] sd 0:0:1:0: device reset [ 172.246374][ T5209] loop2: detected capacity change from 0 to 40427 [ 172.591895][ T5209] F2FS-fs (loop2): invalid crc value [ 172.666883][ T5209] F2FS-fs (loop2): Found nat_bits in checkpoint [ 172.716565][ T5209] F2FS-fs (loop2): Start checkpoint disabled! [ 172.752027][ T5209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 173.338465][ T5224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.180'. [ 174.153633][ T4283] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 174.165435][ T4283] Bluetooth: hci4: Injecting HCI hardware error event [ 174.181843][ T4270] Bluetooth: hci4: hardware error 0x00 [ 174.454507][ T9] kworker/u4:0: attempt to access beyond end of device [ 174.454507][ T9] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 174.536783][ T9] kworker/u4:0: attempt to access beyond end of device [ 174.536783][ T9] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 174.564129][ T5235] netlink: 52 bytes leftover after parsing attributes in process `syz.0.184'. [ 176.221342][ T4270] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.228749][ T5265] loop4: detected capacity change from 0 to 164 [ 177.876304][ T5277] xt_ipcomp: unknown flags 12 [ 178.055085][ T5279] IPv6: Can't replace route, no match found [ 179.889535][ T5292] Invalid ELF header magic: != ELF [ 180.776285][ T5283] block device autoloading is deprecated and will be removed. [ 181.101351][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 181.108446][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 181.114798][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 181.114845][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 184.045056][ T5320] loop3: detected capacity change from 0 to 256 [ 184.347634][ T5320] FAT-fs (loop3): count of clusters too big (66845694) [ 184.354739][ T5320] FAT-fs (loop3): Can't find a valid FAT filesystem [ 185.371291][ T5323] loop4: detected capacity change from 0 to 2048 [ 185.404471][ T5323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.583104][ T5366] binder: 5356:5366 ioctl c0306201 200000000780 returned -11 [ 190.597927][ T5366] virtio-fs: tag not found [ 192.677187][ T5387] can0: slcan on ttyS3. [ 193.131287][ T5387] can0 (unregistered): slcan off ttyS3. [ 194.388383][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394763][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.418065][ T5409] loop2: detected capacity change from 0 to 1024 [ 194.766794][ T5409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.866707][ T5420] binder: 5414:5420 ioctl c0306201 200000000780 returned -11 [ 194.885065][ T5420] virtio-fs: tag not found [ 195.451063][ T26] audit: type=1800 audit(1764005964.516:6): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 195.554584][ T5409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.230'. [ 197.355295][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 197.790190][ T5456] hub 9-0:1.0: USB hub found [ 197.795599][ T5456] hub 9-0:1.0: 1 port detected [ 199.297484][ T5470] bridge0: port 3(gretap0) entered blocking state [ 199.309830][ T5470] bridge0: port 3(gretap0) entered disabled state [ 199.422257][ T5470] device gretap0 entered promiscuous mode [ 199.480796][ T5470] bridge0: port 3(gretap0) entered blocking state [ 199.487367][ T5470] bridge0: port 3(gretap0) entered forwarding state [ 200.649204][ T5475] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 200.874355][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.883388][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.881116][ T5479] device gretap0 left promiscuous mode [ 201.906631][ T5479] bridge0: port 3(gretap0) entered disabled state [ 203.135256][ T5501] syz.3.243 (5501) used greatest stack depth: 17160 bytes left [ 203.861997][ T5516] binder: 5509:5516 ioctl c0306201 200000000780 returned -11 [ 203.896288][ T5512] virtio-fs: tag not found [ 203.907118][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 207.131244][ T4329] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 208.311038][ T5559] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 208.385627][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.393960][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 209.138983][ T5559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.202079][ T5573] loop1: detected capacity change from 0 to 32768 [ 211.292740][ T5578] read_mapping_page failed! [ 211.297271][ T5578] ERROR: (device loop1): txCommit: [ 211.297271][ T5578] [ 212.781832][ T4329] usb 5-1: device descriptor read/all, error -110 [ 213.166996][ T4329] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.460990][ T4329] usb 5-1: device descriptor read/64, error -32 [ 214.199613][ T4329] usb usb5-port1: attempt power cycle [ 214.537004][ T5604] loop1: detected capacity change from 0 to 128 [ 214.558922][ T5604] qnx6: superblock #1 checksum error [ 214.631052][ T4329] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 214.671569][ T4329] usb 5-1: device descriptor read/8, error -32 [ 214.971020][ T4329] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.630862][ C1] sched: RT throttling activated [ 215.678393][ T4329] usb 5-1: device descriptor read/8, error -71 [ 215.983091][ T4329] usb usb5-port1: unable to enumerate USB device [ 216.719199][ T5616] loop3: detected capacity change from 0 to 164 [ 217.304200][ T5592] netlink: 56 bytes leftover after parsing attributes in process `syz.0.263'. [ 217.434234][ T5618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 218.249348][ T5618] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'. [ 219.850374][ T5637] loop4: detected capacity change from 0 to 32768 [ 219.954327][ T5640] read_mapping_page failed! [ 219.959032][ T5640] ERROR: (device loop4): txCommit: [ 219.959032][ T5640] [ 220.556836][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 221.096751][ T5643] syz.0.275 (5643): drop_caches: 2 [ 221.197149][ T5645] loop3: detected capacity change from 0 to 128 [ 221.251322][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.265187][ T5645] FAT-fs (loop3): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 221.377586][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.224082][ T5651] loop3: detected capacity change from 0 to 1024 [ 222.373720][ T5651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.418852][ T26] audit: type=1800 audit(1764005991.496:7): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.279" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 222.491532][ T5651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.279'. [ 222.590328][ T5651] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.279: Allocating blocks 449-513 which overlap fs metadata [ 222.613478][ T5650] EXT4-fs (loop3): pa ffff8880741dbd20: logic 48, phys. 177, len 21 [ 222.622099][ T5650] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 222.849171][ T5661] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 222.888301][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.111361][ T5661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.555345][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 224.040893][ T5671] loop4: detected capacity change from 0 to 1024 [ 224.053220][ T5671] EXT4-fs: Ignoring removed orlov option [ 224.059307][ T5671] EXT4-fs: Ignoring removed i_version option [ 224.939398][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 224.947398][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 224.955035][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.008935][ T5676] infiniband syz2: set active [ 225.013918][ T5676] infiniband syz2: added vxcan1 [ 225.025377][ T14] vxcan1 speed is unknown, defaulting to 1000 [ 225.044141][ T5671] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.086335][ T5671] EXT4-fs (loop4): unmounting filesystem. [ 225.115258][ T5676] RDS/IB: syz2: added [ 225.120003][ T5676] smc: adding ib device syz2 with port count 1 [ 225.126404][ T5676] smc: ib device syz2 port 1 has pnetid [ 225.135167][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.190112][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.245814][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.301837][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.373562][ T5676] vxcan1 speed is unknown, defaulting to 1000 [ 225.482012][ T128] vxcan1 speed is unknown, defaulting to 1000 [ 226.623924][ T5687] netlink: 52 bytes leftover after parsing attributes in process `syz.4.287'. [ 228.697410][ T5699] ptrace attach of "./syz-executor exec"[5708] was attempted by "./syz-executor exec"[5699] [ 229.592497][ T4276] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 229.601993][ T4276] Bluetooth: hci1: Injecting HCI hardware error event [ 229.625692][ T4270] Bluetooth: hci1: hardware error 0x00 [ 229.821096][ T4276] Bluetooth: hci3: command 0x0405 tx timeout [ 229.969793][ T5719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 230.184238][ T5719] vim2m vim2m.0: vidioc_s_fmt queue busy [ 230.658617][ T5729] netlink: set zone limit has 8 unknown bytes [ 231.777879][ T5739] loop3: detected capacity change from 0 to 1024 [ 231.921137][ T4270] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 232.001702][ T5739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.177777][ T5746] loop1: detected capacity change from 0 to 1024 [ 232.190538][ T5746] EXT4-fs: Ignoring removed orlov option [ 232.196799][ T5746] EXT4-fs: Ignoring removed i_version option [ 232.686346][ T26] audit: type=1800 audit(1764006001.766:8): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.299" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 232.757835][ T5739] netlink: 52 bytes leftover after parsing attributes in process `syz.3.299'. [ 232.771993][ T5731] ceph: No mds server is up or the cluster is laggy [ 232.785445][ T5746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 232.796691][ T5746] EXT4-fs (loop1): unmounting filesystem. [ 233.084036][ T5739] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.299: Allocating blocks 449-513 which overlap fs metadata [ 233.322316][ T5738] EXT4-fs (loop3): pa ffff888070814540: logic 48, phys. 177, len 21 [ 233.330432][ T5738] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 233.685220][ T5756] loop1: detected capacity change from 0 to 164 [ 234.230764][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 235.205528][ T5764] loop3: detected capacity change from 0 to 512 [ 235.863540][ T5764] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 235.939352][ T5764] EXT4-fs (loop3): 1 truncate cleaned up [ 235.959598][ T5764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.913055][ T4270] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 236.925545][ T4270] Bluetooth: hci3: Injecting HCI hardware error event [ 236.935521][ T4276] Bluetooth: hci3: hardware error 0x00 [ 237.151705][ T5784] fuse: Unknown parameter '' [ 237.166101][ T26] audit: type=1326 audit(1764006006.246:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 237.999327][ T26] audit: type=1326 audit(1764006006.276:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.034895][ T26] audit: type=1326 audit(1764006006.276:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.057725][ T26] audit: type=1326 audit(1764006006.276:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.080654][ T26] audit: type=1326 audit(1764006006.276:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.375947][ T26] audit: type=1326 audit(1764006006.276:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.433772][ T5788] loop4: detected capacity change from 0 to 128 [ 238.531273][ T26] audit: type=1326 audit(1764006006.276:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc05a58df90 code=0x7ffc0000 [ 238.554148][ T26] audit: type=1326 audit(1764006006.286:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 238.579338][ T26] audit: type=1326 audit(1764006006.296:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5782 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc05a58f749 code=0x7ffc0000 [ 239.124613][ T4276] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 240.712640][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 242.924855][ T5831] loop2: detected capacity change from 0 to 164 [ 245.321038][ T3652] libceph: connect (1)[c::]:6789 error -101 [ 245.327784][ T3652] libceph: mon0 (1)[c::]:6789 connect error [ 245.437043][ T5837] ceph: No mds server is up or the cluster is laggy [ 245.597652][ T3652] libceph: connect (1)[c::]:6789 error -101 [ 245.611663][ T3652] libceph: mon0 (1)[c::]:6789 connect error [ 246.231039][ T4276] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 246.240919][ T4276] Bluetooth: hci2: Injecting HCI hardware error event [ 246.250005][ T4270] Bluetooth: hci2: hardware error 0x00 [ 249.716884][ T5875] 9pnet_fd: Insufficient options for proto=fd [ 250.066795][ T5876] Process accounting resumed [ 250.221048][ T4270] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 251.218001][ T5887] loop4: detected capacity change from 0 to 128 [ 251.781465][ T5887] qnx6: superblock #1 checksum error [ 252.590817][ T5904] ax25_connect(): syz.3.333 uses autobind, please contact jreuter@yaina.de [ 254.973495][ T5895] overlayfs: failed to resolve './file1': -2 [ 255.003158][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.337'. [ 255.212792][ T5919] loop3: detected capacity change from 0 to 4096 [ 255.838996][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.845409][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.866475][ T4444] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.443859][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.340'. [ 256.501963][ T5924] netlink: 'syz.2.340': attribute type 8 has an invalid length. [ 256.537217][ T5911] vim2m vim2m.0: vidioc_s_fmt queue busy [ 258.419235][ T5946] autofs4:pid:5946:autofs_fill_super: called with bogus options [ 263.363021][ T5971] fuse: Unknown parameter '' [ 263.375169][ T26] audit: type=1326 audit(1764006032.456:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 263.808725][ T26] audit: type=1326 audit(1764006032.476:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 263.831202][ T26] audit: type=1326 audit(1764006032.476:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 263.853712][ T26] audit: type=1326 audit(1764006032.486:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 264.020251][ T26] audit: type=1326 audit(1764006032.486:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 264.101074][ T26] audit: type=1326 audit(1764006032.486:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 264.140159][ T26] audit: type=1326 audit(1764006032.486:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe5b78df90 code=0x7ffc0000 [ 264.167883][ T26] audit: type=1326 audit(1764006032.486:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 264.197238][ T26] audit: type=1326 audit(1764006032.496:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5963 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 265.246352][ T5986] loop2: detected capacity change from 0 to 128 [ 265.318094][ T5977] rdma_rxe: rxe_register_device failed with error -23 [ 265.325742][ T5977] rdma_rxe: failed to add vxcan1 [ 266.120401][ T5994] loop1: detected capacity change from 0 to 16 [ 266.459900][ T5994] erofs: (device loop1): mounted with root inode @ nid 36. [ 266.607376][ T4270] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 266.620661][ T5993] x_tables: duplicate underflow at hook 1 [ 266.632766][ T5994] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 267.203791][ T26] audit: type=1800 audit(1764006035.726:27): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.357" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 267.231752][ T5998] device veth0_to_team entered promiscuous mode [ 267.928799][ T6010] loop2: detected capacity change from 0 to 128 [ 269.804725][ T6010] FAT-fs (loop2): Unrecognized mount option "dos1xfloppy=win95" or missing value [ 270.924571][ T6023] loop1: detected capacity change from 0 to 1024 [ 271.558131][ T6023] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 271.950394][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 274.366331][ T6052] tmpfs: Unknown parameter 'grpquota' [ 275.192616][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.200370][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.212703][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.220428][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.805295][ T6063] rdma_rxe: rxe_register_device failed with error -23 [ 275.813302][ T6063] rdma_rxe: failed to add vxcan1 [ 276.883751][ T6074] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 278.950012][ T6092] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 278.973998][ T6092] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.982281][ T6092] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.006394][ T6130] rdma_rxe: rxe_register_device failed with error -23 [ 283.017417][ T6130] rdma_rxe: failed to add vxcan1 [ 283.176824][ T6127] loop4: detected capacity change from 0 to 1024 [ 283.631261][ T6127] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 284.077997][ T26] audit: type=1800 audit(1764006053.156:28): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.385" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 284.204364][ T6140] loop2: detected capacity change from 0 to 256 [ 284.239759][ T6140] FAT-fs (loop2): Unrecognized mount option "utf8=1" or missing value [ 284.249858][ T6127] netlink: 52 bytes leftover after parsing attributes in process `syz.4.385'. [ 284.710045][ T6148] x_tables: duplicate underflow at hook 1 [ 285.315118][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 285.827019][ T6150] loop3: detected capacity change from 0 to 1024 [ 288.975505][ T6150] EXT4-fs: error -4 creating inode table initialization thread [ 288.983820][ T6150] EXT4-fs (loop3): mount failed [ 290.095879][ T6173] netlink: 1212 bytes leftover after parsing attributes in process `syz.2.393'. [ 291.095962][ T6184] rdma_rxe: rxe_register_device failed with error -23 [ 291.104424][ T6184] rdma_rxe: failed to add vxcan1 [ 292.839638][ T6203] sctp: [Deprecated]: syz.1.400 (pid 6203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 292.839638][ T6203] Use struct sctp_sack_info instead [ 296.587745][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 296.918463][ T6232] loop4: detected capacity change from 0 to 1024 [ 297.737884][ T6232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 299.091912][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 302.105546][ T6266] loop1: detected capacity change from 0 to 1024 [ 302.929762][ T6272] PKCS7: Unknown OID: [4] 0.0 [ 302.935444][ T6272] PKCS7: Only support pkcs7_signedData type [ 302.958142][ T6272] hfsplus: xattr search failed [ 309.336362][ T6317] netlink: 'syz.1.425': attribute type 11 has an invalid length. [ 309.344281][ T6317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.425'. [ 312.562578][ T26] audit: type=1326 audit(1764006081.115:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd598f749 code=0x7ffc0000 [ 312.868694][ T26] audit: type=1326 audit(1764006081.115:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6324 comm="syz.2.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd598f749 code=0x7ffc0000 [ 313.031117][ T6334] netlink: 'syz.4.428': attribute type 21 has an invalid length. [ 313.537429][ T6345] loop3: detected capacity change from 0 to 2048 [ 313.944084][ T6345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 317.267440][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280258][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.591392][ T6385] loop2: detected capacity change from 0 to 16 [ 318.612037][ T6385] erofs: (device loop2): mounted with root inode @ nid 36. [ 318.743327][ T4270] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 318.762363][ T6388] x_tables: duplicate underflow at hook 1 [ 318.776834][ T6387] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 318.951046][ T26] audit: type=1800 audit(1764006087.865:31): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.437" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 319.815617][ T6401] IPVS: set_ctl: invalid protocol: 2 10.1.1.2:20001 [ 322.308988][ T6407] loop2: detected capacity change from 0 to 40427 [ 322.317136][ T6403] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 322.327559][ T6407] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 322.335383][ T6407] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 322.345316][ T6407] F2FS-fs (loop2): invalid crc value [ 322.423922][ T6407] F2FS-fs (loop2): Found nat_bits in checkpoint [ 322.569344][ T6407] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 322.576586][ T6407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 323.431302][ T6429] loop1: detected capacity change from 0 to 1024 [ 323.438494][ T6429] EXT4-fs: Ignoring removed orlov option [ 324.381716][ T6429] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 324.496867][ T6435] rdma_rxe: rxe_register_device failed with error -23 [ 324.514079][ T6435] rdma_rxe: failed to add vxcan1 [ 325.125500][ T6439] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.335773][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 326.736626][ T6463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 327.343533][ T4959] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.361534][ T6459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.445'. [ 327.478069][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 327.679537][ T4276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 327.692411][ T4276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 327.711503][ T4276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 327.720098][ T4276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 327.791365][ T4276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 327.798612][ T4276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 327.813736][ T4959] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.550602][ T6470] vxcan1 speed is unknown, defaulting to 1000 [ 328.796616][ T4959] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.619982][ T4959] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.821137][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 329.901566][ T6488] xt_CT: You must specify a L4 protocol and not use inversions on it [ 331.900979][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 332.869444][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 333.981197][ T4276] Bluetooth: hci2: command 0x040f tx timeout [ 334.261202][ T6533] 9pnet_fd: Insufficient options for proto=fd [ 336.061088][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 337.576939][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.764210][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.870451][ T6470] device bridge_slave_0 entered promiscuous mode [ 338.205634][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.221618][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.257361][ T6470] device bridge_slave_1 entered promiscuous mode [ 338.355606][ T6551] loop3: detected capacity change from 0 to 1024 [ 338.398048][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.449267][ T6551] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 338.484951][ T26] audit: type=1800 audit(1764006107.565:32): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.466" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 338.547060][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.586629][ T6551] netlink: 52 bytes leftover after parsing attributes in process `syz.3.466'. [ 338.627111][ T6559] loop4: detected capacity change from 0 to 256 [ 338.687545][ T6559] FAT-fs (loop4): Unrecognized mount option "utf8=1" or missing value [ 338.696902][ T6551] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.466: Allocating blocks 449-513 which overlap fs metadata [ 338.859237][ T6549] EXT4-fs (loop3): pa ffff8880741db460: logic 48, phys. 177, len 21 [ 338.867425][ T6549] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 339.830778][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 340.040267][ T6470] team0: Port device team_slave_0 added [ 340.774797][ T6470] team0: Port device team_slave_1 added [ 342.505090][ T6596] loop4: detected capacity change from 0 to 16 [ 342.687787][ T6596] erofs: (device loop4): mounted with root inode @ nid 36. [ 343.457187][ T6601] x_tables: duplicate underflow at hook 1 [ 343.490375][ T4276] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 343.505502][ T6600] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 343.529665][ T26] audit: type=1800 audit(1764006112.595:33): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.474" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 343.973280][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.983495][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.073055][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.145580][ T6607] loop2: detected capacity change from 0 to 512 [ 344.259347][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.355773][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.506200][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.236468][ T6618] overlayfs: missing 'lowerdir' [ 345.494699][ T6607] EXT4-fs (loop2): Test dummy encryption mode enabled [ 345.536024][ T6607] EXT4-fs error (device loop2): __ext4_fill_super:5397: inode #2: comm syz.2.477: casefold flag without casefold feature [ 345.580779][ T6607] EXT4-fs (loop2): get root inode failed [ 345.605692][ T4959] device hsr_slave_0 left promiscuous mode [ 345.624308][ T6607] EXT4-fs (loop2): mount failed [ 345.684965][ T4959] device hsr_slave_1 left promiscuous mode [ 345.704298][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.708838][ T6626] loop1: detected capacity change from 0 to 256 [ 345.712465][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.749320][ T6627] loop4: detected capacity change from 0 to 1024 [ 345.761983][ T4959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.774462][ T4959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.782954][ T6626] FAT-fs (loop1): Unrecognized mount option "utf8=1" or missing value [ 345.826703][ T4959] device bridge_slave_1 left promiscuous mode [ 345.837219][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.318414][ T4959] device bridge_slave_0 left promiscuous mode [ 346.622414][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.780901][ T6632] vivid-000: kernel_thread() failed [ 347.067006][ T6627] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 347.112916][ T26] audit: type=1800 audit(1764006116.195:34): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.480" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 347.267145][ T4959] device veth1_macvtap left promiscuous mode [ 347.283183][ T4959] device veth0_macvtap left promiscuous mode [ 347.289774][ T4959] device veth1_vlan left promiscuous mode [ 347.296651][ T4959] device veth0_vlan left promiscuous mode [ 347.348306][ T6642] loop1: detected capacity change from 0 to 512 [ 347.778218][ T6642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 347.808004][ T6642] EXT4-fs (loop1): 1 truncate cleaned up [ 347.821655][ T6642] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 347.916655][ T6642] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.481: corrupted in-inode xattr [ 347.959652][ T6642] EXT4-fs (loop1): Remounting filesystem read-only [ 347.967889][ T6642] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1733: inode #15: comm syz.1.481: unable to update i_inline_off [ 347.999554][ T6642] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 348.015768][ T6642] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2196: inode #15: comm syz.1.481: corrupted in-inode xattr [ 348.030985][ T6642] EXT4-fs (loop1): Remounting filesystem read-only [ 348.043256][ T6656] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.480: Allocating blocks 449-513 which overlap fs metadata [ 348.084046][ T4959] infiniband syz2: set down [ 348.133900][ T6624] EXT4-fs (loop4): pa ffff8880741dbd20: logic 48, phys. 177, len 21 [ 348.142006][ T6624] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 348.730410][ T6664] o2cb: This node has not been configured. [ 348.736682][ T6664] o2cb: Cluster check failed. Fix errors before retrying. [ 348.744149][ T6664] (syz.2.486,6664,0):user_dlm_register:674 ERROR: status = -22 [ 348.751959][ T6664] (syz.2.486,6664,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 348.773106][ T6664] o2cb: This node has not been configured. [ 348.779002][ T6664] o2cb: Cluster check failed. Fix errors before retrying. [ 348.786323][ T6664] (syz.2.486,6664,0):user_dlm_register:674 ERROR: status = -22 [ 348.793958][ T6664] (syz.2.486,6664,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 350.977910][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 351.121242][ T6677] loop3: detected capacity change from 0 to 256 [ 351.144631][ T6677] exFAT-fs (loop3): bogus sectors bits per cluster : 193 [ 351.151803][ T6677] exFAT-fs (loop3): failed to read boot sector [ 351.158017][ T6677] exFAT-fs (loop3): failed to recognize exfat type [ 351.280611][ T4959] team0 (unregistering): Port device team_slave_1 removed [ 351.640413][ T4959] team0 (unregistering): Port device team_slave_0 removed [ 351.885803][ T4959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.970522][ T4959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.053514][ T6679] loop3: detected capacity change from 0 to 1024 [ 352.119772][ T6679] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 352.157439][ T26] audit: type=1800 audit(1764006121.235:35): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 352.286362][ T56] smc: removing ib device syz2 [ 352.557718][ T6686] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3836: comm syz.3.491: Allocating blocks 449-513 which overlap fs metadata [ 352.736744][ T4959] bond0 (unregistering): Released all slaves [ 352.870176][ T6678] EXT4-fs (loop3): pa ffff8880708140e0: logic 48, phys. 177, len 21 [ 352.878302][ T6678] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 352.979597][ T6470] device hsr_slave_0 entered promiscuous mode [ 352.986740][ T6470] device hsr_slave_1 entered promiscuous mode [ 352.993473][ T6470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.001289][ T6470] Cannot create hsr debugfs directory [ 353.022274][ T6653] netlink: 52 bytes leftover after parsing attributes in process `syz.4.480'. [ 353.038482][ T128] vxcan1 speed is unknown, defaulting to 1000 [ 353.044856][ T6667] netlink: 80 bytes leftover after parsing attributes in process `syz.2.488'. [ 353.067829][ T6685] netlink: 52 bytes leftover after parsing attributes in process `syz.3.491'. [ 353.082477][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 353.171801][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 353.350411][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 353.481065][ T6696] hub 9-0:1.0: USB hub found [ 353.487204][ T6696] hub 9-0:1.0: 1 port detected [ 355.078417][ T6701] loop4: detected capacity change from 0 to 1024 [ 356.320173][ T6701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 356.394080][ T6711] loop1: detected capacity change from 0 to 1024 [ 357.283632][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 357.284521][ T6711] hfsplus: bad catalog file entry [ 357.294979][ T6711] hfsplus: failed to load root directory [ 357.479753][ T6719] loop3: detected capacity change from 0 to 1024 [ 358.676069][ T6735] hfsplus: found bad thread record in catalog [ 358.699200][ T6735] hfsplus: found bad thread record in catalog [ 359.115422][ T6733] hfsplus: xattr searching failed [ 359.124167][ T6734] hfsplus: xattr searching failed [ 359.130233][ T26] audit: type=1800 audit(1764006128.205:36): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="bus" dev="loop3" ino=26 res=0 errno=0 [ 359.437977][ T6470] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 359.451948][ T4397] hfsplus: b-tree write err: -5, ino 4 [ 359.578372][ T6470] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.597600][ T6470] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 359.727453][ T6470] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 360.637866][ T6748] netlink: 'syz.3.501': attribute type 11 has an invalid length. [ 360.645832][ T6748] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.501'. [ 361.589311][ T6753] loop1: detected capacity change from 0 to 1024 [ 361.706310][ T6756] loop2: detected capacity change from 0 to 512 [ 361.715685][ T6753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.773339][ T6756] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 361.791812][ T26] audit: type=1800 audit(1764006130.875:37): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 361.881520][ T6756] EXT4-fs (loop2): 1 truncate cleaned up [ 361.906355][ T6756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 361.907180][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.992016][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.027257][ T6470] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 362.037875][ T6470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.083116][ T6756] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2196: inode #15: comm syz.2.502: corrupted in-inode xattr [ 362.686297][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.695753][ T6756] EXT4-fs (loop2): Remounting filesystem read-only [ 362.721525][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.729429][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.738352][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.747176][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.755295][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.764370][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 362.773290][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 362.793428][ T6756] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1733: inode #15: comm syz.2.502: unable to update i_inline_off [ 362.803704][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.812943][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.846049][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 362.863450][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 362.876018][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 362.905263][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 363.666212][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 363.756609][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 363.765675][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 363.785219][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 363.790807][ T6781] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.503: Allocating blocks 449-513 which overlap fs metadata [ 363.806029][ T6783] loop3: detected capacity change from 0 to 1024 [ 363.842531][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 363.844786][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 363.872606][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 363.891313][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.899025][ T6752] EXT4-fs (loop1): pa ffff8880708147e0: logic 48, phys. 177, len 21 [ 363.907252][ T6752] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 363.916230][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 363.926538][ T6783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 363.986492][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 364.039012][ T6776] netlink: 52 bytes leftover after parsing attributes in process `syz.1.503'. [ 364.050106][ T26] audit: type=1800 audit(1764006133.135:38): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.506" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 364.199109][ T6788] loop2: detected capacity change from 0 to 1024 [ 364.297679][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 364.304278][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 364.342480][ T26] audit: type=1800 audit(1764006133.425:39): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.507" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 364.382230][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 364.468918][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 366.813028][ T6812] loop3: detected capacity change from 0 to 1024 [ 367.082975][ T6812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 368.127906][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 368.131531][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.199518][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.212790][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.766602][ T6838] loop3: detected capacity change from 0 to 40427 [ 368.850300][ T6838] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 368.858193][ T6838] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 368.874618][ T6838] F2FS-fs (loop3): invalid crc value [ 369.089219][ T6838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 369.135987][ T6838] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 369.143203][ T6838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 371.337460][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 372.132652][ T6867] loop4: detected capacity change from 0 to 40427 [ 372.142507][ T6867] F2FS-fs (loop4): Unrecognized mount option "4" or missing value [ 373.479862][ T6880] 9pnet_fd: Insufficient options for proto=fd [ 373.750980][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 374.369351][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.396605][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.468783][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.487652][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.531537][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.569764][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 375.116660][ T6470] device veth0_vlan entered promiscuous mode [ 375.541730][ T6470] device veth1_vlan entered promiscuous mode [ 375.601355][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 375.759988][ T6892] loop4: detected capacity change from 0 to 1024 [ 375.897507][ T6909] o2cb: This node has not been configured. [ 375.903551][ T6909] o2cb: Cluster check failed. Fix errors before retrying. [ 375.910945][ T6909] (syz.3.527,6909,0):user_dlm_register:674 ERROR: status = -22 [ 375.918665][ T6909] (syz.3.527,6909,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 375.936229][ T6909] o2cb: This node has not been configured. [ 375.942295][ T6909] o2cb: Cluster check failed. Fix errors before retrying. [ 375.949587][ T6909] (syz.3.527,6909,0):user_dlm_register:674 ERROR: status = -22 [ 375.957373][ T6909] (syz.3.527,6909,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 376.085658][ T6906] sctp: [Deprecated]: syz.1.526 (pid 6906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.085658][ T6906] Use struct sctp_sack_info instead [ 376.246500][ T6913] hub 9-0:1.0: USB hub found [ 376.253347][ T6913] hub 9-0:1.0: 1 port detected [ 376.814167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.895154][ T6892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 376.947407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.194887][ T6470] device veth0_macvtap entered promiscuous mode [ 377.210381][ T6470] device veth1_macvtap entered promiscuous mode [ 377.237524][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.282189][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.299132][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.329804][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.352655][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.660915][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.561124][ T26] audit: type=1326 audit(1764006403.634:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6918 comm="syz.3.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb298f749 code=0x0 [ 378.572285][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.599261][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.649873][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.682679][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.703132][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709535][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.743059][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.760928][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.782127][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.855167][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.917257][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.944636][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.975382][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.986260][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.002051][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.181668][ T26] audit: type=1326 audit(1764006404.214:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb298f749 code=0x7ffc0000 [ 379.307088][ T6470] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.566255][ T6470] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.630393][ T26] audit: type=1326 audit(1764006404.214:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6935 comm="syz.3.531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb298f749 code=0x7ffc0000 [ 379.701966][ T6470] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.752597][ T6470] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.779604][ T6942] loop1: detected capacity change from 0 to 64 [ 381.191204][ T6957] netlink: 68 bytes leftover after parsing attributes in process `syz.3.543'. [ 381.386886][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 381.451075][ T6953] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 381.508821][ T6953] (syz.3.543,6953,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 381.516793][ T6953] (syz.3.543,6953,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 381.524618][ T6953] (syz.3.543,6953,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 381.551165][ T6953] (syz.3.543,6953,1):ocfs2_fill_super:1176 ERROR: status = -5 [ 381.750083][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.762060][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.781214][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.795060][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.807653][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 381.816396][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.907699][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.050338][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.228341][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.982047][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.491324][ T6978] 9pnet_fd: Insufficient options for proto=fd [ 383.681310][ T6961] chnl_net:caif_netlink_parms(): no params data found [ 383.902861][ T4276] Bluetooth: hci2: command 0x0409 tx timeout [ 384.913468][ T6961] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.920646][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.962247][ T6961] device bridge_slave_0 entered promiscuous mode [ 385.126393][ T6961] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.614363][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.700014][ T6961] device bridge_slave_1 entered promiscuous mode [ 385.835507][ T6961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.849006][ T6961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.047830][ T4276] Bluetooth: hci2: command 0x041b tx timeout [ 386.113838][ T26] audit: type=1326 audit(1764006411.194:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c3d8f749 code=0x7ffc0000 [ 387.078770][ T7027] 9pnet_fd: Insufficient options for proto=fd [ 387.306392][ T26] audit: type=1326 audit(1764006411.194:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.1.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c3d8f749 code=0x7ffc0000 [ 387.518220][ T7030] overlayfs: missing 'lowerdir' [ 388.645527][ T4270] Bluetooth: hci2: command 0x040f tx timeout [ 389.858727][ T6961] team0: Port device team_slave_0 added [ 389.958845][ T6961] team0: Port device team_slave_1 added [ 390.211662][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.239956][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.330421][ T6961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.447519][ T6961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.461326][ T6961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.550552][ T6961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.701066][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 391.601246][ T6961] device hsr_slave_0 entered promiscuous mode [ 391.626225][ T6961] device hsr_slave_1 entered promiscuous mode [ 392.089164][ T6961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.100372][ T6961] Cannot create hsr debugfs directory [ 392.140834][ T56] device hsr_slave_0 left promiscuous mode [ 392.152878][ T56] device hsr_slave_1 left promiscuous mode [ 392.179087][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.201656][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.226498][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.251189][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.297135][ T56] device bridge_slave_1 left promiscuous mode [ 392.319428][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.469681][ T56] device bridge_slave_0 left promiscuous mode [ 392.567484][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.052442][ T7086] loop3: detected capacity change from 0 to 512 [ 393.121602][ T7086] EXT4-fs (loop3): Test dummy encryption mode enabled [ 393.171221][ T7086] EXT4-fs error (device loop3): __ext4_fill_super:5397: inode #2: comm syz.3.556: casefold flag without casefold feature [ 393.218479][ T56] device veth1_macvtap left promiscuous mode [ 393.404098][ T7086] EXT4-fs (loop3): get root inode failed [ 393.623963][ T56] device veth0_macvtap left promiscuous mode [ 393.630122][ T56] device veth1_vlan left promiscuous mode [ 393.641126][ T7086] EXT4-fs (loop3): mount failed [ 393.664653][ T56] device veth0_vlan left promiscuous mode [ 394.383745][ T7097] vivid-000: kernel_thread() failed [ 395.345741][ T7113] loop4: detected capacity change from 0 to 128 [ 396.011370][ T7113] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 396.197784][ T7113] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 396.229532][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.071577][ T7126] loop2: detected capacity change from 0 to 1024 [ 397.805952][ T7126] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 397.884556][ T26] audit: type=1800 audit(1764006422.964:45): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.564" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 398.028115][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 398.210435][ T56] team0 (unregistering): Port device team_slave_1 removed [ 398.300389][ T56] team0 (unregistering): Port device team_slave_0 removed [ 398.302902][ T7141] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.564: Allocating blocks 449-513 which overlap fs metadata [ 398.364614][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.399620][ T7125] EXT4-fs (loop2): pa ffff8880741dbe00: logic 48, phys. 177, len 21 [ 398.407988][ T7125] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 398.438204][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.785530][ T7144] loop3: detected capacity change from 0 to 1024 [ 399.165688][ T7146] PKCS7: Unknown OID: [4] 0.0 [ 399.170446][ T7146] PKCS7: Only support pkcs7_signedData type [ 399.199813][ T7146] hfsplus: xattr search failed [ 399.532632][ T7149] loop4: detected capacity change from 0 to 512 [ 399.670646][ T7149] EXT4-fs (loop4): Test dummy encryption mode enabled [ 399.735175][ T7149] EXT4-fs error (device loop4): __ext4_fill_super:5397: inode #2: comm syz.4.568: casefold flag without casefold feature [ 399.756368][ T7149] EXT4-fs (loop4): get root inode failed [ 399.793901][ T7149] EXT4-fs (loop4): mount failed [ 399.962839][ T56] bond0 (unregistering): Released all slaves [ 400.369361][ T7139] netlink: 52 bytes leftover after parsing attributes in process `syz.2.564'. [ 400.780227][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 402.950948][ T7173] loop4: detected capacity change from 0 to 32768 [ 403.218054][ T7173] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 403.227626][ T7173] XFS (loop4): Mounting V5 Filesystem [ 403.299009][ T7173] XFS (loop4): Ending clean mount [ 403.408568][ T7173] XFS (loop4): Quotacheck needed: Please wait. [ 403.888571][ T7173] XFS (loop4): Quotacheck: Done. [ 404.179121][ T4265] XFS (loop4): Unmounting Filesystem [ 404.352668][ T7201] loop1: detected capacity change from 0 to 1024 [ 404.691628][ T7201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 405.002863][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 405.440330][ T6961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 405.470705][ T6961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 405.492139][ T6961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 405.529090][ T6961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 405.748833][ T7223] loop3: detected capacity change from 0 to 1024 [ 405.789248][ T6961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.956292][ T7223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 406.418605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.475175][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.532623][ T6961] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.560623][ T26] audit: type=1800 audit(1764006431.634:46): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.579" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 406.588083][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.627355][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.656581][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.663805][ T4423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.729726][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.759788][ T7234] loop1: detected capacity change from 0 to 1024 [ 406.779429][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.822489][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.829665][ T4423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.881394][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.922772][ T7234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 407.038857][ T26] audit: type=1800 audit(1764006432.114:47): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.581" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 407.061256][ T7241] netlink: 52 bytes leftover after parsing attributes in process `syz.3.579'. [ 407.708229][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.729841][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.759457][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.772287][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.780895][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.797060][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.810013][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.818621][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.820070][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 407.838683][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.856559][ T6961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.874015][ T7250] loop4: detected capacity change from 0 to 1024 [ 407.874993][ T6961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 407.919276][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.933032][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.961639][ T7234] netlink: 52 bytes leftover after parsing attributes in process `syz.1.581'. [ 408.218943][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 408.444680][ T7261] PKCS7: Unknown OID: [4] 0.0 [ 408.449446][ T7261] PKCS7: Only support pkcs7_signedData type [ 408.557354][ T7261] hfsplus: xattr search failed [ 409.356453][ T26] audit: type=1326 audit(1764006434.435:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 409.430640][ T26] audit: type=1326 audit(1764006434.435:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe5b78f749 code=0x7ffc0000 [ 411.352945][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.360435][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 412.082272][ T7297] loop3: detected capacity change from 0 to 1024 [ 413.183706][ T6961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.397566][ T7297] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 413.613506][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 416.287262][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 416.316342][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 416.394083][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 416.413227][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 416.448140][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.407664][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.585502][ T6961] device veth0_vlan entered promiscuous mode [ 417.606026][ T6961] device veth1_vlan entered promiscuous mode [ 417.851921][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 417.947851][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.255637][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.351898][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.376808][ T6961] device veth0_macvtap entered promiscuous mode [ 418.455910][ T6961] device veth1_macvtap entered promiscuous mode [ 419.351195][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 419.378462][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 419.403398][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.459306][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.634526][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.668253][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.640724][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.731395][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.776011][ T7398] loop3: detected capacity change from 0 to 1024 [ 420.846477][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.904921][ T7398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 420.938770][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.958287][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 421.124255][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.150787][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 421.171798][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.182156][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.192953][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.222981][ T6961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.263070][ T6961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.307774][ T6961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.391687][ T6961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.444376][ T6961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.453787][ T6961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.462818][ T6961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.475590][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 421.493155][ T4959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 423.458827][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.484265][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.530341][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.539080][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.647246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 424.325007][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 424.632826][ T7437] loop4: detected capacity change from 0 to 1024 [ 425.670182][ T7437] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 425.770320][ T7460] loop5: detected capacity change from 0 to 1024 [ 425.799082][ T26] audit: type=1800 audit(1764006450.875:50): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.633" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 426.151701][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 426.474757][ T7473] PKCS7: Unknown OID: [4] 0.0 [ 426.479519][ T7473] PKCS7: Only support pkcs7_signedData type [ 427.644633][ T7475] loop1: detected capacity change from 0 to 1024 [ 428.119331][ T7468] hfsplus: xattr search failed [ 428.282588][ T7475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 428.598095][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 428.732308][ T7487] loop3: detected capacity change from 0 to 1024 [ 428.921261][ T7487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 429.774484][ T7501] loop1: detected capacity change from 0 to 1024 [ 429.781812][ T7487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.635'. [ 429.817719][ T7501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 430.475116][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 430.730081][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 432.339401][ T7534] loop5: detected capacity change from 0 to 1024 [ 432.492860][ T7534] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 432.698813][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 434.379571][ T7558] netlink: 52 bytes leftover after parsing attributes in process `syz.1.651'. [ 434.592305][ T7564] loop4: detected capacity change from 0 to 1024 [ 434.782302][ T7564] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 435.694108][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 437.313311][ T7605] loop4: detected capacity change from 0 to 1024 [ 437.472715][ T7605] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 437.660295][ T7596] loop2: detected capacity change from 0 to 1024 [ 437.941384][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 438.320950][ T7619] PKCS7: Unknown OID: [4] 0.0 [ 438.325719][ T7619] PKCS7: Only support pkcs7_signedData type [ 438.927732][ T7618] hfsplus: xattr search failed [ 440.133982][ T7630] device veth0_to_team entered promiscuous mode [ 440.155873][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162483][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.517100][ T7638] loop5: detected capacity change from 0 to 1024 [ 440.680791][ T7638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 440.734135][ T26] audit: type=1800 audit(1764006465.815:51): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.668" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 440.864466][ T7638] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.668: Allocating blocks 449-513 which overlap fs metadata [ 440.960482][ T7635] EXT4-fs (loop5): pa ffff8880741dbee0: logic 48, phys. 177, len 21 [ 440.968757][ T7635] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 441.377702][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 443.029505][ T7671] loop5: detected capacity change from 0 to 16 [ 443.106303][ T7671] erofs: (device loop5): mounted with root inode @ nid 36. [ 443.533989][ T7676] autofs4:pid:7676:autofs_fill_super: called with bogus options [ 444.397039][ T7674] loop2: detected capacity change from 0 to 1024 [ 444.448819][ T7674] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 444.645134][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 446.387951][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.495818][ T7724] loop4: detected capacity change from 0 to 1024 [ 448.722592][ T7724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 448.776961][ T26] audit: type=1800 audit(1764006473.855:52): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.686" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 449.466004][ T7732] loop3: detected capacity change from 0 to 1024 [ 449.871730][ T7732] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 449.948686][ T7724] netlink: 52 bytes leftover after parsing attributes in process `syz.4.686'. [ 450.089927][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 450.123448][ T7724] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.686: Allocating blocks 449-513 which overlap fs metadata [ 450.207917][ T7724] EXT4-fs (loop4): pa ffff888070814700: logic 48, phys. 177, len 21 [ 450.216732][ T7724] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 450.621030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.519521][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 456.075848][ T7793] loop1: detected capacity change from 0 to 1024 [ 458.049074][ T7793] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 458.068880][ T26] audit: type=1800 audit(1764006483.145:53): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.701" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 458.308303][ T7814] loop2: detected capacity change from 0 to 1024 [ 458.408426][ T7814] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 458.512372][ T26] audit: type=1800 audit(1764006483.585:54): pid=7814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.705" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 458.557205][ T7814] netlink: 52 bytes leftover after parsing attributes in process `syz.2.705'. [ 458.568223][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 459.341027][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.671197][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 462.735704][ T7853] loop1: detected capacity change from 0 to 512 [ 462.894751][ T7853] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 462.953626][ T7853] EXT4-fs (loop1): mount failed [ 463.043739][ T7857] loop2: detected capacity change from 0 to 64 [ 464.496144][ T7861] sctp: failed to load transform for md5: -2 [ 468.614079][ T7898] loop2: detected capacity change from 0 to 1024 [ 469.170007][ T7904] loop5: detected capacity change from 0 to 1024 [ 469.263075][ T7904] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 469.355482][ T26] audit: type=1800 audit(1764006494.435:55): pid=7904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.728" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 469.383229][ T7904] netlink: 52 bytes leftover after parsing attributes in process `syz.5.728'. [ 469.455031][ T26] audit: type=1326 audit(1764006494.535:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.2.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd598f749 code=0x7fc00000 [ 469.806591][ T7911] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.728: Allocating blocks 449-513 which overlap fs metadata [ 470.259729][ T7911] EXT4-fs (loop5): pa ffff8880741dbe00: logic 48, phys. 177, len 21 [ 470.267957][ T7911] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 470.634239][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 470.724084][ T7927] loop2: detected capacity change from 0 to 512 [ 471.306840][ T7935] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 471.332977][ T7935] CIFS mount error: No usable UNC path provided in device string! [ 471.332977][ T7935] [ 471.800573][ T7935] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 474.127433][ T7957] loop4: detected capacity change from 0 to 1024 [ 474.525103][ T7960] loop1: detected capacity change from 0 to 40427 [ 474.907191][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.738'. [ 476.202436][ T7960] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 476.209418][ T7960] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 476.260395][ T7960] F2FS-fs (loop1): invalid crc value [ 476.373173][ T7960] F2FS-fs (loop1): Found nat_bits in checkpoint [ 476.400320][ T7957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 476.446184][ T7960] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 476.453395][ T7960] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 476.531032][ T26] audit: type=1800 audit(1764006501.595:57): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.740" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 476.621044][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 476.727787][ T7979] tmpfs: Unknown parameter '!cu[5|ri+>~:χjIHr#Y GQdR WIAj.1`jf"v|B?C' [ 477.717836][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 478.885400][ T8002] CIFS mount error: No usable UNC path provided in device string! [ 478.885400][ T8002] [ 478.896396][ T8002] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 481.086306][ T8012] netlink: 52 bytes leftover after parsing attributes in process `syz.3.749'. [ 484.435481][ T8036] loop4: detected capacity change from 0 to 1024 [ 485.108587][ T8036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 485.217487][ T26] audit: type=1800 audit(1764006510.295:58): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.756" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 485.326876][ T8036] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.756: Allocating blocks 449-513 which overlap fs metadata [ 486.221971][ T8036] EXT4-fs (loop4): pa ffff8880708149a0: logic 48, phys. 177, len 21 [ 486.230064][ T8036] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 487.525610][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 487.706596][ T8077] loop4: detected capacity change from 0 to 1024 [ 487.769916][ T8077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 488.139747][ T8090] netlink: 52 bytes leftover after parsing attributes in process `syz.4.766'. [ 488.877551][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 491.192819][ T8115] loop5: detected capacity change from 0 to 128 [ 491.275155][ T8119] loop3: detected capacity change from 0 to 1024 [ 491.304688][ T8115] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 491.322243][ T8115] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.354057][ C0] vkms_vblank_simulate: vblank timer overrun [ 491.630145][ T8119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 491.999941][ T8113] xt_hashlimit: size too large, truncated to 1048576 [ 492.006988][ T8113] xt_hashlimit: max too large, truncated to 1048576 [ 492.082664][ T26] audit: type=1800 audit(1764006517.145:59): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.777" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 492.363616][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 493.484765][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 493.778112][ T8154] loop1: detected capacity change from 0 to 1024 [ 496.851238][ T8154] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 499.083393][ T8194] loop5: detected capacity change from 0 to 1024 [ 499.292944][ T8194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 499.414614][ T26] audit: type=1800 audit(1764006524.495:60): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.792" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 500.003250][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 502.461052][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.467407][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.806307][ T8238] loop5: detected capacity change from 0 to 512 [ 502.881330][ T8235] ax25_connect(): syz.2.798 uses autobind, please contact jreuter@yaina.de [ 502.893015][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.798'. [ 503.230964][ T8238] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 503.271185][ T8238] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.746210][ T8254] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.799: corrupted inode contents [ 505.040266][ T8254] EXT4-fs error (device loop5): ext4_dirty_inode:6133: inode #2: comm syz.5.799: mark_inode_dirty error [ 505.443430][ T8254] EXT4-fs error (device loop5): ext4_do_update_inode:5268: inode #2: comm syz.5.799: corrupted inode contents [ 505.456898][ T8254] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.799: mark_inode_dirty error [ 505.529080][ T8263] loop2: detected capacity change from 0 to 256 [ 505.673626][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 508.782090][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 511.463927][ T8313] loop2: detected capacity change from 0 to 1024 [ 512.343655][ T8317] loop1: detected capacity change from 0 to 65536 [ 512.354274][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 512.432675][ T8313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 512.454312][ T26] audit: type=1800 audit(1764006537.535:61): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.814" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 512.551045][ T8313] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.814: Allocating blocks 449-513 which overlap fs metadata [ 512.619964][ T8317] XFS (loop1): Mounting V5 Filesystem [ 512.987362][ T8317] XFS (loop1): Ending clean mount [ 513.019550][ T8317] XFS (loop1): Quotacheck needed: Please wait. [ 513.109020][ T8313] EXT4-fs (loop2): pa ffff8880741dbc40: logic 48, phys. 177, len 21 [ 513.117202][ T8313] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 513.969838][ T8317] XFS (loop1): Quotacheck: Done. [ 514.314886][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 514.637248][ T4269] XFS (loop1): Unmounting Filesystem [ 514.837101][ T8353] loop5: detected capacity change from 0 to 1024 [ 515.972319][ T8358] netlink: 'syz.3.824': attribute type 4 has an invalid length. [ 515.972502][ T8358] netlink: 'syz.3.824': attribute type 2 has an invalid length. [ 516.151767][ T8353] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 516.181605][ T26] audit: type=1800 audit(1764006541.265:62): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.821" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 516.246055][ T8353] netlink: 52 bytes leftover after parsing attributes in process `syz.5.821'. [ 517.294619][ T8353] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.821: Allocating blocks 449-513 which overlap fs metadata [ 517.568655][ T8352] EXT4-fs (loop5): pa ffff888070814a80: logic 48, phys. 177, len 21 [ 517.576870][ T8352] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 517.688166][ T8382] netlink: set zone limit has 8 unknown bytes [ 517.904421][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 519.350570][ T8389] loop3: detected capacity change from 0 to 32768 [ 519.759870][ T8389] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.831 (8389) [ 520.020810][ T8389] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 520.033564][ T8389] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 520.043420][ T8389] BTRFS info (device loop3): force zlib compression, level 3 [ 520.051096][ T8389] BTRFS info (device loop3): force clearing of disk cache [ 520.058356][ T8389] BTRFS info (device loop3): setting nodatasum [ 520.064738][ T8389] BTRFS info (device loop3): allowing degraded mounts [ 520.071671][ T8389] BTRFS info (device loop3): using free space tree [ 520.676709][ T8398] loop2: detected capacity change from 0 to 1024 [ 521.219580][ T8423] loop5: detected capacity change from 0 to 164 [ 521.381073][ T8398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 521.514085][ T26] audit: type=1800 audit(1764006546.595:63): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.833" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 521.546264][ T8389] BTRFS error (device loop3): open_ctree failed: -12 [ 521.612375][ T8398] netlink: 52 bytes leftover after parsing attributes in process `syz.2.833'. [ 521.712657][ T4401] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by udevd (4401) [ 521.792173][ T8436] Set syz0 is full, maxelem 0 reached [ 521.942465][ T8442] netlink: 52 bytes leftover after parsing attributes in process `syz.3.839'. [ 523.163726][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 525.083406][ T8459] loop3: detected capacity change from 0 to 1024 [ 525.164555][ T8459] EXT4-fs: inline encryption not supported [ 525.793902][ T8459] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.800556][ T8459] ext4: Unknown parameter 'fowner' [ 527.566689][ T8496] loop5: detected capacity change from 0 to 256 [ 527.592821][ T8496] FAT-fs (loop5): count of clusters too big (66845694) [ 527.599803][ T8496] FAT-fs (loop5): Can't find a valid FAT filesystem [ 528.370173][ T8495] loop5: detected capacity change from 0 to 32768 [ 528.392236][ T8495] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 528.400808][ T8495] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 528.433305][ T8495] syz.5.847: attempt to access beyond end of device [ 528.433305][ T8495] loop5: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 528.435027][ T8502] loop2: detected capacity change from 0 to 2048 [ 528.448192][ T8495] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 528.568068][ T8502] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 528.621197][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.850'. [ 528.661703][ T4444] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 530.267820][ T8527] loop2: detected capacity change from 0 to 256 [ 530.277540][ T8527] exfat: Unknown parameter '' [ 531.157505][ T8531] loop1: detected capacity change from 0 to 1024 [ 531.775144][ T8531] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.794639][ T26] audit: type=1800 audit(1764006556.875:64): pid=8531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.856" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 533.231882][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 533.469663][ T8556] sctp: [Deprecated]: syz.2.861 (pid 8556) Use of int in max_burst socket option deprecated. [ 533.469663][ T8556] Use struct sctp_assoc_value instead [ 533.604454][ T8556] loop2: detected capacity change from 0 to 8192 [ 533.719441][ T8556] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 533.733115][ T8556] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 533.742367][ T8556] REISERFS (device loop2): using ordered data mode [ 533.748867][ T8556] reiserfs: using flush barriers [ 533.760114][ T8556] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 533.776496][ T8556] REISERFS (device loop2): checking transaction log (loop2) [ 533.827775][ T8556] REISERFS (device loop2): Using r5 hash to sort names [ 533.836145][ T8556] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 539.817455][ T8619] loop2: detected capacity change from 0 to 1024 [ 540.479335][ T8634] loop1: detected capacity change from 0 to 1024 [ 543.881998][ T8619] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 543.921784][ T8634] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 546.671181][ T8654] loop4: detected capacity change from 0 to 16 [ 546.855664][ T8654] erofs: (device loop4): mounted with root inode @ nid 36. [ 546.902037][ T8654] erofs: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)' [ 551.439578][ T8699] loop3: detected capacity change from 0 to 1024 [ 551.494803][ T8701] loop5: detected capacity change from 0 to 1024 [ 551.538387][ T8701] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 551.564956][ T8699] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 551.613908][ T26] audit: type=1800 audit(1764006576.695:65): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.889" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 551.644336][ T8699] netlink: 52 bytes leftover after parsing attributes in process `syz.3.889'. [ 551.867401][ T8715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 552.133664][ T26] audit: type=1800 audit(1764006577.115:66): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.891" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 552.478580][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 552.541499][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.892'. [ 552.609957][ T6961] EXT4-fs (loop5): unmounting filesystem. [ 555.557926][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 556.282847][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 557.725136][ T8778] loop1: detected capacity change from 0 to 1024 [ 558.374144][ T8773] fuse: Invalid rootmode [ 558.532018][ T8778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 559.401704][ T8789] loop2: detected capacity change from 0 to 32768 [ 559.418906][ T8789] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 559.427261][ T8789] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 559.454019][ T8789] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 559.466318][ T4333] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 559.564244][ T4333] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 559.684529][ T26] audit: type=1800 audit(1764006584.765:67): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.906" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 561.131924][ T4333] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1567ms [ 561.162844][ T4333] gfs2: fsid=syz:syz.0: jid=0: Done [ 561.170098][ T8789] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 561.227698][ T8799] netlink: 52 bytes leftover after parsing attributes in process `syz.1.906'. [ 561.866012][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 563.033265][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138141][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.522789][ T8812] loop1: detected capacity change from 0 to 32768 [ 565.530273][ T8812] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.913 (8812) [ 565.575762][ T8812] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.586296][ T8812] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 565.595100][ T8812] BTRFS info (device loop1): using free space tree [ 566.042122][ T8836] loop5: detected capacity change from 0 to 4096 [ 567.035436][ T8812] BTRFS error (device loop1): open_ctree failed: -12 [ 567.217324][ T4444] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4444) [ 567.811510][ T8852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 567.822974][ T8852] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 572.481157][ T8433] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 573.966404][ T8433] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 574.007728][ T8433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.020417][ T8433] usb 5-1: Product: syz [ 574.028673][ T8433] usb 5-1: Manufacturer: syz [ 574.033918][ T8433] usb 5-1: SerialNumber: syz [ 574.040537][ T8433] usb 5-1: config 0 descriptor?? [ 574.323333][ T8433] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 576.834963][ T8433] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -110 [ 577.538523][ T8927] netlink: 'syz.1.938': attribute type 2 has an invalid length. [ 577.651571][ T8927] netlink: 10 bytes leftover after parsing attributes in process `syz.1.938'. [ 577.844586][ T4406] usb 5-1: USB disconnect, device number 6 [ 579.560966][ T8944] ALSA: mixer_oss: invalid OSS volume '' [ 580.912979][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 585.249370][ T8991] loop4: detected capacity change from 0 to 64 [ 587.052167][ T8989] Falling back ldisc for pty22. [ 587.661539][ T9013] sd 0:0:1:0: device reset [ 588.621013][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 589.309214][ T9009] loop1: detected capacity change from 0 to 2048 [ 589.732343][ T9009] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 589.772833][ T9009] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.154994][ T9009] random: crng reseeded on system resumption [ 590.403273][ T9038] fs-verity: sha512 using implementation "sha512-avx2" [ 591.401169][ T9043] 9pnet_fd: Insufficient options for proto=fd [ 591.891562][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 591.919324][ T9050] loop4: detected capacity change from 0 to 1024 [ 592.018975][ T9050] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 592.039718][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 592.071476][ T26] audit: type=1800 audit(1764006873.154:68): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.964" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 592.244035][ T9050] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3836: comm syz.4.964: Allocating blocks 449-513 which overlap fs metadata [ 592.569712][ T9065] loop1: detected capacity change from 0 to 64 [ 595.569638][ T9050] EXT4-fs (loop4): pa ffff8880741db620: logic 48, phys. 177, len 21 [ 595.577918][ T9050] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 4 [ 595.613567][ T4265] EXT4-fs (loop4): unmounting filesystem. [ 597.072231][ T9077] ------------[ cut here ]------------ [ 597.072459][ T9077] WARNING: CPU: 1 PID: 9077 at include/linux/fs.h:503 hugetlb_split+0x234/0x2a0 [ 597.072499][ T9077] Modules linked in: [ 597.072514][ T9077] CPU: 1 PID: 9077 Comm: syz.1.973 Not tainted syzkaller #0 [ 597.072532][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.072543][ T9077] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 597.072562][ T9077] Code: b5 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 b8 51 b5 ff 0f 0b e9 65 fe ff ff e8 ac 51 b5 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 [ 597.072608][ T9077] RSP: 0000:ffffc900041a7568 EFLAGS: 00010283 [ 597.072626][ T9077] RAX: ffffffff81cb84b4 RBX: 0000200000000000 RCX: 0000000000080000 [ 597.072641][ T9077] RDX: ffffc90011cb5000 RSI: 0000000000001ad5 RDI: 0000000000001ad6 [ 597.072654][ T9077] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f934c4e [ 597.072668][ T9077] R10: ffffed100f934c4e R11: 1ffff1100f934c4d R12: ffff888023e8f148 [ 597.072682][ T9077] R13: dffffc0000000000 R14: ffff888023e8f0d8 R15: ffff88807bfc10b8 [ 597.072705][ T9077] FS: 00007f39c4cba6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 597.072723][ T9077] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.072737][ T9077] CR2: 000000110c3fe6e1 CR3: 0000000073758000 CR4: 00000000003506e0 [ 597.072754][ T9077] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.072766][ T9077] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.072779][ T9077] Call Trace: [ 597.072785][ T9077] [ 597.072798][ T9077] __vma_adjust+0x46b/0x1c60 [ 597.072826][ T9077] ? lockdep_softirqs_off+0x420/0x420 [ 597.072848][ T9077] ? validate_mm+0x2b0/0x2b0 [ 597.072878][ T9077] ? hugetlb_vm_op_open+0x334/0x540 [ 597.072896][ T9077] __split_vma+0x3a7/0x500 [ 597.072919][ T9077] do_mas_align_munmap+0x351/0x1220 [ 597.072952][ T9077] ? do_mas_munmap+0x2b0/0x2b0 [ 597.072975][ T9077] ? mtree_range_walk+0x672/0x7b0 [ 597.073003][ T9077] ? mas_walk+0x15f/0x180 [ 597.073029][ T9077] ? mas_find+0x1e8/0x230 [ 597.073046][ T9077] do_mas_munmap+0x240/0x2b0 [ 597.073103][ T9077] mmap_region+0x6e5/0x1c70 [ 597.073135][ T9077] ? pud_huge+0x40/0x40 [ 597.073157][ T9077] ? file_mmap_ok+0x170/0x170 [ 597.073178][ T9077] ? validate_mm+0x22a/0x2b0 [ 597.073198][ T9077] ? cap_mmap_addr+0x165/0x2e0 [ 597.073225][ T9077] ? file_mmap_ok+0x11c/0x170 [ 597.073247][ T9077] do_mmap+0x958/0xfd0 [ 597.073277][ T9077] ? mlock_future_check+0x100/0x100 [ 597.073295][ T9077] ? ima_file_mmap+0x8e/0x150 [ 597.073317][ T9077] ? ima_file_free+0x3e0/0x3e0 [ 597.073337][ T9077] ? common_file_perm+0x171/0x1c0 [ 597.073367][ T9077] vm_mmap_pgoff+0x1b2/0x2b0 [ 597.073397][ T9077] ? account_locked_vm+0xe0/0xe0 [ 597.073417][ T9077] ? hugetlbfs_get_inode+0x432/0x510 [ 597.073444][ T9077] ? hugetlb_file_setup+0x415/0x610 [ 597.073466][ T9077] ksys_mmap_pgoff+0x54b/0x6f0 [ 597.073491][ T9077] do_syscall_64+0x4c/0xa0 [ 597.073510][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 597.073529][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 597.073549][ T9077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.073567][ T9077] RIP: 0033:0x7f39c3d8f749 [ 597.073593][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.073609][ T9077] RSP: 002b:00007f39c4cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 597.073630][ T9077] RAX: ffffffffffffffda RBX: 00007f39c3fe6180 RCX: 00007f39c3d8f749 [ 597.073645][ T9077] RDX: 000000000200000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 597.073657][ T9077] RBP: 00007f39c3e13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 597.073668][ T9077] R10: 0000000000059033 R11: 0000000000000246 R12: 0000000000000000 [ 597.073678][ T9077] R13: 00007f39c3fe6218 R14: 00007f39c3fe6180 R15: 00007ffc38af45b8 [ 597.073747][ T9077] [ 597.073761][ T9077] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 597.073771][ T9077] CPU: 1 PID: 9077 Comm: syz.1.973 Not tainted syzkaller #0 [ 597.073788][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 597.073798][ T9077] Call Trace: [ 597.073804][ T9077] [ 597.073810][ T9077] dump_stack_lvl+0x168/0x22e [ 597.073829][ T9077] ? memcpy+0x3c/0x60 [ 597.073852][ T9077] ? show_regs_print_info+0x12/0x12 [ 597.073871][ T9077] ? load_image+0x3b0/0x3b0 [ 597.073903][ T9077] panic+0x2c9/0x710 [ 597.073928][ T9077] ? bpf_jit_dump+0xd0/0xd0 [ 597.073961][ T9077] __warn+0x2f8/0x4f0 [ 597.073980][ T9077] ? hugetlb_split+0x234/0x2a0 [ 597.073998][ T9077] ? hugetlb_split+0x234/0x2a0 [ 597.074014][ T9077] report_bug+0x2ba/0x4f0 [ 597.074032][ T9077] ? hugetlb_split+0x234/0x2a0 [ 597.074056][ T9077] handle_bug+0x3a/0x70 [ 597.074073][ T9077] exc_invalid_op+0x16/0x40 [ 597.074092][ T9077] asm_exc_invalid_op+0x16/0x20 [ 597.074107][ T9077] RIP: 0010:hugetlb_split+0x234/0x2a0 [ 597.074123][ T9077] Code: b5 ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7d e8 b8 51 b5 ff 0f 0b e9 65 fe ff ff e8 ac 51 b5 ff <0f> 0b e9 2d ff ff ff 48 c7 c1 64 9f 1f 8e 80 e1 07 80 c1 03 38 c1 [ 597.074134][ T9077] RSP: 0000:ffffc900041a7568 EFLAGS: 00010283 [ 597.074149][ T9077] RAX: ffffffff81cb84b4 RBX: 0000200000000000 RCX: 0000000000080000 [ 597.074161][ T9077] RDX: ffffc90011cb5000 RSI: 0000000000001ad5 RDI: 0000000000001ad6 [ 597.074172][ T9077] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f934c4e [ 597.074184][ T9077] R10: ffffed100f934c4e R11: 1ffff1100f934c4d R12: ffff888023e8f148 [ 597.074196][ T9077] R13: dffffc0000000000 R14: ffff888023e8f0d8 R15: ffff88807bfc10b8 [ 597.074216][ T9077] ? hugetlb_split+0x234/0x2a0 [ 597.074238][ T9077] ? hugetlb_split+0x234/0x2a0 [ 597.074256][ T9077] __vma_adjust+0x46b/0x1c60 [ 597.074281][ T9077] ? lockdep_softirqs_off+0x420/0x420 [ 597.074302][ T9077] ? validate_mm+0x2b0/0x2b0 [ 597.074337][ T9077] ? hugetlb_vm_op_open+0x334/0x540 [ 597.074356][ T9077] __split_vma+0x3a7/0x500 [ 597.074380][ T9077] do_mas_align_munmap+0x351/0x1220 [ 597.074413][ T9077] ? do_mas_munmap+0x2b0/0x2b0 [ 597.074438][ T9077] ? mtree_range_walk+0x672/0x7b0 [ 597.074465][ T9077] ? mas_walk+0x15f/0x180 [ 597.074489][ T9077] ? mas_find+0x1e8/0x230 [ 597.074507][ T9077] do_mas_munmap+0x240/0x2b0 [ 597.074532][ T9077] mmap_region+0x6e5/0x1c70 [ 597.074561][ T9077] ? pud_huge+0x40/0x40 [ 597.074580][ T9077] ? file_mmap_ok+0x170/0x170 [ 597.074599][ T9077] ? validate_mm+0x22a/0x2b0 [ 597.074619][ T9077] ? cap_mmap_addr+0x165/0x2e0 [ 597.074644][ T9077] ? file_mmap_ok+0x11c/0x170 [ 597.074664][ T9077] do_mmap+0x958/0xfd0 [ 597.074702][ T9077] ? mlock_future_check+0x100/0x100 [ 597.074720][ T9077] ? ima_file_mmap+0x8e/0x150 [ 597.074742][ T9077] ? ima_file_free+0x3e0/0x3e0 [ 597.074763][ T9077] ? common_file_perm+0x171/0x1c0 [ 597.074791][ T9077] vm_mmap_pgoff+0x1b2/0x2b0 [ 597.074818][ T9077] ? account_locked_vm+0xe0/0xe0 [ 597.074838][ T9077] ? hugetlbfs_get_inode+0x432/0x510 [ 597.074861][ T9077] ? hugetlb_file_setup+0x415/0x610 [ 597.074881][ T9077] ksys_mmap_pgoff+0x54b/0x6f0 [ 597.074902][ T9077] do_syscall_64+0x4c/0xa0 [ 597.074918][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 597.074934][ T9077] ? clear_bhb_loop+0x60/0xb0 [ 597.074952][ T9077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 597.074965][ T9077] RIP: 0033:0x7f39c3d8f749 [ 597.074976][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.074986][ T9077] RSP: 002b:00007f39c4cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 597.074999][ T9077] RAX: ffffffffffffffda RBX: 00007f39c3fe6180 RCX: 00007f39c3d8f749 [ 597.075009][ T9077] RDX: 000000000200000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 597.075018][ T9077] RBP: 00007f39c3e13f91 R08: ffffffffffffffff R09: 0000000000000000 [ 597.075027][ T9077] R10: 0000000000059033 R11: 0000000000000246 R12: 0000000000000000 [ 597.075035][ T9077] R13: 00007f39c3fe6218 R14: 00007f39c3fe6180 R15: 00007ffc38af45b8 [ 597.075054][ T9077] [ 597.075295][ T9077] Kernel Offset: disabled [ 597.848427][ T9077] Rebooting in 86400 seconds..