last executing test programs: 10.643878244s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000001c0)=0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r5, r6, 0x15, 0x0, @void}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r7, &(0x7f0000005400)=[{&(0x7f0000005440)="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", 0x166}], 0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000001c80)) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r10 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r10, 0x1, 0x27, &(0x7f0000001c00)=""/4095, &(0x7f0000001bc0)=0x991) 10.49433621s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) (async) write$ppp(r2, &(0x7f0000000140)="150e", 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x800, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6f, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.373328938s ago: executing program 0 (id=11): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x84) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000003940)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0xff, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001280)=[@dstopts={{0x18, 0x29, 0x37, {0x2c}}}, @dstopts={{0x18, 0x29, 0x37, {0x16}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x26}}], 0x48}}], 0x1, 0x11) 9.987684804s ago: executing program 0 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143040, 0x58) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) pwrite64(r2, &(0x7f0000000180)="59d4e6de70b2e912e892620642322defb696936f1b", 0x15, 0x3) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000800), 0x340100, 0x0) ioctl$EXT4_IOC_SETFSUUID(r2, 0x4008662c, &(0x7f00000001c0)={0x0, 0x0, "0ffce7d1bf0778b9c7ca93418f0b683f"}) signalfd4(r4, &(0x7f0000000000)={[0x2]}, 0x8, 0x80000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x13, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x0, 0x2, 0x2, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 9.943151648s ago: executing program 0 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setresuid(0x0, r2, 0x0) setresuid(r2, 0xee00, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, &(0x7f0000000080)) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200440d4}, 0x40400d4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) socket(0x1, 0x5, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x5) (async) setresuid(0x0, r2, 0x0) (async) setresuid(r2, 0xee00, 0x0) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, &(0x7f0000000080)) (async) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x200440d4}, 0x40400d4) (async) 7.250391077s ago: executing program 4 (id=48): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2382, @loopback}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000480)={[{@debug}, {@dioread_nolock}, {@inlinecrypt}, {@noblock_validity}, {@grpjquota}, {@lazytime}, {@delalloc}, {@nombcache}]}, 0x1, 0xbe0, &(0x7f0000000bc0)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x40) fallocate(r2, 0x1, 0xffb, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x143041, 0x100) setrlimit(0xe, &(0x7f0000000180)={0x0, 0xfffffffffffffffb}) (async) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x400e7b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) (async) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x7, r6, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r8, 0x0) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xa, [{0x9, 0x4}, {0x0, 0x1}, {0x8, 0x4}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x8}, 0x28) (async) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1c0000003400090002000000ffdbdf250200"], 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) 6.987788357s ago: executing program 4 (id=51): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000679dfa1ac600001000010400"/25, @ANYRES32=r1, @ANYBLOB="0305000000000000300012800c0001006d6163766c616e00200002800a000400aaaaaaaaaaaa000008000300000000000800010010000000"], 0x50}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000b00)=[0xee00]) setregid(0x0, r4) statx(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, &(0x7f0000000140)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000f8ff00001c0012800c0001006d6163766c616e000c0002800800010004000000140035006d806376300000000000000000"], 0x50}}, 0x8000) 6.965299828s ago: executing program 4 (id=53): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x23}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xc, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2809da8e", 0x4}], 0x1) socket$inet6(0xa, 0x2, 0x0) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x23}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0xc, 0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6tnl0\x00', 0x10) (async) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2809da8e", 0x4}], 0x1) (async) 6.852523332s ago: executing program 4 (id=57): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@stripe={'stripe', 0x3d, 0x3}}, {}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x482, &(0x7f0000000e40)="$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") r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x343000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x106}}, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f0000000e00)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 6.68826581s ago: executing program 4 (id=60): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x2808454, &(0x7f0000000000)={[{@shortname_lower}, {@rodir}, {@uni_xlateno}, {@uni_xlate}, {@shortname_winnt}]}, 0x1, 0x24c, &(0x7f00000002c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x4, 0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r2 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000c80)={'tunl0\x00', &(0x7f0000000c00)={'gretap0\x00', 0x0, 0x8000, 0x7800, 0x5, 0x8, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @remote}}}}) truncate(&(0x7f0000000000)='./file1\x00', 0x3) 5.841182177s ago: executing program 4 (id=77): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@updpolicy={0xfc, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x8, 0xfffffffffffffff8}, {0x0, 0x8}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in6=@local, 0x34ff, 0x1, 0x0, 0x0, 0xa, 0xa08, 0x10}]}]}, 0xfc}}, 0x4000) r1 = epoll_create1(0x0) r2 = fanotify_init(0xf00, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001200)={0x90000009}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x10000) sendfile(r3, r6, 0x0, 0x7ffff004) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000000)=0x2) 5.777304902s ago: executing program 32 (id=77): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@updpolicy={0xfc, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x8, 0xfffffffffffffff8}, {0x0, 0x8}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d6, 0xff}, 0xa, @in6=@local, 0x34ff, 0x1, 0x0, 0x0, 0xa, 0xa08, 0x10}]}]}, 0xfc}}, 0x4000) r1 = epoll_create1(0x0) r2 = fanotify_init(0xf00, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001200)={0x90000009}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x6, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_macvtap\x00', 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x10000) sendfile(r3, r6, 0x0, 0x7ffff004) ioctl$PPPIOCATTACH(r6, 0x4004743d, &(0x7f0000000000)=0x2) 1.414228269s ago: executing program 2 (id=113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18002000068a00800000000004000000cb2004000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) 1.328251046s ago: executing program 2 (id=114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000680)="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"/636, 0x27c, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000040)=""/3, 0x3, 0x0, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x1000, 0x9d54be0b43b51e7d, 0x2}) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x11000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x15) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002900), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000200)=@ethtool_eee={0x24, 0x101, 0x6d, 0x8001, 0x6, 0x5, 0x37f0, 0xffffffff, [0x8, 0x33]}}) socket$inet_udp(0x2, 0x2, 0x0) 1.20345504s ago: executing program 1 (id=115): r0 = fanotify_init(0x200, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000270001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) (async) recvmmsg(r2, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x2bb5}, {{0x0, 0x0, 0x0}, 0x4f56}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/166, 0xa6}], 0x3}}, {{0x0, 0x0, 0x0}, 0x5}], 0x4, 0x40002000, 0x0) connect$inet6(r1, &(0x7f0000000080)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108f004000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f00000031c0), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000001280), 0x556, 0x402400) r4 = syz_open_procfs(0x0, &(0x7f0000001240)='net/ip_tables_matches\x00') read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) (async) flistxattr(r4, &(0x7f0000001140)=""/122, 0x7a) (async) preadv(r4, &(0x7f0000001440)=[{&(0x7f0000001080)=""/180, 0xb4}], 0x1, 0x8, 0xfffffffe) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000011c0), &(0x7f0000001200)=0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4048004) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async) gettid() (async) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r9, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) 757.387437ms ago: executing program 1 (id=119): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x1, 0x28e, &(0x7f0000001500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fb340100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xbe9b75eceb0d266a) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x113400) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000001140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r4, 0xc00464c9, &(0x7f0000000140)) 688.772892ms ago: executing program 3 (id=121): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x60) personality(0x400000) (async) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='lC'], 0x9, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240), 0x7400) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) personality(0x6) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) 584.202359ms ago: executing program 1 (id=123): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="bf", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffa}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x10000003, 0x2}, 0x10) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) syz_open_dev$loop(&(0x7f0000000300), 0x9169, 0x0) (async) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x3e31) (async) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) accept4(r1, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000280)={0x1, 0x200, 0xf, 0x200, 0x1, 0x9ad}) 574.561372ms ago: executing program 3 (id=124): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18004000068a00800000000004000000cb2004000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) 550.431329ms ago: executing program 5 (id=125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000160001002cbd7000fbdbdf25020100c8", @ANYRES32=r2, @ANYBLOB="080001000000000000000000050000000100000006000000020000000800e7ffdf000002ceba67cf077dea1208b88c18a8cd7f73594a1f5a97000800"], 0x4c}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 480.270796ms ago: executing program 1 (id=126): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0x10, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x28, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket(0x10, 0x3, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 479.124804ms ago: executing program 3 (id=127): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60242, 0x1) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) (async) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000100)=0x2) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}}) 478.832714ms ago: executing program 5 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0x2b, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x24, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) mount$overlay(0x0, &(0x7f0000000400)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@uuid_off}]}) chdir(&(0x7f0000000200)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000080)) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x1) 446.076762ms ago: executing program 5 (id=129): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2f, 0x25dfd3f6, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7fff}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x34}}, 0x8000080) (async) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) (async) msync(&(0x7f00003e5000/0x4000)=nil, 0x4000, 0x5) 428.450934ms ago: executing program 2 (id=130): madvise(&(0x7f000056a000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x2b, 0x0, 0xfffffffffffffffe}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x20400049, &(0x7f0000000f00), 0x84, 0x4b6, &(0x7f0000000a40)="$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") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$getenv(0x4201, r2, 0x8000010003, 0xffffffffffffffff) 427.774626ms ago: executing program 3 (id=131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) (fail_nth: 16) 327.971471ms ago: executing program 3 (id=132): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pim6reg1\x00', 0x8323}) (async) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000003100)=@filter={'filter\x00', 0xe, 0x3, 0x782, [0x0, 0x2000000007c0, 0x20000000088e, 0x200000000f42], 0x0, 0x0, &(0x7f00000007c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x64, 0x1c, 'netdevsim0\x00', 'veth1\x00', '\x00', 'bond0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x11, 0x1b, 0x10, 'ip6gretap0\x00', 'vcan0\x00', 'veth1_to_team\x00', 'veth0_virt_wifi\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x2a6, 0x2de, 0x326, [@bpf0={{'bpf\x00', 0x0, 0x210}, {{0x29, [{0x7f, 0x5, 0xd, 0x7bf159c7}, {0x2, 0x6, 0x3, 0x8}, {0x7, 0x2, 0x5, 0xe3}, {0x6, 0x7, 0x4, 0x7}, {0x0, 0x2, 0x2, 0x80000001}, {0x6, 0xe9, 0x5, 0x1}, {0x94, 0x5e, 0x1, 0x1}, {0x3, 0x7, 0x0, 0xd}, {0x8, 0x8, 0x6}, {0x0, 0x4, 0x9, 0xfffffffb}, {0x3, 0x10, 0x8, 0x8000010}, {0x5, 0x93, 0xff, 0x8001}, {0xb0, 0x5, 0x2d, 0x3}, {0x5, 0xd, 0x24, 0x9}, {0x0, 0x3, 0xf4, 0x1}, {0x0, 0xd, 0x6, 0x8}, {0x1, 0x80, 0x8, 0x3}, {0xd, 0x5, 0xb, 0x4}, {0x1, 0x5b, 0x8, 0x7fff}, {0x1, 0x6, 0x8, 0x7003da66}, {0x0, 0x6, 0x9, 0x5}, {0x1, 0x6, 0x7f, 0x5}, {0x2ada, 0xb, 0x2}, {0x1, 0x8, 0x9, 0x4}, {0x285, 0x9, 0x78, 0x7fffffff}, {0x4, 0x70, 0x7, 0x8}, {0x0, 0x5, 0x9, 0xfffffff4}, {0x3, 0x9, 0x3, 0xc}, {0x6, 0x4, 0x3, 0x6}, {0x30c, 0x1, 0x3, 0x3}, {0xfffc, 0x81, 0x3, 0x3}, {0x0, 0x0, 0xf, 0x80000001}, {0x7, 0x7, 0x4, 0x8}, {0x200, 0x2, 0x8, 0x5}, {0x1, 0xa9, 0x3, 0x8}, {0x4, 0x2, 0x7}, {0x9, 0x6, 0x37, 0x5}, {0xffff, 0x3, 0x3, 0x8}, {0x4, 0x8, 0x2, 0x80000001}, {0xa, 0xdf, 0x7, 0x4}, {0x5, 0xe, 0xff, 0x96b}, {0x1, 0x69, 0x9, 0x63a}, {0x5, 0xb5, 0x14, 0xffff}, {0x9, 0x5, 0x0, 0xffff0000}, {0xffd, 0x88, 0x0, 0x7}, {0x101, 0x1, 0x5, 0xfffffffd}, {0x1000, 0xf4, 0x1, 0x9}, {0x8, 0x3, 0x2, 0xffffffff}, {0x5, 0x9, 0x6, 0x6}, {0x0, 0x40, 0xff, 0x7}, {0x5, 0x5, 0x2, 0x4}, {0x7ff, 0x81, 0x2, 0x322c}, {0x0, 0x1, 0x8, 0x6}, {0x5, 0x2, 0xf2, 0x4}, {0x7, 0x9, 0x9, 0x28a}, {0x7, 0x83, 0x7, 0x81}, {0x6998, 0x59, 0x5, 0x80000001}, {0x2, 0x7f, 0x1, 0x101}, {0x6a7, 0x89, 0x2}, {0x2, 0xf, 0xcd, 0x50a0ce2a}, {0x2, 0x7, 0x0, 0x7}, {0x396c, 0x2, 0x5, 0xff}, {0x7, 0xa8, 0x3, 0x7}, {0x2, 0x0, 0x1, 0x3}], {0x101}}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"8409b7bf7019a5acf61db6fca0dd965f981817c89091f699fbbb0db2f4a6"}}}, {0x5, 0x0, 0x6001, 'dummy0\x00', 'pimreg\x00', 'vcan0\x00', 'ip6gretap0\x00', @link_local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x2f6, 0x2f6, 0x32e, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'H.245\x00'}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x3b, [{0x0, 0xc, 0x2, 0xc}, {0x9, 0x3, 0xa, 0x4}, {0x3ff, 0xc, 0x0, 0x64}, {0x1, 0x9, 0x0, 0x30}, {0xfffb, 0x1, 0x7f, 0x6}, {0xf5, 0x6, 0x8}, {0x8000, 0x16, 0x4, 0xa}, {0x2, 0xb, 0x4, 0xa}, {0xffff, 0x5, 0x5, 0x1ff}, {0x9, 0x9, 0x1, 0x4}, {0x6, 0x46, 0xf, 0x66c9}, {0x0, 0xd0, 0x4, 0x9}, {0x5, 0x7, 0x7, 0x8}, {0x2, 0x5, 0xb5, 0x2}, {0x8e7, 0xc, 0x9, 0xc1}, {0x81, 0x2b, 0x9, 0x3}, {0x9, 0x5, 0x8, 0x401}, {0x4, 0xb, 0xa, 0xebb7}, {0x9, 0x9, 0xc, 0x7}, {0x800, 0x9, 0x3, 0x1ff}, {0x5, 0xc, 0x4, 0x2}, {0x6, 0xc, 0x7c}, {0x6, 0xd, 0xd9, 0xd35}, {0x2, 0x7, 0xec, 0x5}, {0xe, 0x8, 0x1f, 0xd}, {0x8003, 0x10, 0x8, 0x800}, {0x6, 0x9, 0x8, 0x2}, {0x7, 0x2, 0x0, 0x5}, {0xfff1, 0x7, 0x6, 0x8}, {0x6, 0xaa, 0xf8, 0x7}, {0x9, 0x5, 0x12, 0x4}, {0x7, 0x4, 0x3, 0x57d9}, {0x7, 0x5, 0x25, 0x2}, {0xe, 0x56, 0x8, 0x7fff}, {0x7c, 0x6, 0x3, 0x4}, {0x3b3, 0xb5, 0xfd, 0x81}, {0x0, 0x26, 0x0, 0x8}, {0x9b, 0xf2, 0xa, 0x7f}, {0x40, 0x2, 0x5}, {0xb, 0x7f, 0x98, 0x3}, {0x73cd, 0x60, 0x1, 0x80000000}, {0xbb, 0x3, 0x68, 0x8}, {0x91, 0x9, 0x3, 0x1}, {0x46, 0x85, 0x7, 0x246}, {0x5, 0x8, 0xf9, 0x3}, {0x8, 0x6, 0x8, 0xfffffff9}, {0xc, 0xd, 0x2, 0x7fffffff}, {0xfff7, 0x7f, 0x40, 0x3852}, {0x8001, 0x5, 0xd3}, {0xcde6, 0x9, 0xb, 0x10000}, {0x50e, 0x1, 0xfd, 0x6}, {0x0, 0xb, 0x0, 0x5}, {0x2, 0x6, 0x0, 0x5}, {0xff93, 0x10, 0x8, 0x401}, {0x1ff, 0x4, 0x0, 0x1}, {0x5, 0x8, 0xfd, 0x3e1}, {0x2, 0x2, 0x1, 0x2}, {0x8000, 0x4, 0x9, 0x1000}, {0x4, 0x3, 0x0, 0x7}, {0x7, 0x7f, 0x2, 0x5}, {0xb, 0x4b, 0x9, 0xf}, {0x3, 0x4, 0x7, 0x9}, {0x0, 0x9, 0x8, 0x1}, {0xae7, 0x9, 0x0, 0x1000000}], {0x2}}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x7fa) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x3b) (async) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r6 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x163440, 0x10) close(r7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r8, &(0x7f0000000100)=""/9, 0xfffffd87) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000e00)={0x0, 0x1c, &(0x7f0000000d00)=[@in6={0xa, 0x4e22, 0x55ed, @remote, 0x3}]}, 0x0) (async) write$tun(r8, &(0x7f00000000c0)=ANY=[], 0xffe) (async) fcntl$getownex(r3, 0x10, &(0x7f0000000080)) 327.698976ms ago: executing program 1 (id=133): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2f00020b, 0xe, 0xfffffffffffffe46, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x4, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000300)='E^', 0x2, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4f000, 0x100000001}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0xa, 0x6, 0xa, 0x8, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x1, 0x1, 0x6, 0xc69a46d52d0a2a04, 0x100, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x4, 0x0, 0x6, 0x7, 0xfd88ac81dba12221, 0x68, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @jmp={0x5, 0x0, 0xb, 0x3, 0x1, 0xfffffffffffffff8, 0xfffffffffffffffc}], &(0x7f00000003c0)='syzkaller\x00', 0x200, 0xbb, &(0x7f0000000400)=""/187, 0x41100, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x6, 0x0, 0xfffffe01}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[r0, r0, r0, r4, r0, r0], &(0x7f0000000600)=[{0x3, 0x4, 0xd, 0xa}, {0x3, 0x4, 0x7, 0xc}]}, 0x94) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r6 = openat(r5, &(0x7f0000000680)='mnt\x00', 0xa40, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000540)=@v1={0x0, @aes256, 0x2, @desc3}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r0, @ANYBLOB="000000efffffffffffffff0000000006850000001300"/32], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x1, 0x1}, 0x6) 206.598322ms ago: executing program 5 (id=134): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x94) sendto$inet(r1, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) (async) setrlimit(0x40000000000008, &(0x7f0000000000)) (async) sendto$inet(r1, &(0x7f0000000240)='+', 0x1, 0x40088c0, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) prlimit64(0x0, 0x1, &(0x7f0000005080)={0x8, 0x65}, 0x0) (async) keyctl$read(0x2, r4, &(0x7f00000000c0)=""/4096, 0x1000) add_key(&(0x7f00000010c0)='big_key\x00', &(0x7f0000001100)={'syz', 0x2}, &(0x7f0000001140)="9e67c402d97c84b1dd44cda7833a34cdf6cc743e6fb3896bcdde5dd38cd0ef0a9ef49f85c55be47f425ddef84063b94dbc62faf11e857b2440ef467a120d64c1846609943437f9168610d7e7af0808a1ceb54c5775897dcde9f7eb431805f1deb40430842b495ca6f450a36e55af1d763e892d026399431a755ee43149d5b2e1e62e8500970377911cfe14e86cabe4c75ce6f2de5a7a064cb2a5887c5682bde1ea114e2afe322f7bf8d0427168c2fa96708a5ec574af2d518fe37679a38e5c733c986e84cb339cf9a85ba5d8d9", 0xcd, r4) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) 184.999313ms ago: executing program 2 (id=135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/functions/rndis.usb0/dev_addr\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)="30303aff00000000", 0x8) 76.05132ms ago: executing program 3 (id=136): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r3, &(0x7f0000000100), 0x0}, 0x20) (async) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000003c0), 0xffdb, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="342128bd7000fcdbdf250beeffff07002b000400000005002a0000000000080039000400000008003b00ffffffff08003b00020000000500300001006ccee9000008000300", @ANYRES32=0x0, @ANYBLOB="0500300001000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4040808) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, 0x0, &(0x7f00000000c0)) (async) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) (async) io_submit(r8, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r6, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/enable\x00', 0x2, 0x0) write(r9, &(0x7f0000000180)="329f3d0141", 0x5) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x17, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000091000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="00a4fd5691b39000000000000000b702000014000000b7030000000000018500000083000000bf09000000000000550901000000000095000000000000008520000004000000bf91000000e56298dfae9984302eb93ac4dd00b702e6ff020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xff7, &(0x7f0000001cc0)=""/4087, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) 75.744916ms ago: executing program 2 (id=137): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000d00)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000e00)={0x60, 0x1, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xc, &(0x7f0000000d40)=[{0x100000001, 0x2, 0x101}], 0x1, 0x8000000000000001, 0x1d, 0x8, 0x11, 0x68}) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) (async, rerun: 64) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)=0x59) 73.161393ms ago: executing program 5 (id=138): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180fd800068a00800000000004000000cb2004000001000095"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) 55.613728ms ago: executing program 1 (id=139): r0 = msgget$private(0x0, 0x1c) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/225) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000100)=""/187) msgsnd(r0, &(0x7f00000001c0)={0x3, "39117c890ad905"}, 0xf, 0x0) msgsnd(r0, &(0x7f0000000200)={0x2, "9f52032129665bab1a1e49e2ea94efe6a08961dff8b1190a84843c12f5c21a0ccdf8f210ae5f0bde02d2b2b12a77f73495f87ac732ef8f3037749bac18695cec37a3b1e6e18f282b8273249726d9f0d072cb3ae452b1bd7481605664ac8e6180d6251fb67ede31a3cde0537f1c085b92a5a0fc13998aabcdb8ca1e1d73ddceaa07e885d453b5fa9b1e03cc99c73b49f7ffc133518193ed138710c89c471169a124617c9d7d557bbb8520cb3fe40e81975e27feb88891cf"}, 0xbf, 0x0) r1 = msgget$private(0x0, 0x14c) msgrcv(r1, &(0x7f00000002c0)={0x0, ""/19}, 0x1b, 0x0, 0x3000) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000300)=""/4096) r2 = syz_open_dev$dri(&(0x7f0000001300), 0x65a, 0x4000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) msgrcv(r1, &(0x7f0000001340)={0x0, ""/15}, 0x17, 0x0, 0x0) msgget$private(0x0, 0x100) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000001380)={0x2, "581ee8920ac61ff7e7ab737244a560027918f8e599e9d62ee4ae776afcdc1d5c3ed0b2fea344415e261d64c4e14345957e1e7f315f0698b67085b64c7512419d58fb958197d0e0872f1a88d7a5299f80e9"}, 0x59, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001500), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f0000001580)={0xa, 0x0, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) name_to_handle_at(r5, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)=@reiserfs_6={0x18, 0x6, {0xffffffb4, 0x3, 0x2297, 0x100, 0x1, 0xeb07}}, &(0x7f0000001640), 0x500) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000001680)=""/226) io_uring_enter(r5, 0x6902, 0xfcef, 0x8, &(0x7f0000001780)={[0x1]}, 0x8) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000017c0)=""/205) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000018c0)={0x2, [0x3800, 0xb0]}, 0x8) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x12) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000001940)=0x0) fcntl$getownex(r4, 0x10, &(0x7f0000002540)={0x0, 0x0}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) sendmsg$netlink(r8, &(0x7f0000008b80)={&(0x7f0000001900)=@kern={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000024c0)=[{&(0x7f0000001980)={0x358, 0x24, 0x800, 0x70bd25, 0x25dfdbfc, "", [@generic="3a6211db1a1ddf202e11f720307f6d6de55727d0518d249bcb9923beae10f266229c473d7ca9b2c78cc8692964c71ca7d745e526506f37b3802e8f64", @nested={0x15d, 0x130, 0x0, 0x1, [@nested={0x4, 0x5b}, @generic="ba2dbfeb1c6361c7aa1ae4a827f1e92b354ce973cd014f74f39d742cd82828220fb16b16e80d6928c46aff6374f91ff448f2730c1dcd00d74303c8e284e02ce592cc9aee56a19ffc8f8840fffe003af30c8189ca24028ada3dfdb26a929070cfd4be0cf556920eaed98dc7b09d5f4163e185284dc87bbbf3", @generic="4b917b188fd5f9b626e01d18181f89f1e357ba80fed6", @generic="1c2bdad3cae4c10b136407831f5139390cb3d67fbd27e1edfb9b88504728a48ab21abb4632d945450ebb6cc21873d08d64d67a860a62cdd7690367eff8b1d9bc3f23a33e4c5d2ef938ebb6c60c728d92c184fe273f647ddffe6fda3997fe92e43c4caf32c8f39d75e6483e60ef0127312dfee9e008ff21ddab57e5307a33fbd2b920039cfaced6ff5de95b111fec7957396a91ecffc74d4cb089fdf8fe5a526534afd50228031f", @typed={0x8, 0xfe, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x4, 0x50}, @typed={0x14, 0x157, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, @generic="b1b5bae371075c66c4800c153619a490680c573a272e0a60bb82700af4af93d430012f23ded0555f1f1b41c785fc89eba7a3417c41cef4023d7b247e600f466f841338", @typed={0x5, 0x44, 0x0, 0x0, @str='\x00'}, @generic="bc921d3838e790252dafd07e176500bc3e7826959c9fc55d13afb9b7219124cf4727fddf599b1a222131d161d0c9fe436509acee8f6669ab71c180fa9349dba13b43e390e4d9b048591a7a0ce0485f3ff60a1187", @nested={0xb2, 0xcc, 0x0, 0x1, [@typed={0xc, 0x52, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xba}, @typed={0x8, 0x78, 0x0, 0x0, @uid=r9}, @nested={0x4, 0xdc}, @nested={0x4, 0x162}, @generic="6ecea5cff47c0edb67af8be9c593599ac2240c35725cc9397a2b0a7e0b179d86d958116a31d2423f639def867b2dc287a3cf1f6d59965f1d1b7cbb927d12b6cba6cc577fcca66ccf0c944d34cd5365daa546884caf2cded1830db890ec148a4b89f0485f0c3483ca63a9b403a887a5f78318d45d021878f45946", @typed={0x14, 0x152, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, @nested={0x2d, 0x11b, 0x0, 0x1, [@generic="84466397e86d1c28d6f2951d0b718d4b99451edac6006cdf5fd6922af277675ac498ba4191", @nested={0x4, 0x25}]}, @generic="131fcea6e264ff2f0523dc52cf529595072d81ae92bd4beb49052072f4e965677d69cae3551b9fdaf1"]}, 0x358}, {&(0x7f0000001d00)={0x134, 0x31, 0x300, 0x70bd29, 0x25dfdbff, "", [@generic="97263439915090e22a797a489d4d576a55bb7920c964753d456e033429ad97e6bb555819894019602090d5f12b7f35fd82225f61cfe6f338e5a875777f081fbe164ee4b374adebe6ba", @generic="5520e286b01e52bfc7b6f4d4575848d7d989d51b62e929bd2133babcdf42e5d5c0", @generic="fecd971448390feb5f30ecb0061dd3b7eff7285064b1a7e0b158e8f66d33ba9b1f2906a555106718c3ccdbf0a5b199015d52ed95097e2534a5daac2f89ece96701698e7079141e1b4909929fdbe45aa32aebd501ae340f8ed6c1af00b7252e708dd97898115b5eda17656656e569d133df707805d659a6599a555bf9289144a62fa91d2b50b23eac728e4157c51b3e0fb9bb0c6c7a37eeb4d28af0f8d61ddff088d10a6de5065e1b3c2e72bb0e88c9dddfbe647eca8d1e1fb4e2"]}, 0x134}, {&(0x7f0000001e40)={0x36c, 0x1b, 0x800, 0x70bd27, 0x25dfdbfd, "", [@generic="cf6e09d11acb43ca4cc0407dae2817f1383274bedbfa3a971b502402071a91c4ddd4759a612ca43acf43c01d3f4f367771c0f78c8cc46d117d9a3d811845a33994fe4015e1c31a403ca7552f3535b5984144fd80b9bcaae37f353a291f7410ccc67563959d34b2d5bb55050efdd86c908ff2278ec6a9e80a13744c5be71440c18a8c9c3ab8602f664d1c63dd3936018a8fabd585fd89c559faf6a16e04f07be589f3b1ef2b88abfadfdc5865adecd04c11bdb6bec04b8638c0c9962f49da176db0995cb2", @nested={0x28f, 0x13, 0x0, 0x1, [@generic="adcc4ba570758690fe8b1b77c4a9078633932d03712f445c272e6220a8bdf9a6b2687d22de77a02d0e6c921f22d16f5d80cc34d18aeebe48e859a62d0fb2494e1385035f63636aff8552910d9052906b80cfc115464ff6113c1a8977456000c712fd233247e8f992e9cc0036a06fc74c62eb77c189469071de692374512b4caf0c7e49359fda6924ef1c021a1cf0dcf5629a1d623f6dc8353efdf11df4cb69159e4eec6ab8969cff797639c8b9b7af7664b2453081a8b5a128bd866bd37371ae3a93ba0e7050268e9d8015851ae75a728518083f99a8ee60", @typed={0x9d, 0x87, 0x0, 0x0, @binary="63892ce5fee775e6d68ae192aaf84046a3a8274cefc63042ab4e642321ff4f75400dc90c0c0ece880f22eb72af93d864f17a16fd4efe290fe67a52db0f6ddc19fcff37509fbd62fe880979431355a0dbf9c1c90e20bd585f1fd0cc9460b0b446e772e044a9cbb5639094e1e23c3a47eaa3e250ec34756c6a58ef29cd8002278f578bf3250e5a9006a7a797f9426e9ee1f1b3005467ef0856ad"}, @typed={0x8, 0x149, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @nested={0x4, 0xc8}, @nested={0x4, 0x167}, @nested={0x4, 0x7a}, @nested={0x4, 0x3a}]}, @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@remote}]}, 0x36c}, {&(0x7f00000021c0)={0x2a0, 0x2d, 0x400, 0x70bd26, 0x25dfdbff, "", [@generic="7ce9e7e7d33a16a88c398d681132b2b366218de760f24ffe190c1179f02ed8011aca254b9c66a7e8865065ff8ef446d388229af7fd3201d4e84156989ef162bff7aa8631dd2e7ee88772719dfc232ed09991526d2f8b3dfade9d8255706aaa18a562ec528d0684be9616af07c39137c8ff2cffd60d1d0a3995704d7536d5a028df0cb5ebab9f3158934ef80da611a6d5a642e70334f8a99e2fcd9254ca195bf5e43411fba09478e640d0d1ddccde4a5edbd57a6b42640e1282926cccd960fd4f2ae590895d055f9bacf9e49f8de8ad58d615d5e6a4", @generic="a03936b72ae175ee79cbdb8b4f42af1d1e9c2d616c4c69f88ea6599bbfc6c27ea3b3ee4a77f4ead45252ce74353df21676f1864dfd7e7dbc3beab41219e0632512aeafa506e8bacb0ea7259995189b8d8952bc2b88e395b7c1b181ae4acd8f1757778e709d211a96b232f866070a3a71c338b6d4c24f7e30a3c460d16b90571d588d443586794b536c63fd78541906fb1fedd41991720bfe0528469b49002822dd6524fb97f5f29cdc8b56be6634cbb8d51f9eedb1672fc9998bcffc0f21a28cc1f1b1734c", @typed={0x15, 0x122, 0x0, 0x0, @binary="16fffc49d70aabdf86d565e949f39f6c16"}, @generic="7e74537caa091fe9fe3660f37281f5f2a6bd0c22c049a23f89f7f66366df595ff7f280d57cb25af5cc00726263ab776bf22bf1e0e3a4f439a0fd8b0ccfdf54281c294921930e03fdac0a9efa696cd546cef29795a20156322e83c6e1e7283932640f8f", @generic="043ee56b0d99d17ffff25f6e05", @nested={0x69, 0x6a, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd=r6}, @typed={0x4, 0x33}, @nested={0x4, 0x150}, @generic="2db174f94a5d6aa3171f073166c4486a7326c92b74e301f0e9af724365b2f0dec87abe768354f16708b4fa2cb83cde1426277320bcac2a8d09", @nested={0x4, 0x145}, @nested={0x4}, @typed={0x8, 0x156, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x11f}, @typed={0x8, 0x23, 0x0, 0x0, @pid}]}]}, 0x2a0}, {&(0x7f0000002480)={0x14, 0x3c, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x9}]}, 0x14}], 0x5, &(0x7f0000008a80)=[@cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r4, r7, r7, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r5, r2, r5]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0xf8, 0x8000}, 0x20000010) 45.565594ms ago: executing program 5 (id=140): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file7\x00', 0x944800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x1213, &(0x7f0000000600)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file7/file0\x00', 0x840000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="01000000001d"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 0s ago: executing program 2 (id=141): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x20, 0x23, 0xac, {0xac, 0x2, "8c7623c5b25a7854c54c79dd7a3b6bf12a306fa6d6c73dea4dee11b83a3fba1e5f6d94d94943481da37d7f2b49162c0279cd69a9b396f8d8c55de0672ed7861979e11a82499466f9332fb4e1bb569c830c2cc0893c81307a40938b1eac9d3962236aaea874b38092aaf2aa38e77b61316ccda2034c2a8f6b0972be632811c076d13f4db0335d67c6e4154daa57c0302057e2b8d28501b2a943a02e348f544e706fbc752b0f3290626f6d"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x60, 0x13, 0xa2, "b4db043cfaf73462cf490c40aeb253412573023c4fe65f96d9fc51369fd490c6801b36d76aa9e626b263dd33985d0bd98ea50e38d22c380f502f7c73fab963592cd143947cc9b5bcd0b81d2947795fd04cd8d7c10bf871fe0c51d4140858d5161d445866b86be23a0cd276fb2d21ffb85241ccce79bdc2494e5a770be3b5c58664b34ba123c37428267c0c93a4bf3d4e6a95912711f6752c7edde0cf31bbfaf40408"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x6a, 0x4, 0x9, 0x96, 0x8, 0xb, 0x9, 0x400, 0x1, 0x1, 0x2, 0x1}}, &(0x7f0000000440)={0x20, 0x85, 0x4}, &(0x7f0000000480)={0x20, 0x83, 0x2}, &(0x7f0000000540)={0x20, 0x87, 0x2}, &(0x7f0000000580)={0x20, 0x89, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@func={0x3, 0x0, 0x0, 0xc, 0x1}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x1, 0x100}]}]}, {0x0, [0x30, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/170, 0x45, 0xaa, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000001080)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0x8a, 0x20000}, 0x20) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000003a40), 0x2, 0x0) writev(r5, &(0x7f0000003e40)=[{&(0x7f0000003a80)='Ji', 0x2}], 0x1) timer_create(0x3, &(0x7f0000000080)={0x0, 0x11, 0x4}, &(0x7f00000000c0)=0x0) r7 = syz_open_dev$evdev(&(0x7f0000000500), 0x1000, 0xb0400) ioctl$EVIOCGPROP(r7, 0x80404509, &(0x7f00000007c0)=""/48) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000000700)={{r8, r9+10000000}, {0x0, 0x989680}}, &(0x7f0000000740)) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r10, 0x8, &(0x7f0000000240)=0x2) ptrace$ARCH_MAP_VDSO_32(0x1e, r10, 0xf30f, 0x2002) wait4(r10, &(0x7f0000000780), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@ipv4_getrule={0x1c, 0x22, 0x200, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x20, 0x6, 0x9, 0x0, 0x0, 0x3, 0x10008}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.1' (ED25519) to the list of known hosts. [ 28.629224][ T4696] cgroup: Unknown subsys name 'net' [ 28.749237][ T4696] cgroup: Unknown subsys name 'cpuset' [ 28.751290][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.840761][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.650197][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.661142][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.661657][ T4721] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.661764][ T4721] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.662072][ T4721] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.662387][ T4721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.662808][ T4721] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.662888][ T4721] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.668463][ T4723] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.670160][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.674403][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.675628][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.677466][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.679156][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.679685][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.680032][ T4723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.680232][ T4723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.683275][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.683282][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.684319][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.684494][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.684846][ T4712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.685057][ T4712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.690368][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.708119][ T4720] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.022489][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.022553][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.022619][ T4707] bridge_slave_0: entered allmulticast mode [ 30.023079][ T4707] bridge_slave_0: entered promiscuous mode [ 30.024013][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.024034][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.024086][ T4707] bridge_slave_1: entered allmulticast mode [ 30.024477][ T4707] bridge_slave_1: entered promiscuous mode [ 30.034024][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.046104][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.052558][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.052649][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.052749][ T4710] bridge_slave_0: entered allmulticast mode [ 30.053176][ T4710] bridge_slave_0: entered promiscuous mode [ 30.054469][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.054494][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.054541][ T4710] bridge_slave_1: entered allmulticast mode [ 30.054972][ T4710] bridge_slave_1: entered promiscuous mode [ 30.072719][ T4707] team0: Port device team_slave_0 added [ 30.075710][ T4707] team0: Port device team_slave_1 added [ 30.095736][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.095954][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.096044][ T4716] bridge_slave_0: entered allmulticast mode [ 30.096463][ T4716] bridge_slave_0: entered promiscuous mode [ 30.102028][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.102050][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.102078][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.102835][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.102851][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.102879][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.121756][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.121829][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.121895][ T4716] bridge_slave_1: entered allmulticast mode [ 30.122314][ T4716] bridge_slave_1: entered promiscuous mode [ 30.126371][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.127422][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.132666][ T4707] hsr_slave_0: entered promiscuous mode [ 30.133433][ T4707] hsr_slave_1: entered promiscuous mode [ 30.141539][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.156397][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.160664][ T4710] team0: Port device team_slave_0 added [ 30.171726][ T4710] team0: Port device team_slave_1 added [ 30.183472][ T4716] team0: Port device team_slave_0 added [ 30.184532][ T4716] team0: Port device team_slave_1 added [ 30.200734][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.200754][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.200779][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.208052][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.208061][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.208072][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.213233][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.213586][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.213704][ T4708] bridge_slave_0: entered allmulticast mode [ 30.214110][ T4708] bridge_slave_0: entered promiscuous mode [ 30.216940][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.216966][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.217055][ T4708] bridge_slave_1: entered allmulticast mode [ 30.217450][ T4708] bridge_slave_1: entered promiscuous mode [ 30.224822][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.225666][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.229114][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.229122][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.229134][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.239065][ T4710] hsr_slave_0: entered promiscuous mode [ 30.239334][ T4710] hsr_slave_1: entered promiscuous mode [ 30.239509][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.239540][ T4710] Cannot create hsr debugfs directory [ 30.240137][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.240144][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.240158][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.254456][ T4708] team0: Port device team_slave_0 added [ 30.255156][ T4708] team0: Port device team_slave_1 added [ 30.265004][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.266403][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.267989][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.278375][ T4716] hsr_slave_0: entered promiscuous mode [ 30.278712][ T4716] hsr_slave_1: entered promiscuous mode [ 30.278907][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.278915][ T4716] Cannot create hsr debugfs directory [ 30.281704][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.281711][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.281723][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.335770][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.335843][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.335900][ T4715] bridge_slave_0: entered allmulticast mode [ 30.336323][ T4715] bridge_slave_0: entered promiscuous mode [ 30.337664][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.337689][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.337781][ T4715] bridge_slave_1: entered allmulticast mode [ 30.339164][ T4715] bridge_slave_1: entered promiscuous mode [ 30.361197][ T4708] hsr_slave_0: entered promiscuous mode [ 30.362738][ T4708] hsr_slave_1: entered promiscuous mode [ 30.364141][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.365280][ T4708] Cannot create hsr debugfs directory [ 30.370111][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.382233][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.407064][ T4715] team0: Port device team_slave_0 added [ 30.415789][ T4715] team0: Port device team_slave_1 added [ 30.435168][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.436133][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.436163][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.438622][ T4707] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.443218][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.443540][ T4707] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.445809][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.446361][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.446370][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.446386][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.453651][ T4707] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.455867][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.456166][ T4707] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.457700][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.478614][ T4715] hsr_slave_0: entered promiscuous mode [ 30.478926][ T4715] hsr_slave_1: entered promiscuous mode [ 30.479107][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.479116][ T4715] Cannot create hsr debugfs directory [ 30.510165][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510222][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.510372][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.510426][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.520354][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.522943][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.531207][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.533418][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.533724][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.535591][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.542747][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.544890][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.564206][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.567197][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.569070][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.571380][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.571732][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.573762][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.576073][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.576120][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.576206][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.576247][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.583502][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.585677][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.607858][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.612000][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.615102][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.616885][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.619927][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.626951][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.633554][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.634509][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.634802][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.636864][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.637787][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.637813][ T4716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.637932][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.637969][ T4716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.642701][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.643725][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.645013][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.649225][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.651801][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.653202][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.661738][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.661787][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.677183][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.679665][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.681389][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.683618][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.685531][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.685577][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.690253][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.692259][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.694607][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.694927][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.696911][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.706993][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.723481][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.723512][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.741671][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.741712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.742623][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.742647][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.776903][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.792534][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.796957][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.805225][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.815708][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.819521][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.819556][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.820081][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.820101][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.826811][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.836478][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.839270][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.853032][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.853069][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.865858][ T4716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.869144][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.873066][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.873112][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.873473][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.873494][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.884605][ T2967] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.884648][ T2967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.916569][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.920875][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.926708][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.949496][ T4707] veth0_vlan: entered promiscuous mode [ 30.964413][ T4707] veth1_vlan: entered promiscuous mode [ 30.999763][ T4707] veth0_macvtap: entered promiscuous mode [ 31.002590][ T4707] veth1_macvtap: entered promiscuous mode [ 31.007656][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.022736][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.080551][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.086211][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.086264][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.091058][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.101261][ T3437] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.101678][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.101689][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.114678][ T4710] veth0_vlan: entered promiscuous mode [ 31.121897][ T4710] veth1_vlan: entered promiscuous mode [ 31.127778][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.127806][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.133472][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.148933][ T4708] veth0_vlan: entered promiscuous mode [ 31.152169][ T4708] veth1_vlan: entered promiscuous mode [ 31.172429][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.175961][ T4710] veth0_macvtap: entered promiscuous mode [ 31.177201][ T4710] veth1_macvtap: entered promiscuous mode [ 31.182622][ T4708] veth0_macvtap: entered promiscuous mode [ 31.185433][ T4708] veth1_macvtap: entered promiscuous mode [ 31.189313][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.192368][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.197595][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.199853][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.206148][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.213548][ T4707] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.220816][ T3437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220938][ T3437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220964][ T3437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.220980][ T3437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.224045][ T3437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.224079][ T3437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.224098][ T3437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.224117][ T3437] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.241741][ T4716] veth0_vlan: entered promiscuous mode [ 31.264242][ T4716] veth1_vlan: entered promiscuous mode [ 31.295752][ T4716] veth0_macvtap: entered promiscuous mode [ 31.311439][ T4716] veth1_macvtap: entered promiscuous mode [ 31.312812][ T4887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.315747][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.316126][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.323591][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.323617][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.334904][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.343478][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.357453][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.357482][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.361948][ T4715] veth0_vlan: entered promiscuous mode [ 31.364057][ T4715] veth1_vlan: entered promiscuous mode [ 31.392309][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.392341][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.401651][ T2967] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.401780][ T2967] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.401894][ T2967] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419877][ T3437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.434992][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.435022][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.436227][ T4891] FAULT_INJECTION: forcing a failure. [ 31.436227][ T4891] name failslab, interval 1, probability 0, space 0, times 1 [ 31.436247][ T4891] CPU: 0 UID: 0 PID: 4891 Comm: syz.3.6 Not tainted syzkaller #0 PREEMPT [ 31.436265][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 31.436271][ T4891] Call trace: [ 31.436274][ T4891] show_stack+0x2c/0x3c (C) [ 31.436295][ T4891] __dump_stack+0x30/0x40 [ 31.436307][ T4891] dump_stack_lvl+0xd8/0x12c [ 31.436319][ T4891] dump_stack+0x1c/0x28 [ 31.436330][ T4891] should_fail_ex+0x41c/0x590 [ 31.436342][ T4891] should_failslab+0xc4/0x120 [ 31.436355][ T4891] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 31.436368][ T4891] sock_alloc_inode+0x30/0x180 [ 31.436380][ T4891] alloc_inode+0x68/0x198 [ 31.436391][ T4891] sock_alloc+0x4c/0x204 [ 31.436398][ T4891] __sock_create+0x108/0x670 [ 31.436407][ T4891] __sys_socket_create+0xc0/0x11c [ 31.436415][ T4891] __sys_socket+0x44/0xec [ 31.436424][ T4891] __arm64_sys_socket+0x84/0x9c [ 31.436432][ T4891] invoke_syscall+0x98/0x244 [ 31.436444][ T4891] el0_svc_common+0xec/0x23c [ 31.436455][ T4891] do_el0_svc+0x4c/0x5c [ 31.436466][ T4891] el0_svc+0x64/0x260 [ 31.436477][ T4891] el0t_64_sync_handler+0x44/0x104 [ 31.436487][ T4891] el0t_64_sync+0x198/0x19c [ 31.436525][ T4891] socket: no more sockets [ 31.466512][ T4715] veth0_macvtap: entered promiscuous mode [ 31.470478][ T4715] veth1_macvtap: entered promiscuous mode [ 31.484621][ T4893] ip_tables: iptables: counters copy to user failed while replacing table [ 31.493972][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.496996][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.497025][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.504726][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.549911][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550046][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550065][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.566607][ T3437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.566638][ T3437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.579043][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.604991][ T4907] netlink: 'syz.1.9': attribute type 1 has an invalid length. [ 31.612056][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.612093][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 31.615660][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.615672][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.681835][ T4911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10'. [ 31.688485][ T4712] Bluetooth: hci0: command tx timeout [ 31.718320][ T4913] ip6erspan0: entered allmulticast mode [ 31.737121][ T4920] loop3: detected capacity change from 0 to 512 [ 31.749110][ T4911] loop1: detected capacity change from 0 to 128 [ 31.755552][ T4911] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.756715][ T4918] ªªªªªª: renamed from vlan0 (while UP) [ 31.769159][ T4712] Bluetooth: hci3: command tx timeout [ 31.769186][ T4718] Bluetooth: hci4: command tx timeout [ 31.769434][ T4720] Bluetooth: hci2: command tx timeout [ 31.769559][ T4718] Bluetooth: hci1: command tx timeout [ 31.780574][ T4920] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.13: inode has both inline data and extents flags [ 31.780653][ T4920] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 31.780906][ T4920] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 31.780938][ T4920] loop3: lost filesystem error report for type 5 error -117 [ 31.781429][ T4920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.837367][ T4929] ip_tables: iptables: counters copy to user failed while replacing table [ 31.837762][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 31.865593][ T4929] netlink: 'syz.2.15': attribute type 5 has an invalid length. [ 32.004933][ T4936] ip_tables: iptables: counters copy to user failed while replacing table [ 32.051322][ T4945] loop1: detected capacity change from 0 to 4096 [ 32.054066][ T4945] EXT4-fs (loop1): Test dummy encryption mode enabled [ 32.054428][ T4945] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 32.063291][ T4954] FAULT_INJECTION: forcing a failure. [ 32.063291][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.066686][ T4954] CPU: 1 UID: 0 PID: 4954 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT [ 32.066709][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.066715][ T4954] Call trace: [ 32.066720][ T4954] show_stack+0x2c/0x3c (C) [ 32.066745][ T4954] __dump_stack+0x30/0x40 [ 32.066762][ T4954] dump_stack_lvl+0xd8/0x12c [ 32.066774][ T4954] dump_stack+0x1c/0x28 [ 32.066785][ T4954] should_fail_ex+0x41c/0x590 [ 32.066798][ T4954] should_fail+0x14/0x24 [ 32.066809][ T4954] should_fail_usercopy+0x20/0x30 [ 32.066821][ T4954] _inline_copy_from_user+0x3c/0x174 [ 32.066834][ T4954] kstrtouint_from_user+0xcc/0x174 [ 32.066847][ T4954] proc_fail_nth_write+0x9c/0x234 [ 32.066857][ T4954] vfs_write+0x2a4/0xa0c [ 32.066869][ T4954] ksys_pwrite64+0x118/0x1ac [ 32.066882][ T4954] __arm64_sys_pwrite64+0xa8/0xc0 [ 32.066894][ T4954] invoke_syscall+0x98/0x244 [ 32.066906][ T4954] el0_svc_common+0xec/0x23c [ 32.066917][ T4954] do_el0_svc+0x4c/0x5c [ 32.066929][ T4954] el0_svc+0x64/0x260 [ 32.066939][ T4954] el0t_64_sync_handler+0x44/0x104 [ 32.066949][ T4954] el0t_64_sync+0x198/0x19c [ 32.231271][ T4967] overlayfs: cannot append lower layer [ 32.256206][ T4974] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22) [ 32.681629][ T4983] FAULT_INJECTION: forcing a failure. [ 32.681629][ T4983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.686848][ T4983] CPU: 1 UID: 0 PID: 4983 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT [ 32.686872][ T4983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.686879][ T4983] Call trace: [ 32.686882][ T4983] show_stack+0x2c/0x3c (C) [ 32.686905][ T4983] __dump_stack+0x30/0x40 [ 32.686919][ T4983] dump_stack_lvl+0xd8/0x12c [ 32.686931][ T4983] dump_stack+0x1c/0x28 [ 32.686942][ T4983] should_fail_ex+0x41c/0x590 [ 32.686955][ T4983] should_fail+0x14/0x24 [ 32.686966][ T4983] should_fail_usercopy+0x20/0x30 [ 32.686979][ T4983] _copy_from_iter+0x188/0x1064 [ 32.686992][ T4983] file_tty_write+0x370/0x66c [ 32.687001][ T4983] tty_write+0x44/0x54 [ 32.687008][ T4983] vfs_write+0x51c/0xa0c [ 32.687021][ T4983] ksys_write+0x12c/0x228 [ 32.687033][ T4983] __arm64_sys_write+0x84/0x98 [ 32.687046][ T4983] invoke_syscall+0x98/0x244 [ 32.687057][ T4983] el0_svc_common+0xec/0x23c [ 32.687069][ T4983] do_el0_svc+0x4c/0x5c [ 32.687080][ T4983] el0_svc+0x64/0x260 [ 32.687091][ T4983] el0t_64_sync_handler+0x44/0x104 [ 32.687101][ T4983] el0t_64_sync+0x198/0x19c [ 32.709401][ T4971] team0: Port device syz_tun added [ 32.827000][ T4994] loop4: detected capacity change from 0 to 512 [ 32.828907][ T4994] ======================================================= [ 32.828907][ T4994] WARNING: The mand mount option has been deprecated and [ 32.828907][ T4994] and is ignored by this kernel. Remove the mand [ 32.828907][ T4994] option from the mount to silence this warning. [ 32.828907][ T4994] ======================================================= [ 32.831827][ T4994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.831843][ T4994] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.832892][ T4994] EXT4-fs error (device loop4): ext4_init_orphan_info:619: comm syz.4.31: orphan file block 0: bad magic [ 32.832907][ T4994] loop4: lost filesystem error report for type 5 error -117 [ 32.833480][ T4994] EXT4-fs (loop4): Remounting filesystem read-only [ 32.833736][ T4994] EXT4-fs (loop4): mount failed [ 32.950170][ T5003] loop4: detected capacity change from 0 to 128 [ 32.953608][ T5003] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 32.953753][ T5003] FAT-fs (loop4): FAT read failed (blocknr 32) [ 33.198899][ T5010] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 33.788144][ T4712] Bluetooth: hci0: command tx timeout [ 33.848248][ T4712] Bluetooth: hci1: command tx timeout [ 33.858129][ T4718] Bluetooth: hci4: command tx timeout [ 33.859803][ T4711] Bluetooth: hci2: command tx timeout [ 33.861559][ T4712] Bluetooth: hci3: command tx timeout [ 34.040090][ T5025] loop1: detected capacity change from 0 to 2048 [ 34.051754][ T5025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 34.055313][ T5025] EXT4-fs (loop1): shut down requested (2) [ 34.060106][ T5023] ip6gre1: entered allmulticast mode [ 34.066186][ T2967] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 34.078955][ T5022] Zero length message leads to an empty skb [ 34.173185][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 34.285858][ T5039] loop2: detected capacity change from 0 to 128 [ 34.299746][ T5039] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.301153][ T5040] netlink: 36 bytes leftover after parsing attributes in process `syz.4.43'. [ 34.305322][ T5037] loop1: detected capacity change from 0 to 1024 [ 34.358499][ T5043] warning: `syz.3.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 34.555838][ T5037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.669212][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.744908][ T5062] loop1: detected capacity change from 0 to 512 [ 34.767295][ T5062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.804596][ T5062] 9p: Bad value for 'rfdno' [ 34.836592][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.842195][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 34.916613][ T5075] loop1: detected capacity change from 0 to 512 [ 34.939888][ T5075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.144703][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.147263][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.222994][ T5096] xt_hashlimit: size too large, truncated to 1048576 [ 35.240091][ T5102] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.261827][ T2967] IPVS: starting estimator thread 0... [ 35.266638][ T5102] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 35.269068][ T5105] netlink: 44 bytes leftover after parsing attributes in process `syz.3.58'. [ 35.271556][ T5102] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 35.276115][ T5102] EXT4-fs (loop4): 1 truncate cleaned up [ 35.277092][ T5102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.301632][ T5102] overlayfs: upper fs needs to support d_type. [ 35.336100][ T4715] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 35.336167][ T4715] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.339872][ T4715] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 35.345222][ T4715] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.345551][ T4715] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 35.350369][ T4715] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.351569][ T4715] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 35.358126][ T5106] IPVS: using max 58 ests per chain, 139200 per kthread [ 35.358539][ T4715] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 35.362494][ T5110] fuse: Bad value for 'rootmode' [ 35.454199][ T5120] overlayfs: failed to resolve './file0': -2 [ 35.501549][ T5123] sctp: [Deprecated]: syz.3.64 (pid 5123) Use of int in maxseg socket option. [ 35.501549][ T5123] Use struct sctp_assoc_value instead [ 35.501708][ T5123] 9p: Bad value for 'wfdno' [ 35.557561][ T5138] Bluetooth: MGMT ver 1.23 [ 35.557866][ T5138] Bluetooth: hci0: unsupported parameter 5135 [ 35.557875][ T5138] Bluetooth: hci0: unsupported parameter 8192 [ 35.557882][ T5138] Bluetooth: hci0: unsupported parameter 5135 [ 35.557888][ T5138] Bluetooth: hci0: unsupported parameter 8192 [ 35.586425][ T5143] netlink: 116 bytes leftover after parsing attributes in process `syz.3.67'. [ 35.663101][ T5150] netlink: 'syz.3.69': attribute type 3 has an invalid length. [ 35.848370][ T4712] Bluetooth: hci0: command tx timeout [ 35.857467][ T5163] process 'syz.1.71' launched './file1' with NULL argv: empty string added [ 35.928150][ T4712] Bluetooth: hci2: command tx timeout [ 35.928188][ T4712] Bluetooth: hci4: command tx timeout [ 35.928436][ T4711] Bluetooth: hci1: command tx timeout [ 36.207068][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.262333][ T2967] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.320007][ T4718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.322185][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.324667][ T4718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.326614][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.328780][ T4718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.341491][ T2967] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.423792][ T2967] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.515665][ T2967] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.534670][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.534756][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.534811][ T5178] bridge_slave_0: entered allmulticast mode [ 36.535247][ T5178] bridge_slave_0: entered promiscuous mode [ 36.536213][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.536263][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.536314][ T5178] bridge_slave_1: entered allmulticast mode [ 36.536805][ T5178] bridge_slave_1: entered promiscuous mode [ 36.544837][ T5178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.545978][ T5178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.553681][ T5178] team0: Port device team_slave_0 added [ 36.554595][ T5178] team0: Port device team_slave_1 added [ 36.563526][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.563555][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.563568][ T5178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.564259][ T5178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.564267][ T5178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.564279][ T5178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.581945][ T5178] hsr_slave_0: entered promiscuous mode [ 36.582343][ T5178] hsr_slave_1: entered promiscuous mode [ 36.582548][ T5178] debugfs: 'hsr0' already exists in 'hsr' [ 36.582557][ T5178] Cannot create hsr debugfs directory [ 36.675059][ T2967] bridge_slave_1: left allmulticast mode [ 36.675110][ T2967] bridge_slave_1: left promiscuous mode [ 36.675475][ T2967] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.682618][ T2967] bridge_slave_0: left allmulticast mode [ 36.682648][ T2967] bridge_slave_0: left promiscuous mode [ 36.682730][ T2967] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783169][ T2967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.791623][ T2967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.822021][ T2967] bond0 (unregistering): Released all slaves [ 36.890887][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 36.902023][ T5206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 37.039861][ T5178] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.046547][ T5178] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.046954][ T5178] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.070292][ T5178] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.072164][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.072695][ T5178] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.081702][ T5178] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.082039][ T5178] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.086032][ T5178] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.232771][ T2967] hsr_slave_0: left promiscuous mode [ 37.233912][ T2967] hsr_slave_1: left promiscuous mode [ 37.234479][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.234496][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.242049][ T2967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.242083][ T2967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.259864][ T2967] veth1_macvtap: left promiscuous mode [ 37.260330][ T2967] veth0_macvtap: left promiscuous mode [ 37.260382][ T2967] veth1_vlan: left promiscuous mode [ 37.260426][ T2967] veth0_vlan: left promiscuous mode [ 37.271008][ T5230] set_capacity_and_notify: 1 callbacks suppressed [ 37.272956][ T5230] loop1: detected capacity change from 0 to 4096 [ 37.284712][ T5230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.284753][ T5230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 37.299745][ T5230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.377264][ T5233] overlayfs: workdir and upperdir must be separate subtrees [ 37.463473][ T2967] team0 (unregistering): Port device team_slave_1 removed [ 37.467643][ T2967] team0 (unregistering): Port device team_slave_0 removed [ 37.516288][ T5240] Illegal XDP return value 4294966772 on prog (id 14) dev N/A, expect packet loss! [ 37.688000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 37.927965][ T4718] Bluetooth: hci0: command tx timeout [ 38.008220][ T4712] Bluetooth: hci1: command tx timeout [ 38.008254][ T4712] Bluetooth: hci2: command tx timeout [ 38.010482][ T4718] Bluetooth: hci4: command tx timeout [ 38.325411][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.408093][ T4718] Bluetooth: hci3: command tx timeout [ 38.418966][ T5178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.422338][ T5178] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.424623][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.424665][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.426206][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.426242][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.672079][ T5273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 38.718118][ T5281] Injecting memory failure for pfn 0x11fd45 at process virtual address 0x20000000 [ 38.734578][ T5289] FAULT_INJECTION: forcing a failure. [ 38.734578][ T5289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.737112][ T5289] CPU: 1 UID: 0 PID: 5289 Comm: syz.2.95 Tainted: G L syzkaller #0 PREEMPT [ 38.737132][ T5289] Tainted: [L]=SOFTLOCKUP [ 38.737136][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.737141][ T5289] Call trace: [ 38.737145][ T5289] show_stack+0x2c/0x3c (C) [ 38.737166][ T5289] __dump_stack+0x30/0x40 [ 38.737178][ T5289] dump_stack_lvl+0xd8/0x12c [ 38.737188][ T5289] dump_stack+0x1c/0x28 [ 38.737198][ T5289] should_fail_ex+0x41c/0x590 [ 38.737208][ T5289] should_fail_alloc_page+0xec/0x10c [ 38.737220][ T5289] prepare_alloc_pages+0x194/0x484 [ 38.737227][ T5289] __alloc_frozen_pages_noprof+0x180/0x648 [ 38.737235][ T5289] alloc_pages_mpol+0x1fc/0x3d0 [ 38.737243][ T5289] alloc_frozen_pages_noprof+0xc4/0x10c [ 38.737251][ T5289] alloc_pages_noprof+0x30/0x148 [ 38.737259][ T5289] get_free_pages_noprof+0x1c/0xbc [ 38.737266][ T5289] __kasan_populate_vmalloc+0x48/0x1d0 [ 38.737275][ T5289] alloc_vmap_area+0xdf4/0x13e8 [ 38.737283][ T5289] __get_vm_area_node+0x210/0x32c [ 38.737291][ T5289] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 38.737300][ T5289] __vmalloc_node_noprof+0xec/0x14c [ 38.737308][ T5289] __vmalloc_noprof+0x64/0x8c [ 38.737316][ T5289] bpf_check+0xd58/0x243c [ 38.737327][ T5289] bpf_prog_load+0xf4c/0x1554 [ 38.737335][ T5289] __sys_bpf+0x7d4/0x82c [ 38.737343][ T5289] __arm64_sys_bpf+0xd0/0xec [ 38.737350][ T5289] invoke_syscall+0x98/0x244 [ 38.737360][ T5289] el0_svc_common+0xec/0x23c [ 38.737370][ T5289] do_el0_svc+0x4c/0x5c [ 38.737379][ T5289] el0_svc+0x64/0x260 [ 38.737389][ T5289] el0t_64_sync_handler+0x44/0x104 [ 38.737397][ T5289] el0t_64_sync+0x198/0x19c [ 38.742416][ T5281] Memory failure: 0x11fd45: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742484][ T5281] Memory failure: 0x11fd45: recovery action for dirty LRU page: Recovered [ 38.742497][ T5281] Injecting memory failure for pfn 0x11fe87 at process virtual address 0x20001000 [ 38.742569][ T5281] Memory failure: 0x11fe87: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742600][ T5281] Memory failure: 0x11fe87: recovery action for dirty LRU page: Recovered [ 38.742609][ T5281] Injecting memory failure for pfn 0x1334fe at process virtual address 0x20002000 [ 38.742643][ T5281] Memory failure: 0x1334fe: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742662][ T5281] Memory failure: 0x1334fe: recovery action for dirty LRU page: Recovered [ 38.742671][ T5281] Injecting memory failure for pfn 0x120e87 at process virtual address 0x20003000 [ 38.742699][ T5281] Memory failure: 0x120e87: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742716][ T5281] Memory failure: 0x120e87: recovery action for dirty LRU page: Recovered [ 38.742724][ T5281] Injecting memory failure for pfn 0x11fd4d at process virtual address 0x20004000 [ 38.742751][ T5281] Memory failure: 0x11fd4d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742767][ T5281] Memory failure: 0x11fd4d: recovery action for dirty LRU page: Recovered [ 38.742775][ T5281] Injecting memory failure for pfn 0x11fef1 at process virtual address 0x20005000 [ 38.742801][ T5281] Memory failure: 0x11fef1: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742817][ T5281] Memory failure: 0x11fef1: recovery action for dirty LRU page: Recovered [ 38.742824][ T5281] Injecting memory failure for pfn 0x11fe8e at process virtual address 0x20006000 [ 38.742851][ T5281] Memory failure: 0x11fe8e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742867][ T5281] Memory failure: 0x11fe8e: recovery action for dirty LRU page: Recovered [ 38.742875][ T5281] Injecting memory failure for pfn 0x11fef5 at process virtual address 0x20007000 [ 38.742900][ T5281] Memory failure: 0x11fef5: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742916][ T5281] Memory failure: 0x11fef5: recovery action for dirty LRU page: Recovered [ 38.742923][ T5281] Injecting memory failure for pfn 0x11fee0 at process virtual address 0x20008000 [ 38.742949][ T5281] Memory failure: 0x11fee0: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.742964][ T5281] Memory failure: 0x11fee0: recovery action for dirty LRU page: Recovered [ 38.742972][ T5281] Injecting memory failure for pfn 0x11fee1 at process virtual address 0x20009000 [ 38.742998][ T5281] Memory failure: 0x11fee1: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743013][ T5281] Memory failure: 0x11fee1: recovery action for dirty LRU page: Recovered [ 38.743021][ T5281] Injecting memory failure for pfn 0x11fd5c at process virtual address 0x2000a000 [ 38.743046][ T5281] Memory failure: 0x11fd5c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743062][ T5281] Memory failure: 0x11fd5c: recovery action for dirty LRU page: Recovered [ 38.743069][ T5281] Injecting memory failure for pfn 0x11fee2 at process virtual address 0x2000b000 [ 38.743095][ T5281] Memory failure: 0x11fee2: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743111][ T5281] Memory failure: 0x11fee2: recovery action for dirty LRU page: Recovered [ 38.743118][ T5281] Injecting memory failure for pfn 0x11fee3 at process virtual address 0x2000c000 [ 38.743144][ T5281] Memory failure: 0x11fee3: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743159][ T5281] Memory failure: 0x11fee3: recovery action for dirty LRU page: Recovered [ 38.743166][ T5281] Injecting memory failure for pfn 0x11fe88 at process virtual address 0x2000d000 [ 38.743192][ T5281] Memory failure: 0x11fe88: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743207][ T5281] Memory failure: 0x11fe88: recovery action for dirty LRU page: Recovered [ 38.743215][ T5281] Injecting memory failure for pfn 0x11fee4 at process virtual address 0x2000e000 [ 38.743240][ T5281] Memory failure: 0x11fee4: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743256][ T5281] Memory failure: 0x11fee4: recovery action for dirty LRU page: Recovered [ 38.743263][ T5281] Injecting memory failure for pfn 0x11fd4c at process virtual address 0x2000f000 [ 38.743288][ T5281] Memory failure: 0x11fd4c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743304][ T5281] Memory failure: 0x11fd4c: recovery action for dirty LRU page: Recovered [ 38.743311][ T5281] Injecting memory failure for pfn 0x11fe85 at process virtual address 0x20010000 [ 38.743336][ T5281] Memory failure: 0x11fe85: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743352][ T5281] Memory failure: 0x11fe85: recovery action for dirty LRU page: Recovered [ 38.743359][ T5281] Injecting memory failure for pfn 0x11fe8d at process virtual address 0x20011000 [ 38.743384][ T5281] Memory failure: 0x11fe8d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743400][ T5281] Memory failure: 0x11fe8d: recovery action for dirty LRU page: Recovered [ 38.743407][ T5281] Injecting memory failure for pfn 0x11fee5 at process virtual address 0x20012000 [ 38.743432][ T5281] Memory failure: 0x11fee5: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743448][ T5281] Memory failure: 0x11fee5: recovery action for dirty LRU page: Recovered [ 38.743455][ T5281] Injecting memory failure for pfn 0x11fee6 at process virtual address 0x20013000 [ 38.743480][ T5281] Memory failure: 0x11fee6: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743496][ T5281] Memory failure: 0x11fee6: recovery action for dirty LRU page: Recovered [ 38.743503][ T5281] Injecting memory failure for pfn 0x11fd5a at process virtual address 0x20014000 [ 38.743529][ T5281] Memory failure: 0x11fd5a: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743544][ T5281] Memory failure: 0x11fd5a: recovery action for dirty LRU page: Recovered [ 38.743552][ T5281] Injecting memory failure for pfn 0x11fd59 at process virtual address 0x20015000 [ 38.743577][ T5281] Memory failure: 0x11fd59: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743598][ T5281] Memory failure: 0x11fd59: recovery action for dirty LRU page: Recovered [ 38.743606][ T5281] Injecting memory failure for pfn 0x11fee8 at process virtual address 0x20016000 [ 38.743631][ T5281] Memory failure: 0x11fee8: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743646][ T5281] Memory failure: 0x11fee8: recovery action for dirty LRU page: Recovered [ 38.743654][ T5281] Injecting memory failure for pfn 0x11fd58 at process virtual address 0x20017000 [ 38.743679][ T5281] Memory failure: 0x11fd58: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743695][ T5281] Memory failure: 0x11fd58: recovery action for dirty LRU page: Recovered [ 38.743702][ T5281] Injecting memory failure for pfn 0x11fee9 at process virtual address 0x20018000 [ 38.743727][ T5281] Memory failure: 0x11fee9: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743743][ T5281] Memory failure: 0x11fee9: recovery action for dirty LRU page: Recovered [ 38.743750][ T5281] Injecting memory failure for pfn 0x1334fd at process virtual address 0x20019000 [ 38.743776][ T5281] Memory failure: 0x1334fd: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743791][ T5281] Memory failure: 0x1334fd: recovery action for dirty LRU page: Recovered [ 38.743798][ T5281] Injecting memory failure for pfn 0x11fd57 at process virtual address 0x2001a000 [ 38.743824][ T5281] Memory failure: 0x11fd57: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743839][ T5281] Memory failure: 0x11fd57: recovery action for dirty LRU page: Recovered [ 38.743846][ T5281] Injecting memory failure for pfn 0x11fd48 at process virtual address 0x2001b000 [ 38.743872][ T5281] Memory failure: 0x11fd48: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743887][ T5281] Memory failure: 0x11fd48: recovery action for dirty LRU page: Recovered [ 38.743894][ T5281] Injecting memory failure for pfn 0x11feea at process virtual address 0x2001c000 [ 38.743919][ T5281] Memory failure: 0x11feea: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743935][ T5281] Memory failure: 0x11feea: recovery action for dirty LRU page: Recovered [ 38.743942][ T5281] Injecting memory failure for pfn 0x1208d0 at process virtual address 0x2001d000 [ 38.743967][ T5281] Memory failure: 0x1208d0: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.743983][ T5281] Memory failure: 0x1208d0: recovery action for dirty LRU page: Recovered [ 38.743990][ T5281] Injecting memory failure for pfn 0x11fe98 at process virtual address 0x2001e000 [ 38.744015][ T5281] Memory failure: 0x11fe98: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744030][ T5281] Memory failure: 0x11fe98: recovery action for dirty LRU page: Recovered [ 38.744038][ T5281] Injecting memory failure for pfn 0x11e786 at process virtual address 0x2001f000 [ 38.744063][ T5281] Memory failure: 0x11e786: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744078][ T5281] Memory failure: 0x11e786: recovery action for dirty LRU page: Recovered [ 38.744085][ T5281] Injecting memory failure for pfn 0x11e783 at process virtual address 0x20020000 [ 38.744111][ T5281] Memory failure: 0x11e783: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744126][ T5281] Memory failure: 0x11e783: recovery action for dirty LRU page: Recovered [ 38.744133][ T5281] Injecting memory failure for pfn 0x11e780 at process virtual address 0x20021000 [ 38.744159][ T5281] Memory failure: 0x11e780: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744174][ T5281] Memory failure: 0x11e780: recovery action for dirty LRU page: Recovered [ 38.744181][ T5281] Injecting memory failure for pfn 0x11fd42 at process virtual address 0x20022000 [ 38.744206][ T5281] Memory failure: 0x11fd42: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744221][ T5281] Memory failure: 0x11fd42: recovery action for dirty LRU page: Recovered [ 38.744229][ T5281] Injecting memory failure for pfn 0x1208d3 at process virtual address 0x20023000 [ 38.744254][ T5281] Memory failure: 0x1208d3: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744269][ T5281] Memory failure: 0x1208d3: recovery action for dirty LRU page: Recovered [ 38.744277][ T5281] Injecting memory failure for pfn 0x11fe8f at process virtual address 0x20024000 [ 38.744302][ T5281] Memory failure: 0x11fe8f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744317][ T5281] Memory failure: 0x11fe8f: recovery action for dirty LRU page: Recovered [ 38.744324][ T5281] Injecting memory failure for pfn 0x1223ad at process virtual address 0x20025000 [ 38.744350][ T5281] Memory failure: 0x1223ad: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744365][ T5281] Memory failure: 0x1223ad: recovery action for dirty LRU page: Recovered [ 38.744372][ T5281] Injecting memory failure for pfn 0x1223ac at process virtual address 0x20026000 [ 38.744398][ T5281] Memory failure: 0x1223ac: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744413][ T5281] Memory failure: 0x1223ac: recovery action for dirty LRU page: Recovered [ 38.744420][ T5281] Injecting memory failure for pfn 0x11ffdb at process virtual address 0x20027000 [ 38.744446][ T5281] Memory failure: 0x11ffdb: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744461][ T5281] Memory failure: 0x11ffdb: recovery action for dirty LRU page: Recovered [ 38.744468][ T5281] Injecting memory failure for pfn 0x133507 at process virtual address 0x20028000 [ 38.744494][ T5281] Memory failure: 0x133507: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744509][ T5281] Memory failure: 0x133507: recovery action for dirty LRU page: Recovered [ 38.744517][ T5281] Injecting memory failure for pfn 0x134d3c at process virtual address 0x20029000 [ 38.744543][ T5281] Memory failure: 0x134d3c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744558][ T5281] Memory failure: 0x134d3c: recovery action for dirty LRU page: Recovered [ 38.744565][ T5281] Injecting memory failure for pfn 0x134d3a at process virtual address 0x2002a000 [ 38.744596][ T5281] Memory failure: 0x134d3a: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744611][ T5281] Memory failure: 0x134d3a: recovery action for dirty LRU page: Recovered [ 38.744618][ T5281] Injecting memory failure for pfn 0x1200b2 at process virtual address 0x2002b000 [ 38.744644][ T5281] Memory failure: 0x1200b2: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744659][ T5281] Memory failure: 0x1200b2: recovery action for dirty LRU page: Recovered [ 38.744667][ T5281] Injecting memory failure for pfn 0x134d3f at process virtual address 0x2002c000 [ 38.744692][ T5281] Memory failure: 0x134d3f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744707][ T5281] Memory failure: 0x134d3f: recovery action for dirty LRU page: Recovered [ 38.744714][ T5281] Injecting memory failure for pfn 0x11ffdd at process virtual address 0x2002d000 [ 38.744740][ T5281] Memory failure: 0x11ffdd: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744755][ T5281] Memory failure: 0x11ffdd: recovery action for dirty LRU page: Recovered [ 38.744763][ T5281] Injecting memory failure for pfn 0x11e7c4 at process virtual address 0x2002e000 [ 38.744788][ T5281] Memory failure: 0x11e7c4: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744803][ T5281] Memory failure: 0x11e7c4: recovery action for dirty LRU page: Recovered [ 38.744811][ T5281] Injecting memory failure for pfn 0x1335c0 at process virtual address 0x2002f000 [ 38.744909][ T5281] Memory failure: 0x1335c0: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.744924][ T5281] Memory failure: 0x1335c0: recovery action for dirty LRU page: Recovered [ 38.744931][ T5281] Injecting memory failure for pfn 0x1223ab at process virtual address 0x20030000 [ 38.745000][ T5281] Memory failure: 0x1223ab: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745015][ T5281] Memory failure: 0x1223ab: recovery action for dirty LRU page: Recovered [ 38.745023][ T5281] Injecting memory failure for pfn 0x13346f at process virtual address 0x20031000 [ 38.745049][ T5281] Memory failure: 0x13346f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745064][ T5281] Memory failure: 0x13346f: recovery action for dirty LRU page: Recovered [ 38.745071][ T5281] Injecting memory failure for pfn 0x11fd56 at process virtual address 0x20032000 [ 38.745097][ T5281] Memory failure: 0x11fd56: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745112][ T5281] Memory failure: 0x11fd56: recovery action for dirty LRU page: Recovered [ 38.745120][ T5281] Injecting memory failure for pfn 0x11fd55 at process virtual address 0x20033000 [ 38.745144][ T5281] Memory failure: 0x11fd55: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745160][ T5281] Memory failure: 0x11fd55: recovery action for dirty LRU page: Recovered [ 38.745168][ T5281] Injecting memory failure for pfn 0x11fd54 at process virtual address 0x20034000 [ 38.745191][ T5281] Memory failure: 0x11fd54: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745205][ T5281] Memory failure: 0x11fd54: recovery action for dirty LRU page: Recovered [ 38.745212][ T5281] Injecting memory failure for pfn 0x11fd53 at process virtual address 0x20035000 [ 38.745234][ T5281] Memory failure: 0x11fd53: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745249][ T5281] Memory failure: 0x11fd53: recovery action for dirty LRU page: Recovered [ 38.745256][ T5281] Injecting memory failure for pfn 0x11fd52 at process virtual address 0x20036000 [ 38.745278][ T5281] Memory failure: 0x11fd52: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745292][ T5281] Memory failure: 0x11fd52: recovery action for dirty LRU page: Recovered [ 38.745299][ T5281] Injecting memory failure for pfn 0x11fd51 at process virtual address 0x20037000 [ 38.745321][ T5281] Memory failure: 0x11fd51: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745335][ T5281] Memory failure: 0x11fd51: recovery action for dirty LRU page: Recovered [ 38.745342][ T5281] Injecting memory failure for pfn 0x11fd46 at process virtual address 0x20038000 [ 38.745364][ T5281] Memory failure: 0x11fd46: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745378][ T5281] Memory failure: 0x11fd46: recovery action for dirty LRU page: Recovered [ 38.745385][ T5281] Injecting memory failure for pfn 0x11fd50 at process virtual address 0x20039000 [ 38.745407][ T5281] Memory failure: 0x11fd50: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745421][ T5281] Memory failure: 0x11fd50: recovery action for dirty LRU page: Recovered [ 38.745428][ T5281] Injecting memory failure for pfn 0x11fd4f at process virtual address 0x2003a000 [ 38.745450][ T5281] Memory failure: 0x11fd4f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745464][ T5281] Memory failure: 0x11fd4f: recovery action for dirty LRU page: Recovered [ 38.745471][ T5281] Injecting memory failure for pfn 0x11fd4e at process virtual address 0x2003b000 [ 38.745493][ T5281] Memory failure: 0x11fd4e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745508][ T5281] Memory failure: 0x11fd4e: recovery action for dirty LRU page: Recovered [ 38.745515][ T5281] Injecting memory failure for pfn 0x11fd44 at process virtual address 0x2003c000 [ 38.745537][ T5281] Memory failure: 0x11fd44: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745552][ T5281] Memory failure: 0x11fd44: recovery action for dirty LRU page: Recovered [ 38.745558][ T5281] Injecting memory failure for pfn 0x134d35 at process virtual address 0x2003d000 [ 38.745580][ T5281] Memory failure: 0x134d35: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745601][ T5281] Memory failure: 0x134d35: recovery action for dirty LRU page: Recovered [ 38.745609][ T5281] Injecting memory failure for pfn 0x1223a9 at process virtual address 0x2003e000 [ 38.745632][ T5281] Memory failure: 0x1223a9: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745647][ T5281] Memory failure: 0x1223a9: recovery action for dirty LRU page: Recovered [ 38.745654][ T5281] Injecting memory failure for pfn 0x11fd5f at process virtual address 0x2003f000 [ 38.745675][ T5281] Memory failure: 0x11fd5f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745690][ T5281] Memory failure: 0x11fd5f: recovery action for dirty LRU page: Recovered [ 38.745697][ T5281] Injecting memory failure for pfn 0x11fd5e at process virtual address 0x20040000 [ 38.745718][ T5281] Memory failure: 0x11fd5e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745733][ T5281] Memory failure: 0x11fd5e: recovery action for dirty LRU page: Recovered [ 38.745739][ T5281] Injecting memory failure for pfn 0x11fd5d at process virtual address 0x20041000 [ 38.745761][ T5281] Memory failure: 0x11fd5d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745775][ T5281] Memory failure: 0x11fd5d: recovery action for dirty LRU page: Recovered [ 38.745782][ T5281] Injecting memory failure for pfn 0x1200be at process virtual address 0x20042000 [ 38.745803][ T5281] Memory failure: 0x1200be: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745818][ T5281] Memory failure: 0x1200be: recovery action for dirty LRU page: Recovered [ 38.745825][ T5281] Injecting memory failure for pfn 0x11fd5b at process virtual address 0x20043000 [ 38.745846][ T5281] Memory failure: 0x11fd5b: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745861][ T5281] Memory failure: 0x11fd5b: recovery action for dirty LRU page: Recovered [ 38.745867][ T5281] Injecting memory failure for pfn 0x11fe92 at process virtual address 0x20044000 [ 38.745916][ T5281] Memory failure: 0x11fe92: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745930][ T5281] Memory failure: 0x11fe92: recovery action for dirty LRU page: Recovered [ 38.745937][ T5281] Injecting memory failure for pfn 0x11fe93 at process virtual address 0x20045000 [ 38.745959][ T5281] Memory failure: 0x11fe93: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.745973][ T5281] Memory failure: 0x11fe93: recovery action for dirty LRU page: Recovered [ 38.745980][ T5281] Injecting memory failure for pfn 0x120e8b at process virtual address 0x20046000 [ 38.746002][ T5281] Memory failure: 0x120e8b: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746016][ T5281] Memory failure: 0x120e8b: recovery action for dirty LRU page: Recovered [ 38.746023][ T5281] Injecting memory failure for pfn 0x11feef at process virtual address 0x20047000 [ 38.746044][ T5281] Memory failure: 0x11feef: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746059][ T5281] Memory failure: 0x11feef: recovery action for dirty LRU page: Recovered [ 38.746066][ T5281] Injecting memory failure for pfn 0x11feee at process virtual address 0x20048000 [ 38.746087][ T5281] Memory failure: 0x11feee: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746102][ T5281] Memory failure: 0x11feee: recovery action for dirty LRU page: Recovered [ 38.746109][ T5281] Injecting memory failure for pfn 0x1208c0 at process virtual address 0x20049000 [ 38.746130][ T5281] Memory failure: 0x1208c0: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746145][ T5281] Memory failure: 0x1208c0: recovery action for dirty LRU page: Recovered [ 38.746151][ T5281] Injecting memory failure for pfn 0x1208c1 at process virtual address 0x2004a000 [ 38.746173][ T5281] Memory failure: 0x1208c1: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746187][ T5281] Memory failure: 0x1208c1: recovery action for dirty LRU page: Recovered [ 38.746194][ T5281] Injecting memory failure for pfn 0x11fd49 at process virtual address 0x2004b000 [ 38.746216][ T5281] Memory failure: 0x11fd49: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746230][ T5281] Memory failure: 0x11fd49: recovery action for dirty LRU page: Recovered [ 38.746237][ T5281] Injecting memory failure for pfn 0x11fe8c at process virtual address 0x2004c000 [ 38.746258][ T5281] Memory failure: 0x11fe8c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746273][ T5281] Memory failure: 0x11fe8c: recovery action for dirty LRU page: Recovered [ 38.746280][ T5281] Injecting memory failure for pfn 0x11e782 at process virtual address 0x2004d000 [ 38.746301][ T5281] Memory failure: 0x11e782: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746316][ T5281] Memory failure: 0x11e782: recovery action for dirty LRU page: Recovered [ 38.746323][ T5281] Injecting memory failure for pfn 0x1200bf at process virtual address 0x2004e000 [ 38.746344][ T5281] Memory failure: 0x1200bf: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746360][ T5281] Memory failure: 0x1200bf: recovery action for dirty LRU page: Recovered [ 38.746367][ T5281] Injecting memory failure for pfn 0x120e90 at process virtual address 0x2004f000 [ 38.746389][ T5281] Memory failure: 0x120e90: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746403][ T5281] Memory failure: 0x120e90: recovery action for dirty LRU page: Recovered [ 38.746410][ T5281] Injecting memory failure for pfn 0x11fe94 at process virtual address 0x20050000 [ 38.746432][ T5281] Memory failure: 0x11fe94: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746446][ T5281] Memory failure: 0x11fe94: recovery action for dirty LRU page: Recovered [ 38.746453][ T5281] Injecting memory failure for pfn 0x11fe89 at process virtual address 0x20051000 [ 38.746475][ T5281] Memory failure: 0x11fe89: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746489][ T5281] Memory failure: 0x11fe89: recovery action for dirty LRU page: Recovered [ 38.746496][ T5281] Injecting memory failure for pfn 0x11fe86 at process virtual address 0x20052000 [ 38.746517][ T5281] Memory failure: 0x11fe86: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746531][ T5281] Memory failure: 0x11fe86: recovery action for dirty LRU page: Recovered [ 38.746538][ T5281] Injecting memory failure for pfn 0x1334ff at process virtual address 0x20053000 [ 38.746560][ T5281] Memory failure: 0x1334ff: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746574][ T5281] Memory failure: 0x1334ff: recovery action for dirty LRU page: Recovered [ 38.746581][ T5281] Injecting memory failure for pfn 0x11fd41 at process virtual address 0x20054000 [ 38.746606][ T5281] Memory failure: 0x11fd41: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746620][ T5281] Memory failure: 0x11fd41: recovery action for dirty LRU page: Recovered [ 38.746627][ T5281] Injecting memory failure for pfn 0x11fd40 at process virtual address 0x20055000 [ 38.746649][ T5281] Memory failure: 0x11fd40: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746663][ T5281] Memory failure: 0x11fd40: recovery action for dirty LRU page: Recovered [ 38.746670][ T5281] Injecting memory failure for pfn 0x11fd9f at process virtual address 0x20056000 [ 38.746691][ T5281] Memory failure: 0x11fd9f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746706][ T5281] Memory failure: 0x11fd9f: recovery action for dirty LRU page: Recovered [ 38.746713][ T5281] Injecting memory failure for pfn 0x11fd9e at process virtual address 0x20057000 [ 38.746734][ T5281] Memory failure: 0x11fd9e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746749][ T5281] Memory failure: 0x11fd9e: recovery action for dirty LRU page: Recovered [ 38.746756][ T5281] Injecting memory failure for pfn 0x11fd9d at process virtual address 0x20058000 [ 38.746777][ T5281] Memory failure: 0x11fd9d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746791][ T5281] Memory failure: 0x11fd9d: recovery action for dirty LRU page: Recovered [ 38.746798][ T5281] Injecting memory failure for pfn 0x11fd9c at process virtual address 0x20059000 [ 38.746820][ T5281] Memory failure: 0x11fd9c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746834][ T5281] Memory failure: 0x11fd9c: recovery action for dirty LRU page: Recovered [ 38.746841][ T5281] Injecting memory failure for pfn 0x11fd9b at process virtual address 0x2005a000 [ 38.746863][ T5281] Memory failure: 0x11fd9b: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746877][ T5281] Memory failure: 0x11fd9b: recovery action for dirty LRU page: Recovered [ 38.746884][ T5281] Injecting memory failure for pfn 0x11fd9a at process virtual address 0x2005b000 [ 38.746905][ T5281] Memory failure: 0x11fd9a: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746920][ T5281] Memory failure: 0x11fd9a: recovery action for dirty LRU page: Recovered [ 38.746927][ T5281] Injecting memory failure for pfn 0x11fd99 at process virtual address 0x2005c000 [ 38.746948][ T5281] Memory failure: 0x11fd99: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.746962][ T5281] Memory failure: 0x11fd99: recovery action for dirty LRU page: Recovered [ 38.746969][ T5281] Injecting memory failure for pfn 0x11fd98 at process virtual address 0x2005d000 [ 38.746991][ T5281] Memory failure: 0x11fd98: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747005][ T5281] Memory failure: 0x11fd98: recovery action for dirty LRU page: Recovered [ 38.747012][ T5281] Injecting memory failure for pfn 0x11fd97 at process virtual address 0x2005e000 [ 38.747033][ T5281] Memory failure: 0x11fd97: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747047][ T5281] Memory failure: 0x11fd97: recovery action for dirty LRU page: Recovered [ 38.747054][ T5281] Injecting memory failure for pfn 0x11fd96 at process virtual address 0x2005f000 [ 38.747076][ T5281] Memory failure: 0x11fd96: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747090][ T5281] Memory failure: 0x11fd96: recovery action for dirty LRU page: Recovered [ 38.747097][ T5281] Injecting memory failure for pfn 0x11fd95 at process virtual address 0x20060000 [ 38.747118][ T5281] Memory failure: 0x11fd95: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747132][ T5281] Memory failure: 0x11fd95: recovery action for dirty LRU page: Recovered [ 38.747139][ T5281] Injecting memory failure for pfn 0x11fd94 at process virtual address 0x20061000 [ 38.747161][ T5281] Memory failure: 0x11fd94: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747175][ T5281] Memory failure: 0x11fd94: recovery action for dirty LRU page: Recovered [ 38.747182][ T5281] Injecting memory failure for pfn 0x11fd93 at process virtual address 0x20062000 [ 38.747203][ T5281] Memory failure: 0x11fd93: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747217][ T5281] Memory failure: 0x11fd93: recovery action for dirty LRU page: Recovered [ 38.747224][ T5281] Injecting memory failure for pfn 0x11fd92 at process virtual address 0x20063000 [ 38.747245][ T5281] Memory failure: 0x11fd92: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747260][ T5281] Memory failure: 0x11fd92: recovery action for dirty LRU page: Recovered [ 38.747267][ T5281] Injecting memory failure for pfn 0x11fd91 at process virtual address 0x20064000 [ 38.747288][ T5281] Memory failure: 0x11fd91: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747302][ T5281] Memory failure: 0x11fd91: recovery action for dirty LRU page: Recovered [ 38.747309][ T5281] Injecting memory failure for pfn 0x11fd90 at process virtual address 0x20065000 [ 38.747331][ T5281] Memory failure: 0x11fd90: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747345][ T5281] Memory failure: 0x11fd90: recovery action for dirty LRU page: Recovered [ 38.747352][ T5281] Injecting memory failure for pfn 0x11fd8f at process virtual address 0x20066000 [ 38.747373][ T5281] Memory failure: 0x11fd8f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747387][ T5281] Memory failure: 0x11fd8f: recovery action for dirty LRU page: Recovered [ 38.747394][ T5281] Injecting memory failure for pfn 0x11fd8e at process virtual address 0x20067000 [ 38.747416][ T5281] Memory failure: 0x11fd8e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747430][ T5281] Memory failure: 0x11fd8e: recovery action for dirty LRU page: Recovered [ 38.747437][ T5281] Injecting memory failure for pfn 0x11fd8d at process virtual address 0x20068000 [ 38.747458][ T5281] Memory failure: 0x11fd8d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747472][ T5281] Memory failure: 0x11fd8d: recovery action for dirty LRU page: Recovered [ 38.747479][ T5281] Injecting memory failure for pfn 0x11fd8c at process virtual address 0x20069000 [ 38.747501][ T5281] Memory failure: 0x11fd8c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747515][ T5281] Memory failure: 0x11fd8c: recovery action for dirty LRU page: Recovered [ 38.747522][ T5281] Injecting memory failure for pfn 0x11fd8b at process virtual address 0x2006a000 [ 38.747543][ T5281] Memory failure: 0x11fd8b: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747558][ T5281] Memory failure: 0x11fd8b: recovery action for dirty LRU page: Recovered [ 38.747565][ T5281] Injecting memory failure for pfn 0x11fd8a at process virtual address 0x2006b000 [ 38.747589][ T5281] Memory failure: 0x11fd8a: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747603][ T5281] Memory failure: 0x11fd8a: recovery action for dirty LRU page: Recovered [ 38.747610][ T5281] Injecting memory failure for pfn 0x11fd89 at process virtual address 0x2006c000 [ 38.747642][ T5281] Memory failure: 0x11fd89: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747656][ T5281] Memory failure: 0x11fd89: recovery action for dirty LRU page: Recovered [ 38.747663][ T5281] Injecting memory failure for pfn 0x11fd88 at process virtual address 0x2006d000 [ 38.747685][ T5281] Memory failure: 0x11fd88: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747699][ T5281] Memory failure: 0x11fd88: recovery action for dirty LRU page: Recovered [ 38.747706][ T5281] Injecting memory failure for pfn 0x11fd87 at process virtual address 0x2006e000 [ 38.747727][ T5281] Memory failure: 0x11fd87: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747742][ T5281] Memory failure: 0x11fd87: recovery action for dirty LRU page: Recovered [ 38.747748][ T5281] Injecting memory failure for pfn 0x11fd86 at process virtual address 0x2006f000 [ 38.747771][ T5281] Memory failure: 0x11fd86: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747785][ T5281] Memory failure: 0x11fd86: recovery action for dirty LRU page: Recovered [ 38.747792][ T5281] Injecting memory failure for pfn 0x11fd85 at process virtual address 0x20070000 [ 38.747813][ T5281] Memory failure: 0x11fd85: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747828][ T5281] Memory failure: 0x11fd85: recovery action for dirty LRU page: Recovered [ 38.747834][ T5281] Injecting memory failure for pfn 0x11fd84 at process virtual address 0x20071000 [ 38.747856][ T5281] Memory failure: 0x11fd84: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.747870][ T5281] Memory failure: 0x11fd84: recovery action for dirty LRU page: Recovered [ 38.747877][ T5281] Injecting memory failure for pfn 0x11fd83 at process virtual address 0x20072000 [ 38.767006][ T5178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.781389][ T5281] Memory failure: 0x11fd83: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781416][ T5281] Memory failure: 0x11fd83: recovery action for dirty LRU page: Recovered [ 38.781427][ T5281] Injecting memory failure for pfn 0x11fd82 at process virtual address 0x20073000 [ 38.781595][ T5281] Memory failure: 0x11fd82: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781614][ T5281] Memory failure: 0x11fd82: recovery action for dirty LRU page: Recovered [ 38.781623][ T5281] Injecting memory failure for pfn 0x11fd81 at process virtual address 0x20074000 [ 38.781655][ T5281] Memory failure: 0x11fd81: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781672][ T5281] Memory failure: 0x11fd81: recovery action for dirty LRU page: Recovered [ 38.781680][ T5281] Injecting memory failure for pfn 0x11fd80 at process virtual address 0x20075000 [ 38.781706][ T5281] Memory failure: 0x11fd80: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781721][ T5281] Memory failure: 0x11fd80: recovery action for dirty LRU page: Recovered [ 38.781729][ T5281] Injecting memory failure for pfn 0x120e1f at process virtual address 0x20076000 [ 38.781753][ T5281] Memory failure: 0x120e1f: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781768][ T5281] Memory failure: 0x120e1f: recovery action for dirty LRU page: Recovered [ 38.781775][ T5281] Injecting memory failure for pfn 0x120e1e at process virtual address 0x20077000 [ 38.781798][ T5281] Memory failure: 0x120e1e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781813][ T5281] Memory failure: 0x120e1e: recovery action for dirty LRU page: Recovered [ 38.781820][ T5281] Injecting memory failure for pfn 0x120e1d at process virtual address 0x20078000 [ 38.781842][ T5281] Memory failure: 0x120e1d: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781857][ T5281] Memory failure: 0x120e1d: recovery action for dirty LRU page: Recovered [ 38.781864][ T5281] Injecting memory failure for pfn 0x120e1c at process virtual address 0x20079000 [ 38.781885][ T5281] Memory failure: 0x120e1c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781900][ T5281] Memory failure: 0x120e1c: recovery action for dirty LRU page: Recovered [ 38.781907][ T5281] Injecting memory failure for pfn 0x120e1b at process virtual address 0x2007a000 [ 38.781928][ T5281] Memory failure: 0x120e1b: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781943][ T5281] Memory failure: 0x120e1b: recovery action for dirty LRU page: Recovered [ 38.781950][ T5281] Injecting memory failure for pfn 0x120e1a at process virtual address 0x2007b000 [ 38.781972][ T5281] Memory failure: 0x120e1a: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.781987][ T5281] Memory failure: 0x120e1a: recovery action for dirty LRU page: Recovered [ 38.781994][ T5281] Injecting memory failure for pfn 0x120e19 at process virtual address 0x2007c000 [ 38.782015][ T5281] Memory failure: 0x120e19: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782030][ T5281] Memory failure: 0x120e19: recovery action for dirty LRU page: Recovered [ 38.782036][ T5281] Injecting memory failure for pfn 0x120e18 at process virtual address 0x2007d000 [ 38.782058][ T5281] Memory failure: 0x120e18: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782072][ T5281] Memory failure: 0x120e18: recovery action for dirty LRU page: Recovered [ 38.782079][ T5281] Injecting memory failure for pfn 0x120e17 at process virtual address 0x2007e000 [ 38.782101][ T5281] Memory failure: 0x120e17: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782116][ T5281] Memory failure: 0x120e17: recovery action for dirty LRU page: Recovered [ 38.782123][ T5281] Injecting memory failure for pfn 0x120e16 at process virtual address 0x2007f000 [ 38.782144][ T5281] Memory failure: 0x120e16: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782158][ T5281] Memory failure: 0x120e16: recovery action for dirty LRU page: Recovered [ 38.782165][ T5281] Injecting memory failure for pfn 0x120e15 at process virtual address 0x20080000 [ 38.782187][ T5281] Memory failure: 0x120e15: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782201][ T5281] Memory failure: 0x120e15: recovery action for dirty LRU page: Recovered [ 38.782208][ T5281] Injecting memory failure for pfn 0x120e14 at process virtual address 0x20081000 [ 38.782230][ T5281] Memory failure: 0x120e14: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782244][ T5281] Memory failure: 0x120e14: recovery action for dirty LRU page: Recovered [ 38.782251][ T5281] Injecting memory failure for pfn 0x120e13 at process virtual address 0x20082000 [ 38.782273][ T5281] Memory failure: 0x120e13: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782287][ T5281] Memory failure: 0x120e13: recovery action for dirty LRU page: Recovered [ 38.782294][ T5281] Injecting memory failure for pfn 0x120e12 at process virtual address 0x20083000 [ 38.782316][ T5281] Memory failure: 0x120e12: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782330][ T5281] Memory failure: 0x120e12: recovery action for dirty LRU page: Recovered [ 38.782337][ T5281] Injecting memory failure for pfn 0x120e11 at process virtual address 0x20084000 [ 38.782359][ T5281] Memory failure: 0x120e11: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782373][ T5281] Memory failure: 0x120e11: recovery action for dirty LRU page: Recovered [ 38.782380][ T5281] Injecting memory failure for pfn 0x12213e at process virtual address 0x20085000 [ 38.782402][ T5281] Memory failure: 0x12213e: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782438][ T5281] Memory failure: 0x12213e: recovery action for dirty LRU page: Recovered [ 38.782446][ T5281] Injecting memory failure for pfn 0x135215 at process virtual address 0x20086000 [ 38.782468][ T5281] Memory failure: 0x135215: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782482][ T5281] Memory failure: 0x135215: recovery action for dirty LRU page: Recovered [ 38.782489][ T5281] Injecting memory failure for pfn 0x122146 at process virtual address 0x20087000 [ 38.782511][ T5281] Memory failure: 0x122146: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782526][ T5281] Memory failure: 0x122146: recovery action for dirty LRU page: Recovered [ 38.782532][ T5281] Injecting memory failure for pfn 0x11fe91 at process virtual address 0x20088000 [ 38.782554][ T5281] Memory failure: 0x11fe91: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782568][ T5281] Memory failure: 0x11fe91: recovery action for dirty LRU page: Recovered [ 38.782575][ T5281] Injecting memory failure for pfn 0x11fe99 at process virtual address 0x20089000 [ 38.782602][ T5281] Memory failure: 0x11fe99: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782617][ T5281] Memory failure: 0x11fe99: recovery action for dirty LRU page: Recovered [ 38.782623][ T5281] Injecting memory failure for pfn 0x134d44 at process virtual address 0x2008a000 [ 38.782645][ T5281] Memory failure: 0x134d44: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782660][ T5281] Memory failure: 0x134d44: recovery action for dirty LRU page: Recovered [ 38.782667][ T5281] Injecting memory failure for pfn 0x122149 at process virtual address 0x2008b000 [ 38.782688][ T5281] Memory failure: 0x122149: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782703][ T5281] Memory failure: 0x122149: recovery action for dirty LRU page: Recovered [ 38.782709][ T5281] Injecting memory failure for pfn 0x11d342 at process virtual address 0x2008c000 [ 38.782731][ T5281] Memory failure: 0x11d342: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782745][ T5281] Memory failure: 0x11d342: recovery action for dirty LRU page: Recovered [ 38.782752][ T5281] Injecting memory failure for pfn 0x122147 at process virtual address 0x2008d000 [ 38.782774][ T5281] Memory failure: 0x122147: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782788][ T5281] Memory failure: 0x122147: recovery action for dirty LRU page: Recovered [ 38.782795][ T5281] Injecting memory failure for pfn 0x11d34c at process virtual address 0x2008e000 [ 38.782817][ T5281] Memory failure: 0x11d34c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782832][ T5281] Memory failure: 0x11d34c: recovery action for dirty LRU page: Recovered [ 38.782839][ T5281] Injecting memory failure for pfn 0x12213c at process virtual address 0x2008f000 [ 38.782862][ T5281] Memory failure: 0x12213c: Sending SIGBUS to syz.1.94:5281 due to hardware memory corruption [ 38.782876][ T5281] Memory failure: 0x12213c: recovery action for dirty LRU page: Recovered [ 38.853396][ T5293] can0: slcan on ttyS3. [ 38.859743][ T5289] syz.2.95: vmalloc error: size 544, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 38.859814][ T5289] CPU: 0 UID: 0 PID: 5289 Comm: syz.2.95 Tainted: G L syzkaller #0 PREEMPT [ 38.859826][ T5289] Tainted: [L]=SOFTLOCKUP [ 38.859829][ T5289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.859834][ T5289] Call trace: [ 38.859837][ T5289] show_stack+0x2c/0x3c (C) [ 38.859854][ T5289] __dump_stack+0x30/0x40 [ 38.859865][ T5289] dump_stack_lvl+0xd8/0x12c [ 38.859875][ T5289] dump_stack+0x1c/0x28 [ 38.859885][ T5289] warn_alloc+0x1c4/0x1d8 [ 38.859896][ T5289] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 38.859905][ T5289] __vmalloc_node_noprof+0xec/0x14c [ 38.859913][ T5289] __vmalloc_noprof+0x64/0x8c [ 38.859921][ T5289] bpf_check+0xd58/0x243c [ 38.859931][ T5289] bpf_prog_load+0xf4c/0x1554 [ 38.859940][ T5289] __sys_bpf+0x7d4/0x82c [ 38.859948][ T5289] __arm64_sys_bpf+0xd0/0xec [ 38.859955][ T5289] invoke_syscall+0x98/0x244 [ 38.859965][ T5289] el0_svc_common+0xec/0x23c [ 38.859975][ T5289] do_el0_svc+0x4c/0x5c [ 38.859984][ T5289] el0_svc+0x64/0x260 [ 38.859993][ T5289] el0t_64_sync_handler+0x44/0x104 [ 38.860002][ T5289] el0t_64_sync+0x198/0x19c [ 38.860011][ T5289] Mem-Info: [ 38.860016][ T5289] active_anon:85 inactive_anon:5179 isolated_anon:0 [ 38.860016][ T5289] active_file:2308 inactive_file:4608 isolated_file:0 [ 38.860016][ T5289] unevictable:768 dirty:1761 writeback:0 [ 38.860016][ T5289] slab_reclaimable:8223 slab_unreclaimable:90008 [ 38.860016][ T5289] mapped:29000 shmem:1229 pagetables:1051 [ 38.860016][ T5289] sec_pagetables:0 bounce:0 [ 38.860016][ T5289] kernel_misc_reclaimable:0 [ 38.860016][ T5289] free:1498784 free_pcp:773 free_cma:7616 [ 38.860036][ T5289] Node 0 active_anon:340kB inactive_anon:20716kB active_file:9232kB inactive_file:18432kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:116000kB dirty:7044kB writeback:0kB shmem:4916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8760kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 38.860056][ T5289] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 38.860079][ T5289] lowmem_reserve[]: 0 0 3650 3650 3650 [ 38.860098][ T5289] Node 0 Normal free:2917248kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:340kB inactive_anon:20716kB active_file:9232kB inactive_file:18432kB unevictable:3072kB writepending:7044kB zspages:72kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:3092kB local_pcp:2376kB free_cma:0kB [ 38.860120][ T5289] lowmem_reserve[]: 0 0 0 0 0 [ 38.860137][ T5289] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 38.860196][ T5289] Node 0 Normal: 1850*4kB (UME) 995*8kB (UME) 710*16kB (UME) 667*32kB (UME) 121*64kB (UME) 42*128kB (UME) 20*256kB (UME) 12*512kB (UM) 10*1024kB (ME) 6*2048kB (UM) 689*4096kB (UM) = 2917120kB [ 38.860273][ T5289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 38.860280][ T5289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 38.860286][ T5289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 38.860293][ T5289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 38.860299][ T5289] 8138 total pagecache pages [ 38.860302][ T5289] 20 pages in swap cache [ 38.860306][ T5289] Free swap = 124836kB [ 38.860309][ T5289] Total swap = 124996kB [ 38.860313][ T5289] 2097152 pages RAM [ 38.860316][ T5289] 0 pages HighMem/MovableOnly [ 38.860319][ T5289] 392568 pages reserved [ 38.860322][ T5289] 8192 pages cma reserved [ 38.860326][ T5289] 144 pages hwpoisoned [ 38.871086][ T4399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.090288][ T5178] veth0_vlan: entered promiscuous mode [ 39.097180][ T5305] virt_wifi0: entered promiscuous mode [ 39.098428][ T5305] batman_adv: batadv0: Adding interface: virt_wifi0 [ 39.098437][ T5305] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.098464][ T5305] batman_adv: batadv0: Interface activated: virt_wifi0 [ 39.110347][ T5296] can0 (unregistered): slcan off ttyS3. [ 39.126905][ T5178] veth1_vlan: entered promiscuous mode [ 39.186599][ T5178] veth0_macvtap: entered promiscuous mode [ 39.187630][ T5178] veth1_macvtap: entered promiscuous mode [ 39.226333][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.227379][ T5178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.247235][ T2967] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247317][ T2967] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247341][ T2967] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247355][ T2967] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.446735][ T5329] loop2: detected capacity change from 0 to 128 [ 39.479450][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.479463][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.494906][ T858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.494917][ T858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.600695][ T5342] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 39.774349][ T5346] tipc: Enabling of bearer rejected, failed to enable media [ 39.865070][ T5359] FAULT_INJECTION: forcing a failure. [ 39.865070][ T5359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.865109][ T5359] CPU: 1 UID: 0 PID: 5359 Comm: syz.1.107 Tainted: G L syzkaller #0 PREEMPT [ 39.865128][ T5359] Tainted: [L]=SOFTLOCKUP [ 39.865132][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 39.865138][ T5359] Call trace: [ 39.865141][ T5359] show_stack+0x2c/0x3c (C) [ 39.865160][ T5359] __dump_stack+0x30/0x40 [ 39.865170][ T5359] dump_stack_lvl+0xd8/0x12c [ 39.865180][ T5359] dump_stack+0x1c/0x28 [ 39.865190][ T5359] should_fail_ex+0x41c/0x590 [ 39.865200][ T5359] should_fail_alloc_page+0xec/0x10c [ 39.865212][ T5359] prepare_alloc_pages+0x194/0x484 [ 39.865219][ T5359] __alloc_frozen_pages_noprof+0x180/0x648 [ 39.865227][ T5359] __alloc_pages_noprof+0x18/0x100 [ 39.865234][ T5359] alloc_pages_bulk_noprof+0x610/0x7d8 [ 39.865241][ T5359] __kasan_populate_vmalloc+0xc0/0x1d0 [ 39.865251][ T5359] alloc_vmap_area+0xdf4/0x13e8 [ 39.865259][ T5359] __get_vm_area_node+0x210/0x32c [ 39.865266][ T5359] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 39.865275][ T5359] __vmalloc_node_noprof+0xec/0x14c [ 39.865283][ T5359] __vmalloc_noprof+0x64/0x8c [ 39.865291][ T5359] bpf_check+0xd58/0x243c [ 39.865301][ T5359] bpf_prog_load+0xf4c/0x1554 [ 39.865310][ T5359] __sys_bpf+0x7d4/0x82c [ 39.865317][ T5359] __arm64_sys_bpf+0xd0/0xec [ 39.865325][ T5359] invoke_syscall+0x98/0x244 [ 39.865335][ T5359] el0_svc_common+0xec/0x23c [ 39.865344][ T5359] do_el0_svc+0x4c/0x5c [ 39.865354][ T5359] el0_svc+0x64/0x260 [ 39.865363][ T5359] el0t_64_sync_handler+0x44/0x104 [ 39.865372][ T5359] el0t_64_sync+0x198/0x19c [ 39.870099][ T4399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.030150][ T5369] netlink: 'syz.1.109': attribute type 11 has an invalid length. [ 40.049995][ T5369] loop1: detected capacity change from 0 to 512 [ 40.051497][ T5369] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.180034][ T4718] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 40.384911][ T5369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.537577][ T5397] Bluetooth: MGMT ver 1.23 [ 40.537766][ T5397] Bluetooth: MGMT ver 1.23 [ 40.541659][ T5397] netlink: 'syz.5.112': attribute type 5 has an invalid length. [ 40.593876][ T4399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.856294][ T4708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.066694][ T5415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 41.077671][ T5415] vlan2: entered allmulticast mode [ 41.077706][ T5415] dummy0: entered allmulticast mode [ 41.077878][ T5415] bridge0: port 3(vlan2) entered blocking state [ 41.082270][ T5415] bridge0: port 3(vlan2) entered disabled state [ 41.082833][ T5415] vlan2: entered promiscuous mode [ 41.082842][ T5415] dummy0: entered promiscuous mode [ 41.241460][ T5424] loop5: detected capacity change from 0 to 512 [ 41.245007][ T5424] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.260345][ T5424] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 41.264371][ T5424] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.118: attempt to clear invalid blocks 2 len 1 [ 41.268852][ T5424] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.277610][ T5424] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 41.278102][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 41.278125][ C0] EXT4-fs (loop5): initial error at time 41: ext4_clear_blocks:876: inode 13 [ 41.278162][ C0] EXT4-fs (loop5): last error at time 41: ext4_clear_blocks:876: inode 13 [ 41.278275][ T5424] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.118: invalid indirect mapped block 1819239214 (level 0) [ 41.278295][ T5424] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.280348][ T5424] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.118: invalid indirect mapped block 1819239214 (level 1) [ 41.280374][ T5424] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 41.301912][ T5424] EXT4-fs (loop5): 1 truncate cleaned up [ 41.302414][ T5424] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.328820][ T5429] loop1: detected capacity change from 0 to 256 [ 41.329145][ T5429] vfat: Unknown parameter 'iocha÷$g¡‡«Âúˆ~<È4!-rset' [ 41.342880][ T5432] FAULT_INJECTION: forcing a failure. [ 41.342880][ T5432] name failslab, interval 1, probability 0, space 0, times 0 [ 41.342919][ T5432] CPU: 1 UID: 0 PID: 5432 Comm: syz.3.120 Tainted: G L syzkaller #0 PREEMPT [ 41.342937][ T5432] Tainted: [L]=SOFTLOCKUP [ 41.342940][ T5432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.342945][ T5432] Call trace: [ 41.342948][ T5432] show_stack+0x2c/0x3c (C) [ 41.342965][ T5432] __dump_stack+0x30/0x40 [ 41.342977][ T5432] dump_stack_lvl+0xd8/0x12c [ 41.342986][ T5432] dump_stack+0x1c/0x28 [ 41.342996][ T5432] should_fail_ex+0x41c/0x590 [ 41.343008][ T5432] should_failslab+0xc4/0x120 [ 41.343019][ T5432] __kmalloc_node_noprof+0x10c/0x6e4 [ 41.343027][ T5432] __vmalloc_node_range_noprof+0x43c/0xe9c [ 41.343036][ T5432] __vmalloc_node_noprof+0xec/0x14c [ 41.343044][ T5432] __vmalloc_noprof+0x64/0x8c [ 41.343052][ T5432] bpf_check+0xd58/0x243c [ 41.343062][ T5432] bpf_prog_load+0xf4c/0x1554 [ 41.343070][ T5432] __sys_bpf+0x7d4/0x82c [ 41.343078][ T5432] __arm64_sys_bpf+0xd0/0xec [ 41.343086][ T5432] invoke_syscall+0x98/0x244 [ 41.343095][ T5432] el0_svc_common+0xec/0x23c [ 41.343105][ T5432] do_el0_svc+0x4c/0x5c [ 41.343114][ T5432] el0_svc+0x64/0x260 [ 41.343124][ T5432] el0t_64_sync_handler+0x44/0x104 [ 41.343132][ T5432] el0t_64_sync+0x198/0x19c [ 41.389907][ T5434] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.118: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 41.392570][ T5434] EXT4-fs error (device loop5): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.5.118: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 41.422640][ T5178] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.436824][ T5438] overlay: ./file1 is not a directory [ 41.595714][ T5454] 9p: Bad value for 'wfdno' [ 41.665859][ T5470] FAULT_INJECTION: forcing a failure. [ 41.665859][ T5470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 41.665901][ T5470] CPU: 1 UID: 0 PID: 5470 Comm: syz.3.131 Tainted: G L syzkaller #0 PREEMPT [ 41.665915][ T5470] Tainted: [L]=SOFTLOCKUP [ 41.665918][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.665923][ T5470] Call trace: [ 41.665925][ T5470] show_stack+0x2c/0x3c (C) [ 41.665942][ T5470] __dump_stack+0x30/0x40 [ 41.665953][ T5470] dump_stack_lvl+0xd8/0x12c [ 41.665963][ T5470] dump_stack+0x1c/0x28 [ 41.665972][ T5470] should_fail_ex+0x41c/0x590 [ 41.665983][ T5470] should_fail_alloc_page+0xec/0x10c [ 41.665994][ T5470] prepare_alloc_pages+0x194/0x484 [ 41.666002][ T5470] __alloc_frozen_pages_noprof+0x180/0x648 [ 41.666009][ T5470] __alloc_pages_noprof+0x18/0x100 [ 41.666016][ T5470] alloc_pages_bulk_noprof+0x610/0x7d8 [ 41.666024][ T5470] __kasan_populate_vmalloc+0xc0/0x1d0 [ 41.666033][ T5470] alloc_vmap_area+0xdf4/0x13e8 [ 41.666041][ T5470] __get_vm_area_node+0x210/0x32c [ 41.666049][ T5470] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 41.666057][ T5470] __vmalloc_node_noprof+0xec/0x14c [ 41.666065][ T5470] __vmalloc_noprof+0x64/0x8c [ 41.666073][ T5470] bpf_check+0xd58/0x243c [ 41.666084][ T5470] bpf_prog_load+0xf4c/0x1554 [ 41.666092][ T5470] __sys_bpf+0x7d4/0x82c [ 41.666100][ T5470] __arm64_sys_bpf+0xd0/0xec [ 41.666107][ T5470] invoke_syscall+0x98/0x244 [ 41.666117][ T5470] el0_svc_common+0xec/0x23c [ 41.666127][ T5470] do_el0_svc+0x4c/0x5c [ 41.666136][ T5470] el0_svc+0x64/0x260 [ 41.666145][ T5470] el0t_64_sync_handler+0x44/0x104 [ 41.666154][ T5470] el0t_64_sync+0x198/0x19c [ 41.767353][ T5469] Injecting memory failure for pfn 0x135001 at process virtual address 0x20001000 [ 41.828111][ T5469] Memory failure: 0x135001: recovery action for dirty LRU page: Recovered [ 42.066097][ T5507] loop5: detected capacity change from 0 to 8192 [ 42.092301][ T5501] ------------[ cut here ]------------ [ 42.092328][ T5501] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6 [ 42.092337][ T5501] index 3 is out of range for type 'const char *const[3]' [ 42.092348][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.3.136 Tainted: G L syzkaller #0 PREEMPT [ 42.092361][ T5501] Tainted: [L]=SOFTLOCKUP [ 42.092365][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.092369][ T5501] Call trace: [ 42.092372][ T5501] show_stack+0x2c/0x3c (C) [ 42.092389][ T5501] __dump_stack+0x30/0x40 [ 42.092401][ T5501] dump_stack_lvl+0xd8/0x12c [ 42.092411][ T5501] dump_stack+0x1c/0x28 [ 42.092420][ T5501] ubsan_epilogue+0x14/0x48 [ 42.092430][ T5501] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 42.092441][ T5501] print_bpf_insn+0x19c4/0x1ee0 [ 42.092450][ T5501] diag_print_insn_context+0x360/0x808 [ 42.092459][ T5501] bpf_diag_source+0x518/0xfd0 [ 42.092466][ T5501] bpf_diag_program_structure+0x1b0/0x250 [ 42.092475][ T5501] check_subprogs+0x510/0x5c0 [ 42.092485][ T5501] bpf_check+0x19a4/0x243c [ 42.092494][ T5501] bpf_prog_load+0xf4c/0x1554 [ 42.092503][ T5501] __sys_bpf+0x7d4/0x82c [ 42.092510][ T5501] __arm64_sys_bpf+0xd0/0xec [ 42.092518][ T5501] invoke_syscall+0x98/0x244 [ 42.092528][ T5501] el0_svc_common+0xec/0x23c [ 42.092537][ T5501] do_el0_svc+0x4c/0x5c [ 42.092547][ T5501] el0_svc+0x64/0x260 [ 42.092556][ T5501] el0t_64_sync_handler+0x44/0x104 [ 42.092565][ T5501] el0t_64_sync+0x198/0x19c [ 42.092573][ T5501] ---[ end trace ]--- [ 42.092577][ T5501] ================================================================== [ 42.092580][ T5501] BUG: KASAN: global-out-of-bounds in print_bpf_insn+0x80c/0x1ee0 [ 42.092588][ T5501] Read of size 8 at addr ffff800086ad37d8 by task syz.3.136/5501 [ 42.092594][ T5501] [ 42.092606][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.3.136 Tainted: G L syzkaller #0 PREEMPT [ 42.092616][ T5501] Tainted: [L]=SOFTLOCKUP [ 42.092619][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.092623][ T5501] Call trace: [ 42.092625][ T5501] show_stack+0x2c/0x3c (C) [ 42.092637][ T5501] __dump_stack+0x30/0x40 [ 42.092647][ T5501] dump_stack_lvl+0xd8/0x12c [ 42.092657][ T5501] print_address_description+0xb0/0x238 [ 42.092664][ T5501] print_report+0x68/0x84 [ 42.092671][ T5501] kasan_report+0x8c/0xc4 [ 42.092679][ T5501] __asan_report_load8_noabort+0x20/0x2c [ 42.092688][ T5501] print_bpf_insn+0x80c/0x1ee0 [ 42.092696][ T5501] diag_print_insn_context+0x360/0x808 [ 42.092704][ T5501] bpf_diag_source+0x518/0xfd0 [ 42.092712][ T5501] bpf_diag_program_structure+0x1b0/0x250 [ 42.092720][ T5501] check_subprogs+0x510/0x5c0 [ 42.092729][ T5501] bpf_check+0x19a4/0x243c [ 42.092739][ T5501] bpf_prog_load+0xf4c/0x1554 [ 42.092747][ T5501] __sys_bpf+0x7d4/0x82c [ 42.092754][ T5501] __arm64_sys_bpf+0xd0/0xec [ 42.092762][ T5501] invoke_syscall+0x98/0x244 [ 42.092771][ T5501] el0_svc_common+0xec/0x23c [ 42.092781][ T5501] do_el0_svc+0x4c/0x5c [ 42.092790][ T5501] el0_svc+0x64/0x260 [ 42.092798][ T5501] el0t_64_sync_handler+0x44/0x104 [ 42.092806][ T5501] el0t_64_sync+0x198/0x19c [ 42.092813][ T5501] [ 42.092814][ T5501] The buggy address belongs to the variable: [ 42.092817][ T5501] bpf_ldsx_string+0x18/0x60 [ 42.092825][ T5501] [ 42.092827][ T5501] The buggy address belongs to a 0-page vmalloc region starting at 0xffff8000869d0000 allocated at declare_kernel_vmas+0x54/0xb4 [ 42.092842][ T5501] The buggy address belongs to the physical page: [ 42.092845][ T5501] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2190d3 [ 42.092852][ T5501] flags: 0x5ffc00000002000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 42.092863][ T5501] raw: 05ffc00000002000 fffffdffc76434c8 fffffdffc76434c8 0000000000000000 [ 42.092868][ T5501] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 42.092872][ T5501] page dumped because: kasan: bad access detected [ 42.092874][ T5501] [ 42.092876][ T5501] Memory state around the buggy address: [ 42.092880][ T5501] ffff800086ad3680: 00 03 f9 f9 f9 f9 f9 f9 00 01 f9 f9 00 00 00 05 [ 42.092884][ T5501] ffff800086ad3700: f9 f9 f9 f9 00 06 f9 f9 00 04 f9 f9 00 05 f9 f9 [ 42.092888][ T5501] >ffff800086ad3780: 00 00 00 06 f9 f9 f9 f9 00 00 00 f9 f9 f9 f9 f9 [ 42.092892][ T5501] ^ [ 42.092895][ T5501] ffff800086ad3800: 00 00 00 00 00 00 00 03 f9 f9 f9 f9 00 00 00 00 [ 42.092900][ T5501] ffff800086ad3880: 01 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 00 04 f9 f9 [ 42.092903][ T5501] ================================================================== [ 42.092907][ T5501] Disabling lock debugging due to kernel taint [ 42.488055][ T4718] Bluetooth: hci3: command tx timeout [ 44.578083][ T4718] Bluetooth: hci3: command tx timeout [ 45.297970][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!