last executing test programs: 13m59.631920911s ago: executing program 2 (id=1048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5d114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) semget$private(0x0, 0x4, 0x24) 13m59.614944302s ago: executing program 2 (id=1051): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) munlock(&(0x7f0000000000/0x4000)=nil, 0x4000) 13m59.494171797s ago: executing program 2 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") 13m59.188931361s ago: executing program 2 (id=1060): syz_mount_image$f2fs(&(0x7f000000e000), &(0x7f0000000080)='./file0\x00', 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x4, 0x550c, &(0x7f00000089c0)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000040400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10002, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 13m55.982805248s ago: executing program 2 (id=1109): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(r2, 0x4068aea3, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) getpgid(r5) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x0, 0x4}}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, &(0x7f0000000500)) sendmmsg$inet6(r0, &(0x7f0000003a40)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000000240)="983a311f7f656012438c7a70716a6e44fc4b70b6834ada2540723aa49cad8ccdfb20e9ec08225f471518ecf53c21bfdbc90e38ce4e133f3b67c8dbb7380c0a3d48d83a46664c698c761df1117672f0da52223a4dcd60a701d9e340ba7215d4e075cf685e2bf707bf9b52b20b74352534be1e9f622d5f6260b48f98e61c21805395409a42685786a9feb6d2f0f605641fcfda1b56699d1c63ce701007fe161ae38d40d9475019ba3057f5cfa54d99f500c9796a2d7d", 0xb5}, {&(0x7f0000000440)="06dccd", 0x3}], 0x3, &(0x7f0000000540)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}, @flowinfo={{0x14, 0x29, 0xb, 0xa13}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2c, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @enc_lim={0x4, 0x1, 0x1}]}}}], 0xc8}}, {{&(0x7f0000000640)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000700)=[{0x0}, {&(0x7f00000006c0)="a727fca3b4f9ff815e51197a270c2b393bbb217be3859c2f785ce2", 0x1b}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="1400000000000000290000003e0000000000000000000000a00000000000000029000000360000007311000000000000c910fc0000000000000000000000000000010401010738000000010c0508000d0c0000000f0000180c0000000000007f09000000000000050000000000000000000000000080050000000000000001020000050200040502000304018d07280000000308000dbbfcffffffffffffff40000000000000000700000000000000f3f1ffffffffffff140000000000000029000000340000000000000000000000140000004000000029000000340000000300000000000000140000000000ba2de962000034000000020000000000000000"], 0x100}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000880)="8741453fec2ede154f334cc51feec9f93fdb685808da26a3a8040b86d53c414ab032558204a7ceb890a1a8b1e8e21ccbfdfa5c4811d1123603", 0x39}, {&(0x7f00000008c0)="89ebd90bdc2ecf579558a7accd3c804d2c837bf2becef61e1736df203ee780b35b11095a04af6e9b8d1bafa45549fac155ac512aac6691e0fb3181f7e6c3f5e18f6366", 0x43}, {&(0x7f0000000940)="cc022e6943b10c12ef29404812be356757414f8dead7fbe0a11288bb4c0bbc5c7de53e94c1a86a3d9b032166c3f62c2a55e5332eb35eeca0837f0e1761cc6b021e87cfa04e9f3c8456404efee172a6661f0aff2538889d1bdcd18e5037", 0x5d}, {0x0}, {&(0x7f0000000a80)="e86f2edb88d940a1bc708e090280e79513c199cdb339ebccf442114093b971bb76991510379bc38d6c40e93a35b860980f53f66d1ff8acb00ef7c7b12455733d895b8e7d45d4bcf6700f83674eb0216a6e69d414f55334e3c836fd593132611bb1e1a6f00b07ea92cc12738904d69d1cd74c9a575140f7d8", 0x78}, {&(0x7f0000000b00)="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", 0xfb}, {&(0x7f0000000c00)="d8cfd007ea1531dd80b6d7f354615d9bc415259acae431fe66ecd6225a9028f2d2b605b95b466b0cac1dcc086c74057541d4cd02d0934764b9eb9ebacd6bd0edcdd77b9c9d41ab913a0ef808978dab4bf04bad725ec731dc8f0ed8474e3f9f93f86e3134c5c8017edecf919d2f934328", 0x70}, {&(0x7f0000001d40)="a9819d7e3914ed5cc92ab3c72090eb92a1611be5f24c47ed291fefeb88be07c7ff1e232ef9881b99142256abfce7c913048967822485d4eed5d09f04705463753a7b0d086d8c8ce331abde500137763905b6dbc6b4d4e0c013203d503d3c729b050064", 0x63}], 0x8, &(0x7f0000001e40)=[@flowinfo={{0x14, 0x29, 0xb, 0x40}}], 0x18}}, {{&(0x7f0000001e80)={0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000003080)=[{0x0}, {&(0x7f0000002f80)="addddec0a2a7305e1c124b187fbf1c037cc959abae56bcc1a6e336417abf6f9973101954d2ea2fef20f826e89d0b89c3536433aee61f8d9aef24693595f15fb0bc3c6e884548c827008493f41e9bb6bd8f0719bebe5d50398c377a6057e606f020090c3c8e925af261137a4af85818ceaf58837cffdc8de67413a1dbff51d87448b2df7d2d", 0x85}, {&(0x7f0000003040)="621a66b6cb9c29c32e08e9c622eb950d03ee0d4cf6dd627f5813ac47883bfd6aaec1b7f4a115bbab582266db8aa2e49d8b6e9d20788cbc1e17921447ef", 0x3d}], 0x3, &(0x7f00000030c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x207}}, @dontfrag={{0x14, 0x29, 0x3e, 0x124c}}], 0x30}}, {{&(0x7f0000003200)={0xa, 0x4e22, 0x1b8c, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff8}, 0x1c, &(0x7f0000003380)=[{&(0x7f0000003240)="f64aa5c9a8123ea09e7b78b2d261bff5320586ffa32f9ca56d2e004fd7e00cefb3b131a4", 0x24}, {&(0x7f0000003280)="e084e0db9cb9b7e49dd0dd963e0d5947f23963c762692475c33edf4e924d00f17b785052a5b28b128296c2b9b9b4c681cfe47bc8dbde4041ab49d21491029ba8a59c8e571e08c52844fe40ed0300062d6bc453a26740f5ea5ccff9070f410c568e4cb955fc0b19e1a1db48b99533ef01d56ea2b10c080c89bf192da6ac87b72540a86acd960dae412786164593792b9de42fad45178e508ac778deb9c45ad04c54c423ddd04819261d621082d0b6e30448e6cfbc109b3fde014af83a440aa430bde209d29ec4a7511c490b06ea2ac2c97977e61a9ab42f4c090017cf18b1b776df7662fe6d3d06", 0xe7}], 0x2, &(0x7f00000033c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x13a0000}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xa7}, @padn={0x1, 0x1, [0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}], 0x70}}, {{&(0x7f0000003440)={0xa, 0x4e23, 0xb3, @mcast2, 0x81}, 0x1c, &(0x7f00000037c0)=[{&(0x7f0000003480)="273e5e09ee8e5393ca6e66a0fc038215767e39e69640b1f49081b4fc4b069a894e9e46beaee76a262201f4a18d4dbd8941732911cb91b01909776630f4877198541dffe033583c5c938b29968a73c102ca33", 0x52}, {&(0x7f0000003500)="aa42d780383f0ba9875f9eb667094b4ce64c75eae9422409dabd3bdbbdfc14bddeaf4b3aeb0fa5c48e7302d023b60a027bfbe350350f42c410bbe4f85952cc35a37d297e1ceb049c4a021349b0ef8cdd011868fd2c0d02fe7841e35d49ea0368b36c2a40bc3f5b1b90d3a0076acf141ce8000a3b8f4e13a0a810b1199e25508362cec385b263f2f5e39b0aac1081c21455512933e5bab728780ada10718a00826900e46c87c9dee89398c54794976f8ee4881c350dd2c44b39d8fb1bcf519daa8c09cc459ccf25962e09091519aed58c036eb2436861c0ebfeb8cc2d74852e9e33c845c2dcb8d93f5d2a54c84fcc700305f5777c", 0xf4}, {&(0x7f0000003600)="f43266bf2aa21ef05caba98e0146173b1920357bbc7ff9f9a8d9260bb35e7980b6f3597330b902b1f1e975a494f2ae6b68081baa3edbc32a7f813252b27be0f90294877b12112f0d994e3451df5c4ef0e3a05874792c4854a1a4452f35872975c3b578a8bfd16715cd866be5fe0bdb4f29858e8777d77487e89860b241cf0dca23936f8c64613b1c68e10cdeda83a9753103b99282cf82299869328ad420f242f43fdcd64fb7b4b17ff75e23c7f78c0cd3728311c53b335479f94f1a7f21b715e8e8aa67def84c0d4e0446868a73139353b030863abe24a13e6591", 0xdb}, {&(0x7f0000003700)="98f412934ad5b10052ec75207ee9a970a2c125ee5eb1860c97d7c4416f9dc274521c15ff94e375aa40c44365dd79b76a9ade684a848efe89ac0c7eaf3e73fd68e7133e9c36acfaf5658f3a59cdb68c685bc487507ca7127777b1995b0f98a588943cb826925d1d68ec8fbb2f9b3cc919abd580732ddc9911f26266d5abc8dc08f3d964a5a223a7f1053dfee47cc6677493d2fc23", 0x94}], 0x4, &(0x7f0000003800)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hopopts={{0x1a8, 0x29, 0x36, {0x2f, 0x31, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @ra={0x5, 0x2, 0xfffa}, @generic={0x1, 0x97, "64c45d14eac66d85ece8b2ecd49bb8cd1693b1a7c0248e8cf65226863f4392b3975f5c50d4f98b841555e15aaf3e9c07e62490d6be7dd2a5bc89b2d1ad0d69f64f0f8216d987b43c646149255f0ea8030d2917ed74878ed8ae9ef7e533c26741c649b2ce6327cb3a2fc96e22110c1940c426dc258c523aafaec5db780d19cfa9cc8112868a2fe51840459f5d4f265699887c8410cd8e7d"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x2, [0xd]}}, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0xfff9, [0x1ff, 0xb3cc, 0x80000001, 0xb0ea, 0x81]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x5, 0x9, [0x101, 0x9, 0x120, 0x100000000, 0x6, 0x81]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0xf, 0x0, [0xc, 0x3, 0x0, 0x3, 0x100000000, 0x1, 0x8000, 0x7fffffff, 0x0, 0x7fffffffffffffff]}}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x80}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}}}}], 0x208}}], 0x6, 0x4) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) bind$packet(r9, &(0x7f0000000d00)={0x11, 0x1a, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000140)={0x2, 0x4}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 13m53.435748508s ago: executing program 2 (id=1126): r0 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m53.307223553s ago: executing program 32 (id=1126): r0 = syz_usb_connect(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m43.911963574s ago: executing program 5 (id=2178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockname(r2, 0x0, &(0x7f0000000b00)) 12m43.863449196s ago: executing program 5 (id=2180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b000000000000000000000000800000", @ANYBLOB="00000000d36c66ecc053c543da2e"], 0x48) 12m43.75952417s ago: executing program 5 (id=2182): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) futex(0x0, 0xd, 0x2, &(0x7f0000000240), 0x0, 0x2) 12m43.599751547s ago: executing program 5 (id=2186): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x1a0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x121) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 12m43.137746757s ago: executing program 5 (id=2196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) 12m41.943397158s ago: executing program 5 (id=2210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) 12m41.815735013s ago: executing program 33 (id=2210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) 1.85195118s ago: executing program 1 (id=20585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', 0x0}) 1.771828094s ago: executing program 1 (id=20589): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x4000172, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000008bc0)={0x2c, 0x24, 0x1, 0x8070bd2a, 0x25dfdbfe, {0x1}, [@nested={0x18, 0x2f, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @u32=0x10}, @nested={0xc, 0x5c, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @u32=0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.675947548s ago: executing program 1 (id=20592): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_clone3(&(0x7f0000000540)={0x120004000, 0x0, 0x0, 0x0, {0x3d}, &(0x7f0000000380)=""/248, 0xf8, 0x0, 0x0, 0x0, {r1}}, 0x58) 938.279179ms ago: executing program 4 (id=20608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 820.823634ms ago: executing program 4 (id=20611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 715.736809ms ago: executing program 1 (id=20614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) 672.644351ms ago: executing program 6 (id=20615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0xb, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r4], 0x118) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x0, @empty}, 0x2a0}) 672.385181ms ago: executing program 3 (id=20616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r6 = socket(0x2, 0x3, 0x100000001) setsockopt(r6, 0xff, 0x1, 0x0, 0x0) 657.195402ms ago: executing program 0 (id=20617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009800)=[{{0x0, 0x0, &(0x7f0000000880)=[{0x0}, {0x0}, {&(0x7f0000000780)=""/212, 0xd4}], 0x3}, 0x81}], 0x1, 0x2142, 0x0) 563.906156ms ago: executing program 3 (id=20618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 562.637176ms ago: executing program 0 (id=20619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$netlink(0x10, 0x3, 0x0) 516.130348ms ago: executing program 6 (id=20620): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x6, 0x0, 0x0) 482.474969ms ago: executing program 4 (id=20621): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0xa) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, r5, 0x0) 439.843051ms ago: executing program 3 (id=20622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 437.805281ms ago: executing program 0 (id=20623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) 382.865373ms ago: executing program 6 (id=20624): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0xd) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) 373.426914ms ago: executing program 4 (id=20625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 373.070764ms ago: executing program 1 (id=20626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 325.902396ms ago: executing program 0 (id=20627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) 243.889849ms ago: executing program 3 (id=20628): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r3, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) 243.70908ms ago: executing program 6 (id=20629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) 243.56735ms ago: executing program 4 (id=20630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) 206.302311ms ago: executing program 0 (id=20631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x54404d0a08a4d8, 0x4}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x80, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 192.531971ms ago: executing program 3 (id=20632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 131.876714ms ago: executing program 1 (id=20633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r5, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 131.162024ms ago: executing program 6 (id=20634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES8, @ANYRES8=r1, @ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) 130.887334ms ago: executing program 4 (id=20635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) 91.613826ms ago: executing program 0 (id=20636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000e617110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 77.975997ms ago: executing program 3 (id=20637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) recvfrom(r2, &(0x7f0000001300)=""/4096, 0x1000, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 0s ago: executing program 6 (id=20638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r5, 0x65, 0x1, &(0x7f0000000080), 0x1d0) kernel console output (not intermixed with test programs): z.1.12240'. [ 690.575330][T32399] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 691.059253][T32429] netlink: 'syz.1.12260': attribute type 4 has an invalid length. [ 691.103205][T32429] netlink: 'syz.1.12260': attribute type 4 has an invalid length. [ 691.812724][T32494] tmpfs: Unknown parameter 'nosw' [ 692.841021][T32570] netlink: 'syz.6.12326': attribute type 4 has an invalid length. [ 692.896173][T32570] netlink: 'syz.6.12326': attribute type 5 has an invalid length. [ 692.908143][T32570] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.12326'. [ 693.338010][T32592] futex_wake_op: syz.4.12333 tries to shift op by 32; fix this program [ 694.188164][T32650] netlink: 'syz.3.12364': attribute type 4 has an invalid length. [ 694.255791][T32661] netlink: 'syz.3.12364': attribute type 4 has an invalid length. [ 694.582159][T32689] overlayfs: missing 'lowerdir' [ 694.634702][T20141] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 694.677804][T17267] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 694.911984][T20141] usb 5-1: Using ep0 maxpacket: 16 [ 695.082747][T20141] usb 5-1: unable to get BOS descriptor or descriptor too short [ 695.157323][T17267] usb 1-1: unable to get BOS descriptor or descriptor too short [ 695.168038][T20141] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 695.186526][T20141] usb 5-1: config 13 has no interface number 0 [ 695.218579][T20141] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 695.229296][T20141] usb 5-1: config 13 interface 50 has no altsetting 0 [ 695.231638][T17267] usb 1-1: not running at top speed; connect to a high speed hub [ 695.348962][T17267] usb 1-1: config 1 has an invalid interface number: 138 but max is 0 [ 695.361777][T17267] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 695.384299][T17267] usb 1-1: config 1 has no interface number 0 [ 695.393623][T17267] usb 1-1: config 1 interface 138 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 695.408951][T32742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12409'. [ 695.415451][T17267] usb 1-1: config 1 interface 138 has no altsetting 0 [ 695.418802][T20141] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 695.435568][T20141] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.449468][T20141] usb 5-1: Product: syz [ 695.457183][T20141] usb 5-1: Manufacturer: syz [ 695.464233][T20141] usb 5-1: SerialNumber: syz [ 695.498286][T32666] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 695.636860][T17267] usb 1-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 695.646680][T17267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.655037][T17267] usb 1-1: Product: syz [ 695.659525][T17267] usb 1-1: Manufacturer: syz [ 695.664137][T17267] usb 1-1: SerialNumber: syz [ 695.707089][T32758] device batadv_slave_1 entered promiscuous mode [ 695.714754][T32757] device batadv_slave_1 left promiscuous mode [ 695.903464][T20141] usb 5-1: MIDIStreaming interface descriptor not found [ 695.982134][T20141] usb 5-1: USB disconnect, device number 20 [ 696.050816][T17267] debugfs: Directory 'card3' with parent 'sound' already present! [ 696.152272][ T307] netlink: 'syz.3.12424': attribute type 4 has an invalid length. [ 696.179813][ T307] netlink: 'syz.3.12424': attribute type 4 has an invalid length. [ 696.200982][T17267] usb 1-1: USB disconnect, device number 9 [ 696.483259][ T4410] udevd[4410]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 697.018573][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12448'. [ 697.263291][ T361] team0 (unregistering): Port device team_slave_0 removed [ 697.307604][ T361] team0 (unregistering): Port device team_slave_1 removed [ 697.459273][ T374] netlink: 'syz.1.12454': attribute type 4 has an invalid length. [ 697.481701][ T374] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.12454'. [ 697.641478][ T389] overlayfs: failed to clone upperpath [ 697.961227][ T412] netlink: 368 bytes leftover after parsing attributes in process `syz.3.12472'. [ 698.275791][ T433] netlink: 536 bytes leftover after parsing attributes in process `syz.3.12481'. [ 698.301013][ T433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12481'. [ 698.433092][ T437] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.552169][ T442] netlink: 'syz.3.12484': attribute type 4 has an invalid length. [ 698.598170][ T442] netlink: 'syz.3.12484': attribute type 4 has an invalid length. [ 699.276222][ T484] mkiss: ax0: crc mode is auto. [ 699.351526][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 699.351541][ T26] audit: type=1326 audit(2000000014.551:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.485506][ T492] netlink: 'syz.4.12509': attribute type 4 has an invalid length. [ 699.507411][ T26] audit: type=1326 audit(2000000014.551:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.564116][ T492] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12509'. [ 699.605074][ T26] audit: type=1326 audit(2000000014.560:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.682724][ T26] audit: type=1326 audit(2000000014.560:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.776509][ T26] audit: type=1326 audit(2000000014.560:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.859857][ T26] audit: type=1326 audit(2000000014.560:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 699.876336][ T509] overlayfs: statfs failed on './file0' [ 699.928650][ T509] overlayfs: statfs failed on './file0' [ 699.960359][ T26] audit: type=1326 audit(2000000014.560:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 700.012496][ T26] audit: type=1326 audit(2000000014.560:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 700.096469][ T26] audit: type=1326 audit(2000000014.560:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 700.177227][ T26] audit: type=1326 audit(2000000014.560:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=487 comm="syz.0.12507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 700.331474][ T532] 9pnet: Could not find request transport: 0x0000000000000004 [ 700.554948][ T545] netlink: 'syz.1.12535': attribute type 4 has an invalid length. [ 700.590666][ T545] netlink: 'syz.1.12535': attribute type 4 has an invalid length. [ 701.784946][ T630] netlink: 'syz.6.12570': attribute type 4 has an invalid length. [ 701.817786][ T630] netlink: 'syz.6.12570': attribute type 4 has an invalid length. [ 701.893853][ T633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12576'. [ 701.944100][ T633] netlink: 116 bytes leftover after parsing attributes in process `syz.0.12576'. [ 702.725954][ T642] tmpfs: Unknown parameter 'noswap' [ 703.094776][ T666] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12590'. [ 703.139189][ T666] tc_dump_action: action bad kind [ 703.881610][ T733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12623'. [ 704.365052][ T770] loop3: detected capacity change from 0 to 128 [ 704.611401][T17267] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 704.651330][ T787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12649'. [ 704.706020][ T791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12651'. [ 704.737132][ T791] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12651'. [ 704.899138][T17267] usb 1-1: Using ep0 maxpacket: 32 [ 704.977583][ T809] 9pnet: Insufficient options for proto=fd [ 705.059609][T17267] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.090486][T17267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 705.109611][T17267] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 705.122227][T17267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.161414][T17267] usb 1-1: config 0 descriptor?? [ 705.214087][ T822] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 705.398937][ T839] loop3: detected capacity change from 0 to 1024 [ 705.703555][T17267] aquacomputer-d5next 0003:0C70:F00E.0005: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 706.207817][ T882] udc-core: couldn't find an available UDC or it's busy [ 706.222577][ T882] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 706.268088][ T874] loop3: detected capacity change from 0 to 32768 [ 706.323064][T17267] usb 1-1: USB disconnect, device number 10 [ 706.534677][ T874] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 706.571986][ T896] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12694'. [ 706.788733][ T4185] (syz-executor,4185,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 706.823638][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 706.913057][ T920] device batadv_slave_1 entered promiscuous mode [ 706.921487][ T919] device batadv_slave_1 left promiscuous mode [ 706.930352][ T916] netlink: 'syz.1.12704': attribute type 4 has an invalid length. [ 707.621676][ T971] Invalid ELF header magic: != ELF [ 707.869094][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 707.869109][ T26] audit: type=1326 audit(2000000278.543:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 707.907092][ T991] loop0: detected capacity change from 0 to 128 [ 707.914619][ T26] audit: type=1326 audit(2000000278.572:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 707.943934][ T26] audit: type=1326 audit(2000000278.572:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 707.999473][ T26] audit: type=1326 audit(2000000278.572:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 708.040488][ T991] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 708.052066][ T991] ext4 filesystem being mounted at /2612/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 708.119935][ T26] audit: type=1326 audit(2000000278.572:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 708.142814][ T26] audit: type=1326 audit(2000000278.572:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 708.166135][ T26] audit: type=1326 audit(2000000278.572:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 708.255990][ T26] audit: type=1326 audit(2000000278.572:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 708.279302][ T26] audit: type=1326 audit(2000000278.572:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe271069783 code=0x7ffc0000 [ 708.323789][ T26] audit: type=1326 audit(2000000278.581:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=988 comm="syz.0.12737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe2710681ff code=0x7ffc0000 [ 708.495039][ T1027] overlayfs: missing 'workdir' [ 709.030740][ T1078] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12772'. [ 709.058887][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12773'. [ 709.068256][ T1082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12773'. [ 709.097798][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12773'. [ 709.119336][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12773'. [ 710.855417][ T1230] netlink: 80 bytes leftover after parsing attributes in process `syz.3.12831'. [ 711.344805][ T1267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12849'. [ 711.765258][ T1297] netlink: 'syz.0.12863': attribute type 11 has an invalid length. [ 711.803425][ T1297] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.12863'. [ 712.779018][ T1362] hugetlbfs: syz.4.12892 (1362): Using mlock ulimits for SHM_HUGETLB is deprecated [ 713.062909][ T1385] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12903'. [ 713.081127][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 713.087481][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 713.417882][ T1418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12917'. [ 713.719348][ T1440] overlayfs: missing 'lowerdir' [ 713.931756][ T1455] netlink: 'syz.6.12933': attribute type 4 has an invalid length. [ 713.996643][ T1466] netlink: 'syz.6.12933': attribute type 4 has an invalid length. [ 714.706440][ T1513] netlink: 'syz.3.12958': attribute type 4 has an invalid length. [ 714.757341][ T1513] netlink: 'syz.3.12958': attribute type 4 has an invalid length. [ 715.423844][ T1575] __nla_validate_parse: 1 callbacks suppressed [ 715.423861][ T1575] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12985'. [ 716.816914][ T1621] netlink: 'syz.4.13006': attribute type 4 has an invalid length. [ 716.872011][ T1621] netlink: 'syz.4.13006': attribute type 4 has an invalid length. [ 716.904561][ T1632] 9pnet: p9_errstr2errno: server reported unknown error [ 716.947914][ T1638] x_tables: duplicate underflow at hook 1 [ 717.234302][ T1659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13023'. [ 717.372335][ T1662] loop0: detected capacity change from 0 to 1024 [ 717.538423][ T1662] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 717.577355][ T1662] ext4 filesystem being mounted at /2679/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.643529][ T1662] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.13025: inode has both inline data and extents flags [ 717.961209][ T1701] binder: 1700:1701 ioctl c0306201 2000000004c0 returned -22 [ 718.054997][ T1706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13045'. [ 718.397515][ T1731] netlink: 536 bytes leftover after parsing attributes in process `syz.3.13057'. [ 718.489744][ T1731] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13057'. [ 720.518882][ T1798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13084'. [ 721.723461][ T1884] overlayfs: missing 'lowerdir' [ 722.150514][ T1905] loop0: detected capacity change from 0 to 2048 [ 722.313723][ T1905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 722.361642][ T1905] ext4 filesystem being mounted at /2704/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 723.355962][ T1963] XFS (nullb0): Invalid superblock magic number [ 724.678687][ T1989] overlayfs: failed to clone lowerpath [ 726.002234][ T2065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13204'. [ 726.057445][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13205'. [ 726.246272][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13205'. [ 726.585099][ T2067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13205'. [ 726.639638][ T2099] netlink: 'syz.0.13213': attribute type 27 has an invalid length. [ 726.914613][ T2115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13220'. [ 727.587738][ T2157] overlayfs: failed to clone lowerpath [ 728.331775][ T2198] loop0: detected capacity change from 0 to 512 [ 728.481050][ T2198] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 728.508140][ T2198] ext4 filesystem being mounted at /2727/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.566857][ T2195] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #2: comm syz.0.13257: corrupted inode contents [ 728.662123][ T2195] EXT4-fs error (device loop0): ext4_dirty_inode:6054: inode #2: comm syz.0.13257: mark_inode_dirty error [ 728.727509][ T2195] EXT4-fs error (device loop0): ext4_do_update_inode:5218: inode #2: comm syz.0.13257: corrupted inode contents [ 728.763902][ T2195] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.13257: mark_inode_dirty error [ 728.824601][ T2226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13268'. [ 728.909244][ T2162] loop4: detected capacity change from 0 to 65536 [ 729.624301][ T2272] netlink: 'syz.4.13288': attribute type 4 has an invalid length. [ 729.675109][ T2262] netlink: 'syz.4.13288': attribute type 4 has an invalid length. [ 731.068837][ T2363] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13334'. [ 731.217041][ T2371] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13338'. [ 731.259247][ T2371] tipc: Enabling of bearer rejected, failed to enable media [ 731.365491][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13341'. [ 731.547911][ T2394] netlink: 'syz.6.13343': attribute type 4 has an invalid length. [ 731.602449][ T2384] netlink: 'syz.6.13343': attribute type 4 has an invalid length. [ 731.786649][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 731.786663][ T26] audit: type=1326 audit(2000000300.976:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2402 comm="syz.4.13349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc93fb5c749 code=0x0 [ 731.815084][ T4199] Bluetooth: hci3: link tx timeout [ 731.820224][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 731.828172][ T4199] Bluetooth: hci3: link tx timeout [ 731.833303][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 731.868479][ T2408] netlink: 72 bytes leftover after parsing attributes in process `syz.6.13352'. [ 732.542880][ T26] audit: type=1326 audit(2000000301.689:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2455 comm="syz.0.13369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 732.569749][ T26] audit: type=1326 audit(2000000301.717:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2455 comm="syz.0.13369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 732.630013][ T26] audit: type=1326 audit(2000000301.745:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2455 comm="syz.0.13369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 732.671818][ T26] audit: type=1326 audit(2000000301.745:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2455 comm="syz.0.13369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 732.737145][ T26] audit: type=1326 audit(2000000301.745:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2455 comm="syz.0.13369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 733.567229][ T2555] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13403'. [ 733.645640][ T21] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 733.799382][ T2570] netlink: 'syz.1.13410': attribute type 4 has an invalid length. [ 733.825532][ T2577] block nbd0: NBD_DISCONNECT [ 733.833764][ T2570] netlink: 'syz.1.13410': attribute type 4 has an invalid length. [ 734.056461][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.078460][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.091804][ T2592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3626864364 (464238638592 ns) > initial count (392375765760 ns). Using initial count to start timer. [ 734.098708][ T21] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 734.126086][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.163071][ T21] usb 7-1: config 0 descriptor?? [ 734.541039][ T21] usbhid 7-1:0.0: can't add hid device: -71 [ 734.547473][ T21] usbhid: probe of 7-1:0.0 failed with error -71 [ 734.588828][ T21] usb 7-1: USB disconnect, device number 10 [ 734.867600][ T2650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.13439'. [ 736.038861][ T2647] loop3: detected capacity change from 0 to 40427 [ 736.240590][ T2647] F2FS-fs (loop3): invalid crc value [ 736.276484][ T2647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 737.159770][ T2647] F2FS-fs (loop3): Start checkpoint disabled! [ 737.192134][ T2647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 737.655600][ T144] attempt to access beyond end of device [ 737.655600][ T144] loop3: rw=2049, want=40976, limit=40427 [ 737.675722][ T2723] netlink: 'syz.6.13464': attribute type 4 has an invalid length. [ 737.725410][ T2723] netlink: 'syz.6.13464': attribute type 4 has an invalid length. [ 738.524742][ T2794] binder: Unknown parameter 'fscontext?' [ 738.717023][ T2802] binder: 2801:2802 ioctl 4018620d 0 returned -22 [ 739.132607][ T26] audit: type=1326 audit(2000000307.872:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.212043][ T26] audit: type=1326 audit(2000000307.900:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.291782][ T26] audit: type=1326 audit(2000000307.909:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.382456][ T26] audit: type=1326 audit(2000000307.909:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.496945][ T26] audit: type=1326 audit(2000000307.909:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.561828][ T26] audit: type=1326 audit(2000000307.928:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.589904][ T26] audit: type=1326 audit(2000000307.937:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.621428][ T26] audit: type=1326 audit(2000000307.947:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 739.696560][ T2839] loop6: detected capacity change from 0 to 1024 [ 740.347786][ T26] audit: type=1326 audit(2000000307.947:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 740.651380][ T26] audit: type=1326 audit(2000000308.069:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2817 comm="syz.3.13496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 741.091301][ T2856] overlayfs: failed to clone upperpath [ 742.091072][ T2903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13531'. [ 742.117542][ T2903] device bridge_slave_1 left promiscuous mode [ 742.130111][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.200311][ T2903] device bridge_slave_0 left promiscuous mode [ 742.217701][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.329965][ T2894] loop6: detected capacity change from 0 to 32768 [ 742.379711][ T4411] loop6: p1 p3 < p5 > [ 742.385264][ T4411] loop6: partition table partially beyond EOD, truncated [ 742.417380][ T2894] loop6: p1 p3 < p5 > [ 742.426045][ T2894] loop6: partition table partially beyond EOD, truncated [ 742.497356][ T3107] tipc: Subscription rejected, illegal request [ 742.651765][ T2922] overlayfs: missing 'lowerdir' [ 742.835693][ T6525] udevd[6525]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 742.836073][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 742.852136][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 742.919525][ T6525] udevd[6525]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 742.926408][ T4330] udevd[4330]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 742.942826][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 743.372901][ T2964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13551'. [ 743.695643][ T2983] loop3: detected capacity change from 0 to 128 [ 744.921291][ T3061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13596'. [ 745.417171][ T3092] netlink: 'syz.3.13610': attribute type 4 has an invalid length. [ 745.457382][ T3092] netlink: 'syz.3.13610': attribute type 4 has an invalid length. [ 745.696656][ T3119] bridge0: port 3(hsr_slave_1) entered blocking state [ 745.723866][ T3119] bridge0: port 3(hsr_slave_1) entered disabled state [ 745.802610][ T3129] loop6: detected capacity change from 0 to 2048 [ 745.811769][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 745.811783][ T26] audit: type=1326 audit(2000000314.139:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3118 comm="syz.3.13622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7fc00000 [ 746.122470][ T3142] loop4: detected capacity change from 0 to 1024 [ 746.148464][ T3142] EXT4-fs (loop4): Ignoring removed oldalloc option [ 746.160021][ T3146] netlink: 80 bytes leftover after parsing attributes in process `syz.6.13635'. [ 746.239260][ T3142] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc=0x00000000000000e6,oldalloc,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 746.274413][ T3142] ext4 filesystem being mounted at /2599/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.419727][ T3165] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13643'. [ 746.614812][ T3178] binder: 3177:3178 ioctl c0306201 0 returned -14 [ 746.641824][ T3173] netlink: 'syz.1.13645': attribute type 4 has an invalid length. [ 746.699922][ T3173] netlink: 'syz.1.13645': attribute type 4 has an invalid length. [ 747.157768][ T3216] netlink: 'syz.1.13666': attribute type 22 has an invalid length. [ 747.167629][ T3216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13666'. [ 747.225536][ T3216] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.235530][ T3216] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.244369][ T3216] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.253470][ T3216] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.292180][ T3216] netlink: 'syz.1.13666': attribute type 22 has an invalid length. [ 747.325782][ T3216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13666'. [ 747.507930][ T3234] netlink: 'syz.1.13676': attribute type 4 has an invalid length. [ 747.544941][ T3234] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.13676'. [ 748.239598][T20141] Bluetooth: hci5: command 0x1003 tx timeout [ 748.254952][ T3138] Bluetooth: hci5: sending frame failed (-49) [ 749.287119][ T3315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13712'. [ 749.334930][ T3315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13712'. [ 749.360682][ T3315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13712'. [ 749.383412][ T3315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13712'. [ 749.474591][ T3321] netlink: 'syz.1.13715': attribute type 4 has an invalid length. [ 749.505064][ T26] audit: type=1326 audit(2000000317.601:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3324 comm="syz.4.13716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7fc00000 [ 749.529257][ T3328] netlink: 'syz.1.13715': attribute type 4 has an invalid length. [ 750.074197][ T3365] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13735'. [ 750.411641][ T6736] Bluetooth: hci5: command 0x1001 tx timeout [ 750.417755][ T3138] Bluetooth: hci5: sending frame failed (-49) [ 750.476381][ T3385] netlink: 'syz.6.13744': attribute type 4 has an invalid length. [ 752.195844][ T3463] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13780'. [ 752.292663][ T3474] futex_wake_op: syz.1.13783 tries to shift op by 144; fix this program [ 752.419002][ T3478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13785'. [ 752.628452][ T6736] Bluetooth: hci5: command 0x1009 tx timeout [ 752.713121][ T3494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13792'. [ 752.968341][ T3509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13797'. [ 753.795354][ T3554] loop3: detected capacity change from 0 to 4096 [ 753.984214][ T3554] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 754.260230][ T3583] validate_nla: 1 callbacks suppressed [ 754.260246][ T3583] netlink: 'syz.6.13827': attribute type 4 has an invalid length. [ 754.307225][ T3583] netlink: 'syz.6.13827': attribute type 4 has an invalid length. [ 754.543261][ T3594] loop6: detected capacity change from 0 to 8 [ 754.566807][ T3594] /dev/loop6: Can't open blockdev [ 754.650593][ T26] audit: type=1326 audit(2000000322.433:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 754.744386][ T26] audit: type=1326 audit(2000000322.433:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 754.853395][ T26] audit: type=1326 audit(2000000322.433:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 754.957550][ T26] audit: type=1326 audit(2000000322.433:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.040309][ T26] audit: type=1326 audit(2000000322.433:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.086136][ T26] audit: type=1326 audit(2000000322.433:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.120523][ T26] audit: type=1326 audit(2000000322.433:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.144076][ T26] audit: type=1326 audit(2000000322.433:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.180385][ T26] audit: type=1326 audit(2000000322.433:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 755.237787][ T26] audit: type=1326 audit(2000000322.433:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3600 comm="syz.4.13837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 756.181809][ T3676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13873'. [ 756.450282][ T3688] loop3: detected capacity change from 0 to 512 [ 756.594515][ T3688] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 756.614720][ T3688] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 756.634864][ T3688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 756.668043][ T3688] System zones: 1-12 [ 756.692744][ T3688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.13878: inode #1: comm syz.3.13878: iget: illegal inode # [ 756.717027][ T3688] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.13878: error while reading EA inode 1 err=-117 [ 756.757379][ T3688] EXT4-fs (loop3): 1 orphan inode deleted [ 756.763180][ T3688] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 756.773284][ T3706] device batadv_slave_1 entered promiscuous mode [ 756.854139][ T3705] device batadv_slave_1 left promiscuous mode [ 757.169367][ T3718] netlink: 'syz.1.13892': attribute type 4 has an invalid length. [ 757.227673][ T3718] netlink: 'syz.1.13892': attribute type 4 has an invalid length. [ 757.544257][ T3755] loop6: detected capacity change from 0 to 128 [ 758.531097][ T3829] loop6: detected capacity change from 0 to 2048 [ 760.265834][ T3942] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 760.503866][ T3961] netlink: 'syz.4.14003': attribute type 4 has an invalid length. [ 760.545071][ T3960] netlink: 'syz.0.14001': attribute type 4 has an invalid length. [ 760.587952][ T3960] netlink: 'syz.0.14001': attribute type 4 has an invalid length. [ 761.187530][ T4013] netlink: 'syz.4.14022': attribute type 4 has an invalid length. [ 762.001548][ T4028] loop3: detected capacity change from 0 to 256 [ 762.427808][ T4040] overlayfs: unrecognized mount option "appraise" or missing value [ 763.391741][ T4076] loop3: detected capacity change from 0 to 256 [ 763.472297][ T4076] exfat: Deprecated parameter 'utf8' [ 763.477656][ T4076] exfat: Deprecated parameter 'namecase' [ 763.499854][T20141] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 763.500327][ T4076] exfat: Deprecated parameter 'namecase' [ 763.578947][ T4076] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 763.926205][T20141] usb 1-1: Using ep0 maxpacket: 32 [ 764.065587][T20141] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 764.138396][T20141] usb 1-1: config 0 has no interface number 0 [ 764.237857][T20141] usb 1-1: config 0 interface 184 has no altsetting 0 [ 764.572448][ T4100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14058'. [ 764.587723][ T4101] loop6: detected capacity change from 0 to 512 [ 764.623290][T20141] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 764.648140][T20141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.657364][T20141] usb 1-1: Product: syz [ 764.663995][T20141] usb 1-1: Manufacturer: syz [ 764.669248][T20141] usb 1-1: SerialNumber: syz [ 764.686687][T20141] usb 1-1: config 0 descriptor?? [ 764.726295][T20141] smsc75xx v1.0.0 [ 765.158270][ T4128] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14071'. [ 765.432847][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 765.455352][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 765.931146][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14092'. [ 765.986358][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14092'. [ 766.011319][ T4176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14092'. [ 766.030573][ T4176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14092'. [ 766.292202][ T6740] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 766.558759][ T6740] usb 7-1: Using ep0 maxpacket: 8 [ 766.573309][ T4227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14102'. [ 766.858223][ T6740] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 766.893987][ T6740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.914672][ T6740] usb 7-1: Product: syz [ 766.929680][ T6740] usb 7-1: Manufacturer: syz [ 766.939548][ T6740] usb 7-1: SerialNumber: syz [ 766.958859][ T6740] usb 7-1: config 0 descriptor?? [ 767.008218][ T6740] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 767.400652][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 767.434026][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 767.454566][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 767.465027][ T4283] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14118'. [ 767.475608][T20141] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 767.485587][T20141] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 767.547380][T20141] usb 1-1: USB disconnect, device number 11 [ 768.282519][ T4339] tipc: Started in network mode [ 768.317714][ T4339] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 768.355859][ T4339] tipc: Enabled bearer , priority 8 [ 769.416112][ T4448] tipc: Node number set to 10005162 [ 769.862567][ T6740] gspca_sonixj: reg_w err -71 [ 769.867467][ T6740] sonixj: probe of 7-1:0.0 failed with error -71 [ 769.917475][ T6740] usb 7-1: USB disconnect, device number 11 [ 770.076928][ T4451] tipc: Started in network mode [ 770.081869][ T4451] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 770.143518][ T4451] tipc: Enabled bearer , priority 8 [ 770.172389][ T4442] netlink: 'syz.0.14187': attribute type 4 has an invalid length. [ 770.261167][ T4456] netlink: 'syz.4.14192': attribute type 4 has an invalid length. [ 770.278595][ T4456] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14192'. [ 770.304153][ T4457] netlink: 'syz.0.14187': attribute type 4 has an invalid length. [ 770.596154][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 770.596171][ T26] audit: type=1107 audit(2000000337.389:550): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 770.944610][ T4504] netlink: 104 bytes leftover after parsing attributes in process `syz.1.14213'. [ 771.333396][ T6740] tipc: Node number set to 10005162 [ 771.621737][ T4542] loop4: detected capacity change from 0 to 512 [ 771.709554][ T4542] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 771.738871][ T4548] netlink: 'syz.0.14230': attribute type 4 has an invalid length. [ 771.740759][ T4542] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 771.827418][ T4542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 771.859250][ T4542] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 771.896166][ T4554] netlink: 'syz.0.14230': attribute type 4 has an invalid length. [ 771.943395][ T4542] EXT4-fs (loop4): Remounting filesystem read-only [ 771.952960][ T4542] Quota error (device loop4): write_blk: dquota write failed [ 771.966457][ T4542] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 771.996597][ T4542] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.14229: Failed to acquire dquot type 0 [ 772.015431][ T4542] EXT4-fs (loop4): Remounting filesystem read-only [ 772.026299][ T4542] EXT4-fs (loop4): 1 truncate cleaned up [ 772.037998][ T4542] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,noblock_validity,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000000,nogrpid,grpjquota=./file0,errors=remount-ro,noinit_itable,stripe=0x00000000000000432. Quota mode: writeback. [ 772.777145][ T4596] netlink: 'syz.6.14252': attribute type 10 has an invalid length. [ 772.805110][ T4599] loop0: detected capacity change from 0 to 8 [ 772.818756][ T4596] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14252'. [ 772.867124][ T4596] device dummy0 entered promiscuous mode [ 772.941377][ T4599] SQUASHFS error: lzo decompression failed, data probably corrupt [ 772.991970][ T4599] SQUASHFS error: Failed to read block 0x144: -5 [ 773.046877][ T4599] SQUASHFS error: Unable to read metadata cache entry [142] [ 773.067162][ T4599] SQUASHFS error: Unable to read inode 0x11f [ 773.529485][ T4631] netlink: 'syz.0.14268': attribute type 4 has an invalid length. [ 773.590507][ T4638] netlink: 'syz.0.14268': attribute type 4 has an invalid length. [ 774.123069][ T4674] loop4: detected capacity change from 0 to 256 [ 774.216972][ T4674] FAT-fs (loop4): Directory bread(block 64) failed [ 774.246012][ T4674] FAT-fs (loop4): Directory bread(block 65) failed [ 774.282957][ T4674] FAT-fs (loop4): Directory bread(block 66) failed [ 774.321798][ T4674] FAT-fs (loop4): Directory bread(block 67) failed [ 774.350805][ T4674] FAT-fs (loop4): Directory bread(block 68) failed [ 774.375556][ T4674] FAT-fs (loop4): Directory bread(block 69) failed [ 774.400497][ T4674] FAT-fs (loop4): Directory bread(block 70) failed [ 774.428106][ T4674] FAT-fs (loop4): Directory bread(block 71) failed [ 774.448134][ T4674] FAT-fs (loop4): Directory bread(block 72) failed [ 774.472241][ T4674] FAT-fs (loop4): Directory bread(block 73) failed [ 774.758385][ T4689] syz.1.14295[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 774.758478][ T4689] syz.1.14295[4689] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.575313][ T26] audit: type=1326 audit(2000000342.033:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 775.694510][ T26] audit: type=1326 audit(2000000342.052:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 775.734646][ T26] audit: type=1326 audit(2000000342.211:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 775.891505][ T26] audit: type=1326 audit(2000000342.211:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 775.998346][ T26] audit: type=1326 audit(2000000342.211:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.121842][ T26] audit: type=1326 audit(2000000342.211:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.215537][ T26] audit: type=1326 audit(2000000342.211:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.262677][ T4734] netlink: 'syz.4.14315': attribute type 4 has an invalid length. [ 776.297001][ T4734] netlink: 'syz.4.14315': attribute type 5 has an invalid length. [ 776.314813][ T26] audit: type=1326 audit(2000000342.221:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.346072][ T4734] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.14315'. [ 776.411174][ T26] audit: type=1326 audit(2000000342.221:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.479894][ T4743] overlayfs: unrecognized mount option "verity=require:/" or missing value [ 776.511692][ T26] audit: type=1326 audit(2000000342.221:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.618082][ T26] audit: type=1326 audit(2000000342.230:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.658283][ T4757] tipc: Enabling of bearer rejected, already enabled [ 776.742775][ T4761] netlink: 92 bytes leftover after parsing attributes in process `syz.4.14327'. [ 776.759635][ T26] audit: type=1326 audit(2000000342.230:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.857215][ T26] audit: type=1326 audit(2000000342.230:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 776.944606][ T26] audit: type=1326 audit(2000000342.230:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4700 comm="syz.0.14302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 777.025502][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14333'. [ 777.056213][ T4777] 9pnet: Insufficient options for proto=fd [ 777.292986][ T4783] netlink: 'syz.1.14337': attribute type 4 has an invalid length. [ 777.357865][ T4793] netlink: 'syz.1.14337': attribute type 4 has an invalid length. [ 777.742593][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14353'. [ 778.371033][ T4854] loop0: detected capacity change from 0 to 1024 [ 778.552249][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 778.558591][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 779.459113][ T4909] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 779.475778][ T4914] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14397'. [ 779.564915][ T4915] loop0: detected capacity change from 0 to 2048 [ 779.629584][ T4922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14401'. [ 779.732034][ T4915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 779.865490][ T4915] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 780.368054][ T4943] tipc: Enabled bearer , priority 8 [ 780.581890][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14414'. [ 781.123945][ T4982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14429'. [ 781.149512][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.179987][ T4982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.197472][ T4982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.227111][ T4982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.396489][ T4994] netlink: 'syz.6.14435': attribute type 4 has an invalid length. [ 781.437251][ T4994] netlink: 'syz.6.14435': attribute type 4 has an invalid length. [ 781.777534][ T5018] x_tables: duplicate underflow at hook 3 [ 781.953129][ T5030] binder: 5029:5030 ioctl c018620c 200000000000 returned -22 [ 782.123762][ T5042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14458'. [ 783.394975][ T5127] netlink: 68 bytes leftover after parsing attributes in process `syz.1.14499'. [ 785.043705][ T5213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14539'. [ 785.197966][ T5226] overlayfs: failed to clone upperpath [ 785.870982][ T5263] tipc: Enabling of bearer rejected, already enabled [ 787.920614][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14591'. [ 788.845268][ T5390] netlink: 'syz.0.14624': attribute type 4 has an invalid length. [ 788.912682][ T5390] netlink: 'syz.0.14624': attribute type 4 has an invalid length. [ 789.278629][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14643'. [ 789.336071][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14645'. [ 789.367099][ T5436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.394196][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.435175][ T5436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.476265][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.607640][ T5452] device batadv_slave_1 entered promiscuous mode [ 789.629733][ T5450] device batadv_slave_1 left promiscuous mode [ 790.126678][ T5489] fuse: Bad value for 'fd' [ 790.172622][ T5492] overlayfs: failed to clone upperpath [ 790.327142][ T5503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14676'. [ 790.666741][ T5526] tipc: Enabling of bearer rejected, failed to enable media [ 791.303823][ T5561] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 791.326979][ T5561] overlayfs: missing 'lowerdir' [ 791.357316][ T5565] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 791.402581][ T5565] overlayfs: missing 'lowerdir' [ 791.864487][ T5600] device pim6reg1 entered promiscuous mode [ 792.166763][ T5627] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14735'. [ 792.716572][ T5667] netlink: 'syz.4.14754': attribute type 4 has an invalid length. [ 792.742356][ T5667] netlink: 'syz.4.14754': attribute type 4 has an invalid length. [ 794.419566][ T5739] overlayfs: failed to clone upperpath [ 794.601545][ T5756] netlink: 388 bytes leftover after parsing attributes in process `syz.1.14795'. [ 795.453016][ T5820] tipc: Started in network mode [ 795.458027][ T5820] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 795.467276][ T5820] tipc: Enabled bearer , priority 8 [ 795.696248][ T5836] loop6: detected capacity change from 0 to 128 [ 795.912126][ T5844] netlink: 'syz.4.14837': attribute type 4 has an invalid length. [ 795.967650][ T5844] netlink: 'syz.4.14837': attribute type 4 has an invalid length. [ 796.661299][ T6736] tipc: Node number set to 10005162 [ 796.670233][ T5905] loop0: detected capacity change from 0 to 512 [ 796.722727][ T5909] overlayfs: missing 'lowerdir' [ 796.762896][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.14865: inode has both inline data and extents flags [ 796.853320][ T5905] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.14865: couldn't read orphan inode 15 (err -117) [ 796.882844][ T5905] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 797.505513][ T5964] overlayfs: failed to clone lowerpath [ 797.634878][ T5974] tipc: Enabling of bearer rejected, already enabled [ 797.729214][ T5984] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 797.825022][ T5987] netlink: 'syz.1.14903': attribute type 4 has an invalid length. [ 797.883842][ T5998] netlink: 'syz.1.14903': attribute type 4 has an invalid length. [ 797.907995][ T155] tipc: Subscription rejected, illegal request [ 798.041740][ T5997] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 798.148423][ T6012] tipc: Enabling of bearer rejected, already enabled [ 798.191786][ T6015] netlink: 'syz.1.14915': attribute type 4 has an invalid length. [ 798.226094][ T6015] netlink: 17 bytes leftover after parsing attributes in process `syz.1.14915'. [ 798.711865][ T21] kernel write not supported for file [eventfd] (pid: 21 comm: kworker/1:0) [ 798.969973][ T6068] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 799.377818][ T6092] overlayfs: missing 'workdir' [ 799.492649][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14956'. [ 799.786787][ T6114] netlink: 'syz.0.14957': attribute type 2 has an invalid length. [ 800.265123][ T4199] Bluetooth: hci3: link tx timeout [ 800.271848][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 800.279823][ T4199] Bluetooth: hci3: link tx timeout [ 800.286421][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 800.666025][ T6130] netlink: 'syz.1.14969': attribute type 4 has an invalid length. [ 800.714169][ T6130] netlink: 'syz.1.14969': attribute type 4 has an invalid length. [ 801.104390][ T6158] overlayfs: failed to resolve './file0': -2 [ 801.340205][ T6173] netlink: 152 bytes leftover after parsing attributes in process `syz.1.14986'. [ 802.038412][ T6219] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.15008'. [ 802.660624][ T6267] loop6: detected capacity change from 0 to 256 [ 803.002238][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15045'. [ 803.240154][ T6315] tipc: Resetting bearer [ 803.296305][ T6315] tipc: Disabling bearer [ 803.436882][ T6329] cgroup: Unknown subsys name 'fowner>00000000000000060929' [ 803.490841][ T6337] loop0: detected capacity change from 0 to 128 [ 804.100098][ T6386] fuse: Bad value for 'user_id' [ 804.104508][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15086'. [ 804.301476][ T6399] tipc: Enabling of bearer rejected, already enabled [ 804.326621][ T6404] netlink: 224 bytes leftover after parsing attributes in process `syz.4.15096'. [ 804.726943][ T6436] netlink: 'syz.0.15110': attribute type 4 has an invalid length. [ 804.793761][ T6436] netlink: 'syz.0.15110': attribute type 4 has an invalid length. [ 804.903052][ T6457] netlink: 'syz.4.15120': attribute type 2 has an invalid length. [ 805.025127][ T6467] tipc: Enabling of bearer rejected, already enabled [ 805.106211][ T6472] overlayfs: failed to resolve './file0': -2 [ 805.353671][ T6489] netlink: 'syz.0.15137': attribute type 1 has an invalid length. [ 805.474210][ T6489] netlink: 'syz.0.15137': attribute type 2 has an invalid length. [ 805.517102][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15137'. [ 805.615425][ T6496] tipc: Enabling of bearer rejected, already enabled [ 805.827177][ T6507] overlayfs: failed to resolve './file0': -2 [ 806.498779][ T6541] wg2: Caught tx_queue_len zero misconfig [ 806.546428][ T26] kauditd_printk_skb: 70 callbacks suppressed [ 806.546442][ T26] audit: type=1326 audit(2000000371.119:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 806.626866][ T26] audit: type=1326 audit(2000000371.185:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 806.701528][ T26] audit: type=1326 audit(2000000371.241:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 806.779170][ T26] audit: type=1326 audit(2000000371.297:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 806.861081][ T26] audit: type=1326 audit(2000000371.419:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 806.925020][ T26] audit: type=1326 audit(2000000371.485:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 807.019316][ T26] audit: type=1326 audit(2000000371.541:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 807.104810][ T26] audit: type=1326 audit(2000000371.597:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 807.173645][ T26] audit: type=1326 audit(2000000371.672:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 807.261679][ T26] audit: type=1326 audit(2000000371.738:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.0.15154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7fc00000 [ 807.808433][ T6598] loop4: detected capacity change from 0 to 128 [ 807.864491][ T6598] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 808.603799][ T6628] loop4: detected capacity change from 0 to 512 [ 808.783055][ T6628] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 808.807164][ T6628] System zones: 0-2, 18-18, 34-35 [ 808.820477][ T6628] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nodioread_nolock,discard,debug,,errors=continue. Quota mode: writeback. [ 809.175343][ T6662] overlayfs: missing 'lowerdir' [ 809.359731][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15223'. [ 809.935513][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15246'. [ 810.236890][ T6757] netlink: 'syz.1.15258': attribute type 4 has an invalid length. [ 810.301361][ T6757] netlink: 'syz.1.15258': attribute type 4 has an invalid length. [ 811.073524][ T6828] overlayfs: missing 'lowerdir' [ 811.894406][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 811.894496][ T26] audit: type=1326 audit(778.444:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6850 comm="syz.4.15303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x0 [ 812.288132][ T6866] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15307'. [ 812.573919][ T6882] fuse: Bad value for 'group_id' [ 813.243150][ T6914] netlink: 'syz.3.15330': attribute type 4 has an invalid length. [ 813.299793][ T6926] netlink: 'syz.3.15330': attribute type 4 has an invalid length. [ 813.652843][ T6951] overlayfs: missing 'lowerdir' [ 813.826280][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15350'. [ 814.102050][ T6981] overlayfs: missing 'lowerdir' [ 814.263396][ T26] audit: type=1326 audit(780.667:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.1.15365" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x0 [ 814.670302][ T7018] netlink: 'syz.1.15378': attribute type 4 has an invalid length. [ 815.200146][ T7032] netlink: 'syz.1.15378': attribute type 4 has an invalid length. [ 815.841735][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15393'. [ 816.136282][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15404'. [ 816.154731][ T7070] netlink: 'syz.0.15402': attribute type 4 has an invalid length. [ 816.197665][ T7070] netlink: 'syz.0.15402': attribute type 4 has an invalid length. [ 816.533919][ T7112] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.15422'. [ 816.778566][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15433'. [ 816.807875][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15435'. [ 816.909520][ T7144] device batadv_slave_1 entered promiscuous mode [ 816.929490][ T7143] device batadv_slave_1 left promiscuous mode [ 817.567740][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.6.15462'. [ 817.598714][ T7194] netlink: 32 bytes leftover after parsing attributes in process `syz.6.15462'. [ 819.101026][ T7257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15490'. [ 820.106107][ T7296] netlink: 'syz.1.15508': attribute type 4 has an invalid length. [ 820.201698][ T7296] netlink: 'syz.1.15508': attribute type 4 has an invalid length. [ 820.252967][ T7301] netlink: 'syz.3.15510': attribute type 4 has an invalid length. [ 820.264673][ T7301] netlink: 'syz.3.15510': attribute type 5 has an invalid length. [ 820.277440][ T7301] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.15510'. [ 820.436259][ T7309] netlink: 'syz.3.15514': attribute type 10 has an invalid length. [ 820.444261][ T7309] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15514'. [ 820.524114][ T7309] device dummy0 entered promiscuous mode [ 820.602674][ T7322] overlayfs: failed to resolve './file0': -2 [ 820.831288][ T7329] netlink: 'syz.6.15523': attribute type 4 has an invalid length. [ 820.934864][ T7341] netlink: 'syz.6.15523': attribute type 4 has an invalid length. [ 821.875781][ T7394] overlayfs: failed to clone upperpath [ 823.004871][ T7450] overlayfs: failed to set xattr on upper [ 823.010629][ T7450] overlayfs: ...falling back to index=off,metacopy=off. [ 823.632984][ T7475] netlink: 'syz.4.15589': attribute type 4 has an invalid length. [ 823.713263][ T7485] netlink: 'syz.4.15589': attribute type 4 has an invalid length. [ 825.559155][ T7608] overlayfs: failed to clone upperpath [ 825.848468][ T7623] netlink: 'syz.1.15659': attribute type 4 has an invalid length. [ 825.958960][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15660'. [ 826.047319][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15660'. [ 826.760914][ T7680] netlink: 388 bytes leftover after parsing attributes in process `syz.1.15686'. [ 826.939021][ T7688] netlink: 'syz.1.15689': attribute type 4 has an invalid length. [ 827.020057][ T7688] netlink: 'syz.1.15689': attribute type 4 has an invalid length. [ 827.282819][ T7711] overlayfs: failed to clone upperpath [ 827.683105][ T7731] netlink: 'syz.4.15707': attribute type 4 has an invalid length. [ 827.739991][ T7731] netlink: 'syz.4.15707': attribute type 4 has an invalid length. [ 828.445141][ T7772] netlink: 'syz.3.15727': attribute type 11 has an invalid length. [ 828.469820][ T7772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15727'. [ 828.621654][ T7782] netlink: 104 bytes leftover after parsing attributes in process `syz.6.15732'. [ 828.978890][ T7809] netlink: 'syz.3.15744': attribute type 13 has an invalid length. [ 829.101008][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15746'. [ 829.162035][ T7821] overlayfs: failed to resolve './file1': -2 [ 829.581582][ T7854] overlayfs: failed to resolve './file1': -2 [ 829.870889][ T7879] x_tables: unsorted underflow at hook 1 [ 830.249708][ T7903] netlink: 'syz.1.15788': attribute type 4 has an invalid length. [ 830.300994][ T7903] netlink: 'syz.1.15788': attribute type 4 has an invalid length. [ 830.479607][ T7923] netlink: 'syz.0.15797': attribute type 4 has an invalid length. [ 830.584658][ T7933] overlayfs: missing 'lowerdir' [ 830.644448][ T7937] 9pnet: Insufficient options for proto=fd [ 831.030582][ T7976] netlink: 'syz.4.15821': attribute type 4 has an invalid length. [ 831.038877][ T7976] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.15821'. [ 831.098578][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15823'. [ 831.385182][ T7990] netlink: 'syz.6.15828': attribute type 4 has an invalid length. [ 831.423938][ T7990] netlink: 'syz.6.15828': attribute type 4 has an invalid length. [ 832.026980][ T8040] overlayfs: failed to set xattr on upper [ 832.071669][ T8040] overlayfs: ...falling back to index=off,metacopy=off. [ 832.097243][ T8040] overlayfs: './file0' not a directory [ 833.190866][ T8120] netlink: 'syz.6.15888': attribute type 13 has an invalid length. [ 833.664360][ T8147] loop6: detected capacity change from 0 to 512 [ 833.712284][ T8152] overlayfs: failed to set xattr on upper [ 833.736959][ T8152] overlayfs: ...falling back to index=off,metacopy=off. [ 833.769750][ T8152] overlayfs: failed to resolve './file0': -2 [ 834.312559][ T8178] fuse: Invalid rootmode [ 834.456025][ T8187] netem: change failed [ 835.031681][ T8194] loop0: detected capacity change from 0 to 8192 [ 835.593982][ T8194] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 835.604686][ T8194] REISERFS (device loop0): using ordered data mode [ 835.611267][ T8194] reiserfs: using flush barriers [ 835.628075][ T8194] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 835.648113][ T8194] REISERFS (device loop0): checking transaction log (loop0) [ 835.830802][ T8201] loop4: detected capacity change from 0 to 1024 [ 836.078916][ T8194] REISERFS (device loop0): Using tea hash to sort names [ 836.099614][ T8194] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 836.764145][ T8201] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 837.885148][ T8226] overlayfs: failed to resolve './file1': -2 [ 837.973433][ T8231] loop4: detected capacity change from 0 to 128 [ 838.067186][ T8231] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 838.651196][ T8262] netlink: 536 bytes leftover after parsing attributes in process `syz.4.15949'. [ 838.784298][ T8262] netlink: 124 bytes leftover after parsing attributes in process `syz.4.15949'. [ 839.227299][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15964'. [ 842.053804][ T26] audit: type=1326 audit(806.742:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.124801][ T26] audit: type=1326 audit(806.742:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.221780][ T26] audit: type=1326 audit(806.770:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.342476][ T26] audit: type=1326 audit(806.770:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.392907][ T26] audit: type=1326 audit(806.770:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.461719][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16029'. [ 842.490607][ T8435] syz.0.16030[8435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.490699][ T8435] syz.0.16030[8435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.496343][ T26] audit: type=1326 audit(806.770:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.548959][ T26] audit: type=1326 audit(806.779:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.653358][ T26] audit: type=1326 audit(806.779:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.707034][ T26] audit: type=1326 audit(806.779:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 842.747086][ T26] audit: type=1326 audit(806.779:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8409 comm="syz.1.16018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 843.034280][ T8475] cgroup: Unknown subsys name 'audit' [ 843.251993][ T8493] netlink: 536 bytes leftover after parsing attributes in process `syz.3.16055'. [ 843.271724][ T8493] netlink: 124 bytes leftover after parsing attributes in process `syz.3.16055'. [ 843.290827][ T8491] netlink: 'syz.0.16057': attribute type 4 has an invalid length. [ 843.320747][ T8491] netlink: 'syz.0.16057': attribute type 4 has an invalid length. [ 843.436161][ T8509] loop6: detected capacity change from 0 to 512 [ 843.791667][ T8538] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16078'. [ 843.963656][ T8554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 844.045622][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.051996][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.306761][ T8578] tmpfs: Unknown parameter 'noswap' [ 844.313776][ T8579] device batadv_slave_1 entered promiscuous mode [ 844.333372][ T8576] device batadv_slave_1 left promiscuous mode [ 844.734453][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16114'. [ 844.790867][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16114'. [ 844.825869][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16114'. [ 844.846390][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16114'. [ 845.017956][ T8627] netlink: 84 bytes leftover after parsing attributes in process `syz.3.16123'. [ 845.136014][ T8634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16126'. [ 845.205335][ T8638] 9pnet: Insufficient options for proto=fd [ 845.310661][ T8648] overlayfs: missing 'lowerdir' [ 845.461953][ T8655] netlink: 'syz.3.16136': attribute type 4 has an invalid length. [ 845.504917][ T8655] netlink: 'syz.3.16136': attribute type 4 has an invalid length. [ 845.540520][ T8664] netlink: 'syz.1.16140': attribute type 10 has an invalid length. [ 845.997467][ T8697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16157'. [ 846.320004][ T8725] overlayfs: missing 'lowerdir' [ 846.441612][ T8733] netlink: 68 bytes leftover after parsing attributes in process `syz.4.16173'. [ 846.573731][ T8738] 9p: Unknown access argument a [ 846.986355][ T8771] netlink: 'syz.1.16190': attribute type 4 has an invalid length. [ 846.994213][ T8771] netlink: 'syz.1.16190': attribute type 5 has an invalid length. [ 847.008579][ T8771] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.16190'. [ 847.186394][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16194'. [ 847.328362][ T8792] netlink: 'syz.1.16200': attribute type 4 has an invalid length. [ 847.425544][ T8802] netlink: 'syz.1.16200': attribute type 4 has an invalid length. [ 850.319561][ T8997] xt_bpf: check failed: parse error [ 850.594151][ T9011] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 850.633779][ T9011] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 851.053353][ T9026] __nla_validate_parse: 1 callbacks suppressed [ 851.053373][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16312'. [ 851.359868][ T9049] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 851.383673][ T9048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 851.422394][ T9049] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 851.856117][ T9080] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 851.890312][ T9080] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 852.506550][ T9116] netlink: 'syz.4.16353': attribute type 4 has an invalid length. [ 852.530752][ T9116] netlink: 'syz.4.16353': attribute type 4 has an invalid length. [ 854.102739][ T9221] syz.6.16404[9221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 854.102827][ T9221] syz.6.16404[9221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 854.241707][ T9235] 9pnet: Insufficient options for proto=fd [ 854.443052][ T9257] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16422'. [ 854.806294][ T9291] overlayfs: failed to clone upperpath [ 855.000180][ T9305] netlink: 84 bytes leftover after parsing attributes in process `syz.1.16445'. [ 855.797106][ T9379] fuse: Bad value for 'fd' [ 855.944295][ T9391] netlink: 'syz.0.16487': attribute type 4 has an invalid length. [ 856.081911][ T26] kauditd_printk_skb: 118 callbacks suppressed [ 856.081924][ T26] audit: type=1326 audit(819.905:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.151423][ T9404] loop0: detected capacity change from 0 to 128 [ 856.154061][ T26] audit: type=1326 audit(819.905:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.181538][ T26] audit: type=1326 audit(819.905:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.207131][ T26] audit: type=1326 audit(819.905:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.234966][ T26] audit: type=1326 audit(819.905:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.270703][ T26] audit: type=1326 audit(819.905:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.293165][ T26] audit: type=1326 audit(819.905:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.421718][ T26] audit: type=1326 audit(819.905:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.551812][ T26] audit: type=1326 audit(819.905:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 856.621432][ T26] audit: type=1326 audit(819.905:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.16490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 857.467304][ T9494] overlayfs: failed to set xattr on upper [ 857.482863][ T9494] overlayfs: ...falling back to index=off,metacopy=off. [ 857.496886][ T9500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16539'. [ 858.173707][ T9562] tipc: Failed to remove unknown binding: 66,1,1/10005162:1946038006/1946038008 [ 859.061074][ T9647] loop0: detected capacity change from 0 to 512 [ 859.102121][ T9647] EXT4-fs (loop0): Ignoring removed bh option [ 859.176518][ T9647] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 859.989293][ T9722] 9pnet: Unknown protocol version 9 [ 860.096170][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16651'. [ 860.211632][ T9741] netlink: 'syz.0.16652': attribute type 4 has an invalid length. [ 860.243731][ T9741] netlink: 'syz.0.16652': attribute type 4 has an invalid length. [ 861.276572][ T9826] loop0: detected capacity change from 0 to 512 [ 861.324842][ T9826] EXT4-fs (loop0): Ignoring removed bh option [ 861.379998][ T9826] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 861.567599][ T9846] 9p: Unknown Cache mode m [ 861.768421][ T9863] 9pnet: Insufficient options for proto=fd [ 862.204756][ T9889] netlink: 'syz.4.16721': attribute type 4 has an invalid length. [ 862.276581][ T9898] netlink: 'syz.4.16721': attribute type 4 has an invalid length. [ 863.696719][ T9962] netlink: 'syz.0.16754': attribute type 4 has an invalid length. [ 863.738984][ T9962] netlink: 'syz.0.16754': attribute type 4 has an invalid length. [ 865.153931][T10054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16795'. [ 865.251818][T10059] netlink: 80 bytes leftover after parsing attributes in process `syz.0.16798'. [ 865.268179][T10060] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 865.466183][T10078] overlayfs: missing 'workdir' [ 866.237667][T10145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16839'. [ 867.007630][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16843'. [ 867.442673][T10194] netlink: 120 bytes leftover after parsing attributes in process `syz.6.16860'. [ 867.453068][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16860'. [ 867.463347][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16860'. [ 867.475879][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16860'. [ 867.529527][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16863'. [ 867.938888][T10237] netlink: 'syz.0.16874': attribute type 4 has an invalid length. [ 867.974306][T10237] netlink: 'syz.0.16874': attribute type 4 has an invalid length. [ 868.158277][T10256] netlink: 'syz.0.16883': attribute type 8 has an invalid length. [ 868.179982][T10256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16883'. [ 868.959329][ T4199] Bluetooth: hci3: link tx timeout [ 868.964554][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 868.973487][ T4199] Bluetooth: hci3: link tx timeout [ 868.978704][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 869.216685][T10304] tmpfs: Unknown parameter 'g' [ 870.613867][T10387] netlink: 'syz.0.16943': attribute type 4 has an invalid length. [ 870.668247][T10387] netlink: 'syz.0.16943': attribute type 4 has an invalid length. [ 873.048102][T10507] __nla_validate_parse: 2 callbacks suppressed [ 873.048117][T10507] netlink: 112 bytes leftover after parsing attributes in process `syz.1.16995'. [ 873.089166][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16995'. [ 873.094008][T10511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16997'. [ 873.125484][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16995'. [ 873.156381][T10507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16995'. [ 873.161831][T10509] netlink: 'syz.6.16996': attribute type 4 has an invalid length. [ 873.288201][T10525] netlink: 'syz.6.16996': attribute type 4 has an invalid length. [ 874.063906][T10589] netlink: 536 bytes leftover after parsing attributes in process `syz.3.17035'. [ 874.105193][T10589] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17035'. [ 874.227788][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17042'. [ 874.269297][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17042'. [ 874.282534][T10606] netlink: 108 bytes leftover after parsing attributes in process `syz.6.17043'. [ 874.304469][T10601] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.313476][T10601] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.322519][T10601] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 874.331304][T10601] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.228207][T10709] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 876.255859][T10709] overlayfs: missing 'lowerdir' [ 876.296591][T10713] netlink: 'syz.6.17093': attribute type 4 has an invalid length. [ 876.335091][T10713] netlink: 'syz.6.17093': attribute type 4 has an invalid length. [ 878.473613][T10853] loop0: detected capacity change from 0 to 512 [ 878.517606][T10853] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 878.568712][T10853] EXT4-fs (loop0): orphan cleanup on readonly fs [ 878.590704][T10853] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.17158: Block bitmap for bg 0 marked uninitialized [ 878.620327][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.660261][T10853] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 878.703225][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.709800][T10853] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.17158: Block bitmap for bg 0 marked uninitialized [ 878.783852][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.799560][T10853] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 878.819572][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.861521][T10853] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:510: comm syz.0.17158: Block bitmap for bg 0 marked uninitialized [ 878.897532][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.904197][T10853] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 878.965746][T10853] EXT4-fs (loop0): Remounting filesystem read-only [ 878.990355][T10853] EXT4-fs (loop0): 1 orphan inode deleted [ 879.002478][T10853] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nolazytime,. Quota mode: none. [ 879.011463][T10895] x_tables: duplicate underflow at hook 1 [ 879.092745][T10896] netlink: 'syz.3.17175': attribute type 4 has an invalid length. [ 879.142039][T10899] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 879.192233][T10899] overlayfs: missing 'lowerdir' [ 879.202899][T10901] netlink: 'syz.3.17175': attribute type 4 has an invalid length. [ 880.791356][T11018] 9pnet: Insufficient options for proto=fd [ 881.312797][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 881.312810][ T26] audit: type=1326 audit(843.577:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.384899][ T26] audit: type=1326 audit(843.577:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.412835][ T26] audit: type=1326 audit(843.577:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.459681][ T26] audit: type=1326 audit(843.577:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.486835][ T26] audit: type=1326 audit(843.577:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.511032][ T26] audit: type=1326 audit(843.577:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.534021][ T26] audit: type=1326 audit(843.577:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.600895][ T26] audit: type=1326 audit(843.577:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.656396][ T26] audit: type=1326 audit(843.577:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.680295][ T26] audit: type=1326 audit(843.577:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11059 comm="syz.4.17255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 881.706404][T11085] __nla_validate_parse: 3 callbacks suppressed [ 881.706419][T11085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17268'. [ 882.312929][T11126] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17287'. [ 882.322975][T11126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17287'. [ 882.333407][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17287'. [ 882.346965][T11126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17287'. [ 884.791162][T11266] netlink: 96 bytes leftover after parsing attributes in process `syz.6.17353'. [ 885.690504][T11318] netlink: 56 bytes leftover after parsing attributes in process `syz.4.17379'. [ 886.060888][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17390'. [ 886.111590][T11342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17390'. [ 886.189944][T11347] loop0: detected capacity change from 0 to 128 [ 886.586080][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17402'. [ 888.015813][T11461] __nla_validate_parse: 1 callbacks suppressed [ 888.015830][T11461] netlink: 100 bytes leftover after parsing attributes in process `syz.1.17445'. [ 888.427886][T11495] netlink: 'syz.4.17461': attribute type 1 has an invalid length. [ 888.554421][T11509] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17466'. [ 888.591546][T11495] 8021q: adding VLAN 0 to HW filter on device bond2 [ 888.628824][T11503] netlink: 'syz.1.17463': attribute type 4 has an invalid length. [ 888.694582][T11500] device vlan0 entered promiscuous mode [ 888.712897][T11500] device bond2 entered promiscuous mode [ 888.748028][T11495] bond2: (slave gretap1): making interface the new active one [ 888.771002][T11495] device gretap1 entered promiscuous mode [ 888.802966][T11495] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 888.829255][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 888.833386][T11526] overlayfs: failed to clone upperpath [ 888.899653][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 888.985323][T11536] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 889.028512][T11542] tmpfs: Unknown parameter 'nos' [ 889.138662][T11544] netlink: 'syz.4.17481': attribute type 4 has an invalid length. [ 889.174518][T11544] netlink: 'syz.4.17481': attribute type 4 has an invalid length. [ 889.314136][T11565] overlayfs: missing 'lowerdir' [ 889.642982][T11586] netlink: 'syz.0.17502': attribute type 4 has an invalid length. [ 889.699651][T11598] netlink: 'syz.0.17502': attribute type 4 has an invalid length. [ 890.286541][T11643] loop0: detected capacity change from 0 to 512 [ 890.346983][T11643] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 890.384093][T11643] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 890.430890][T11643] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 890.457058][T11643] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 890.472969][T11643] System zones: 0-2, 18-18, 34-35 [ 890.493641][T11643] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 890.879548][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17544'. [ 890.995151][T11682] netlink: 'syz.4.17545': attribute type 4 has an invalid length. [ 891.039100][T11682] netlink: 'syz.4.17545': attribute type 4 has an invalid length. [ 891.918940][ T8210] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 892.155907][T11753] tmpfs: Unknown parameter 'noswap' [ 892.368727][ T8210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 892.390681][ T8210] usb 1-1: New USB device found, idVendor=056a, idProduct=005b, bcdDevice= 0.00 [ 892.411712][ T8210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.435023][ T8210] usb 1-1: config 0 descriptor?? [ 892.473348][T11722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 892.724721][T11722] udc-core: couldn't find an available UDC or it's busy [ 892.740182][T11722] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 892.878257][ T8210] usbhid 1-1:0.0: can't add hid device: -71 [ 892.884274][ T8210] usbhid: probe of 1-1:0.0 failed with error -71 [ 892.912927][ T8210] usb 1-1: USB disconnect, device number 12 [ 893.033255][T11819] netlink: 'syz.6.17609': attribute type 8 has an invalid length. [ 893.054414][T11819] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17609'. [ 894.274669][T11889] netlink: 'syz.3.17641': attribute type 4 has an invalid length. [ 894.324497][T11889] netlink: 'syz.3.17641': attribute type 4 has an invalid length. [ 895.854601][T11990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17682'. [ 896.535005][T12049] fuse: Bad value for 'fd' [ 896.683889][T12063] fuse: Bad value for 'fd' [ 896.896868][T12081] netlink: 56 bytes leftover after parsing attributes in process `syz.6.17727'. [ 898.918670][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17783'. [ 899.071938][T12205] fuse: Bad value for 'fd' [ 900.847693][T12331] netlink: 60 bytes leftover after parsing attributes in process `syz.6.17845'. [ 901.838314][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 901.838328][ T26] audit: type=1326 audit(862.833:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 901.963180][ T26] audit: type=1326 audit(862.833:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.053936][ T26] audit: type=1326 audit(862.843:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.130521][T12417] netlink: 80 bytes leftover after parsing attributes in process `syz.6.17885'. [ 902.391630][ T26] audit: type=1326 audit(863.359:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.455222][ T26] audit: type=1326 audit(863.387:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.526759][ T26] audit: type=1326 audit(863.406:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.582289][ T26] audit: type=1326 audit(863.406:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12393 comm="syz.4.17874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc93fb5c749 code=0x7ffc0000 [ 902.601098][T12449] loop0: detected capacity change from 0 to 2048 [ 902.715033][T12449] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,block_validity,min_batch_time=0x0000000000000007,nobarrier,grpid,journal_dev=0x0000000000000007,. Quota mode: writeback. [ 903.237397][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17926'. [ 903.258791][T12509] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17926'. [ 903.281685][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17926'. [ 903.303845][T12509] netlink: 36 bytes leftover after parsing attributes in process `syz.6.17926'. [ 903.554692][T12530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17935'. [ 904.217843][T12575] netlink: 56 bytes leftover after parsing attributes in process `syz.3.17956'. [ 904.848063][T12611] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17973'. [ 905.743455][T12663] netlink: 188 bytes leftover after parsing attributes in process `syz.1.17998'. [ 906.541353][T12718] loop0: detected capacity change from 0 to 512 [ 906.634111][T12718] EXT4-fs (loop0): Test dummy encryption mode enabled [ 906.682296][T12718] EXT4-fs (loop0): Test dummy encryption mode enabled [ 906.728215][T12718] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,dax=never,. Quota mode: writeback. [ 906.981958][T12746] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18039'. [ 907.746588][T12814] fuse: Bad value for 'fd' [ 908.922440][T12912] overlayfs: missing 'lowerdir' [ 909.219698][T12926] netlink: 'syz.1.18124': attribute type 4 has an invalid length. [ 909.529353][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 909.535852][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.708378][T12961] netlink: 'syz.3.18142': attribute type 4 has an invalid length. [ 910.496690][T12999] netlink: 'syz.6.18158': attribute type 4 has an invalid length. [ 910.740765][T13021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18167'. [ 911.437438][T13060] netlink: 'syz.1.18187': attribute type 4 has an invalid length. [ 911.935443][T13091] netlink: 'syz.4.18201': attribute type 4 has an invalid length. [ 912.906433][T13148] devpts: called with bogus options [ 914.094608][T13206] netlink: 'syz.6.18252': attribute type 4 has an invalid length. [ 914.699760][T13264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18278'. [ 914.722612][T13264] device sit0 entered promiscuous mode [ 915.573480][T13281] overlayfs: failed to clone lowerpath [ 916.376020][T13345] netlink: 'syz.1.18314': attribute type 13 has an invalid length. [ 916.393651][T13345] erspan0: refused to change device tx_queue_len [ 916.700453][T13362] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 916.765591][T13362] overlayfs: missing 'lowerdir' [ 917.445677][T13409] netlink: 'syz.3.18344': attribute type 4 has an invalid length. [ 917.616053][T13430] netlink: 84 bytes leftover after parsing attributes in process `syz.6.18352'. [ 917.712344][T13436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18357'. [ 917.747982][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18357'. [ 917.771557][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18357'. [ 917.793616][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18357'. [ 918.848967][T13533] netlink: 664 bytes leftover after parsing attributes in process `syz.0.18402'. [ 919.917504][T13549] device batadv_slave_1 entered promiscuous mode [ 919.949001][T13548] device batadv_slave_1 left promiscuous mode [ 920.270405][T13582] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18424'. [ 920.360706][T13587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18428'. [ 921.753012][T13691] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 922.304011][T13740] overlayfs: failed to clone lowerpath [ 922.512509][T13756] netlink: 'syz.0.18510': attribute type 13 has an invalid length. [ 922.531678][T13756] netlink: 'syz.0.18510': attribute type 17 has an invalid length. [ 922.568665][T13760] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18512'. [ 922.652454][T13756] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 922.699379][T13756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 922.788466][T13771] netlink: 84 bytes leftover after parsing attributes in process `syz.6.18517'. [ 923.491842][T13820] __nla_validate_parse: 1 callbacks suppressed [ 923.491858][T13820] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18538'. [ 924.218773][T13875] 9pnet: Could not find request transport: 0xffffffffffffffff [ 924.548636][T13900] dns_resolver: Unsupported content type (6) [ 924.645942][T13908] 9pnet_virtio: no channels available for device syz [ 924.880823][T13930] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 924.906052][T13930] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 926.525493][T14016] netlink: 'syz.1.18633': attribute type 4 has an invalid length. [ 926.726690][T14028] 9p: Unknown uid 18446744073709551615 [ 926.806382][T14033] netlink: 'syz.4.18641': attribute type 4 has an invalid length. [ 927.275289][ T26] audit: type=1326 audit(2000000002.411:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.18663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 927.349276][ T26] audit: type=1326 audit(2000000002.430:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14078 comm="syz.1.18663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5182b18749 code=0x7ffc0000 [ 927.703286][T14128] netlink: 228 bytes leftover after parsing attributes in process `syz.4.18686'. [ 927.816017][T14135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18689'. [ 928.058117][T14151] overlayfs: unrecognized mount option "uuid=null" or missing value [ 928.170453][T14163] netlink: 'syz.6.18701': attribute type 13 has an invalid length. [ 928.207151][T14163] netlink: 'syz.6.18701': attribute type 17 has an invalid length. [ 928.322912][T14163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 928.370791][T14179] fuse: Bad value for 'fd' [ 928.446110][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18713'. [ 928.481281][T14185] netlink: 188 bytes leftover after parsing attributes in process `syz.4.18714'. [ 929.275053][T14265] loop0: detected capacity change from 0 to 512 [ 929.319903][T14265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 929.394808][T14265] EXT4-fs (loop0): 1 truncate cleaned up [ 929.401520][T14265] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 930.237574][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18787'. [ 931.057672][T14342] netlink: 'syz.0.18789': attribute type 4 has an invalid length. [ 931.589985][T14399] netlink: 272 bytes leftover after parsing attributes in process `syz.6.18813'. [ 931.610246][T14393] netlink: 'syz.1.18810': attribute type 4 has an invalid length. [ 931.976345][T14424] netlink: 268 bytes leftover after parsing attributes in process `syz.3.18825'. [ 932.068287][T14427] netlink: 'syz.4.18826': attribute type 4 has an invalid length. [ 932.656807][T14464] overlayfs: failed to clone upperpath [ 932.870006][T14480] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18850'. [ 932.939469][T14483] Dead loop on virtual device ip6_vti0, fix it urgently! [ 933.299946][T14500] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18860'. [ 933.739799][T14511] netlink: 'syz.3.18865': attribute type 4 has an invalid length. [ 934.757738][T14569] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18892'. [ 935.118617][T14588] tipc: Failed to remove unknown binding: 66,1,1/2886997007:781931762/781931764 [ 935.501458][T14613] loop0: detected capacity change from 0 to 512 [ 935.670360][T14613] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 935.680834][T14613] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 935.715385][T14613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816c099, mo2=0002] [ 935.750532][T14613] System zones: 1-12 [ 935.780310][T14613] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.18912: inode #1: comm syz.0.18912: iget: illegal inode # [ 935.833880][T14613] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.18912: error while reading EA inode 1 err=-117 [ 935.904328][T14631] overlayfs: missing 'lowerdir' [ 935.916185][T14613] EXT4-fs (loop0): 1 orphan inode deleted [ 935.921995][T14613] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,usrjquota=,usrjquota=,journal_dev=0x0000000000000dcd,resgid=0x0000000000000000,minixdf,debug,grpquota,nombcache,minixdf,nomblk_io_submit,nomblk_io_submit,i_version,,errors=continue. Quota mode: writeback. [ 936.160021][ T4199] Bluetooth: hci3: link tx timeout [ 936.165613][ T4199] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 936.181617][ T4199] Bluetooth: hci3: link tx timeout [ 936.186931][ T4199] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 936.514374][T14660] device batadv_slave_1 entered promiscuous mode [ 936.572621][T14659] device batadv_slave_1 left promiscuous mode [ 936.728476][T14667] netlink: 172 bytes leftover after parsing attributes in process `syz.1.18936'. [ 936.997892][T14682] 9pnet: Could not find request transport: 0x0000000000000004 [ 937.068511][T14684] overlayfs: missing 'lowerdir' [ 937.285046][T14695] overlayfs: missing 'lowerdir' [ 937.413507][T14701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.18951'. [ 937.711542][T14718] netlink: 'syz.0.18955': attribute type 4 has an invalid length. [ 939.747444][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18979'. [ 942.135850][T14883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19033'. [ 942.219853][T14891] overlayfs: failed to clone upperpath [ 942.598991][T14916] netlink: 188 bytes leftover after parsing attributes in process `syz.6.19049'. [ 942.809986][T14925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19053'. [ 943.333663][T14942] 9pnet: Insufficient options for proto=fd [ 943.926781][T14983] netlink: 'syz.4.19080': attribute type 4 has an invalid length. [ 943.961632][T14985] netlink: 128 bytes leftover after parsing attributes in process `syz.3.19081'. [ 946.037158][T15084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19125'. [ 946.801771][T15130] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19148'. [ 946.867206][T15111] fuse: Invalid rootmode [ 948.196064][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19161'. [ 948.324184][T15160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.484454][T15160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.555197][T15160] bond0 (unregistering): Released all slaves [ 948.953757][T15195] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 948.967316][T15195] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 950.799135][T15315] device batadv_slave_1 entered promiscuous mode [ 950.831373][T15314] device batadv_slave_1 left promiscuous mode [ 952.251440][T15407] netlink: 'syz.3.19280': attribute type 13 has an invalid length. [ 952.952290][T15439] netlink: 536 bytes leftover after parsing attributes in process `syz.4.19294'. [ 953.014022][T15439] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19294'. [ 953.378270][T15477] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19314'. [ 953.491843][T15477] netlink: 48 bytes leftover after parsing attributes in process `syz.6.19314'. [ 953.995338][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19333'. [ 954.075442][T15529] netlink: 56 bytes leftover after parsing attributes in process `syz.3.19338'. [ 954.156429][T15534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19341'. [ 954.288964][T15542] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19343'. [ 954.874623][T15573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19359'. [ 955.578305][T15615] device sit0 entered promiscuous mode [ 955.614952][T15615] netlink: 'syz.6.19379': attribute type 1 has an invalid length. [ 955.666927][T15615] netlink: 1 bytes leftover after parsing attributes in process `syz.6.19379'. [ 956.851773][T15674] kernel read not supported for file /cpuacct.usage_percpu (pid: 15674 comm: syz.1.19406) [ 956.902581][ T26] audit: type=1800 audit(2000000000.028:888): pid=15674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.19406" name="cpuacct.usage_percpu" dev="mqueue" ino=214124 res=0 errno=0 [ 957.170357][T15686] netlink: 'syz.1.19412': attribute type 4 has an invalid length. [ 957.603955][T15698] netlink: 112 bytes leftover after parsing attributes in process `syz.4.19417'. [ 957.922026][T15716] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19426'. [ 958.512891][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19442'. [ 958.663066][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19446'. [ 959.305276][T15801] overlayfs: missing 'lowerdir' [ 959.844423][T15842] __nla_validate_parse: 1 callbacks suppressed [ 959.844440][T15842] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19482'. [ 960.278678][T15872] netlink: 268 bytes leftover after parsing attributes in process `syz.6.19495'. [ 960.469365][T15882] overlayfs: failed to resolve './file1': -2 [ 961.430426][T15951] overlayfs: failed to clone lowerpath [ 961.460456][T15951] overlayfs: failed to clone lowerpath [ 963.018789][ T26] audit: type=1326 audit(2000000005.732:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.050426][ T26] audit: type=1326 audit(2000000005.751:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.090135][ T26] audit: type=1326 audit(2000000005.751:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.130713][ T26] audit: type=1326 audit(2000000005.751:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.208962][ T26] audit: type=1326 audit(2000000005.751:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.313835][ T26] audit: type=1326 audit(2000000005.751:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.385826][ T26] audit: type=1326 audit(2000000005.751:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.460495][ T26] audit: type=1326 audit(2000000005.751:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.560061][ T26] audit: type=1326 audit(2000000005.760:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16011 comm="syz.0.19562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 963.984159][T16088] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 964.570911][T16124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19614'. [ 965.469654][T16183] loop0: detected capacity change from 0 to 256 [ 965.544046][T16155] fuse: Bad value for 'fd' [ 965.573157][T16183] FAT-fs (loop0): Directory bread(block 64) failed [ 965.592672][T16183] FAT-fs (loop0): Directory bread(block 65) failed [ 965.614356][T16183] FAT-fs (loop0): Directory bread(block 66) failed [ 965.627734][T16183] FAT-fs (loop0): Directory bread(block 67) failed [ 965.640332][T16183] FAT-fs (loop0): Directory bread(block 68) failed [ 965.650485][T16183] FAT-fs (loop0): Directory bread(block 69) failed [ 965.658857][T16183] FAT-fs (loop0): Directory bread(block 70) failed [ 965.686661][T16183] FAT-fs (loop0): Directory bread(block 71) failed [ 965.707437][T16183] FAT-fs (loop0): Directory bread(block 72) failed [ 965.714486][T16183] FAT-fs (loop0): Directory bread(block 73) failed [ 966.872687][T16293] netlink: 'syz.3.19692': attribute type 4 has an invalid length. [ 966.902534][T16293] netlink: 17 bytes leftover after parsing attributes in process `syz.3.19692'. [ 966.917607][T16301] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19694'. [ 967.123235][T16313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19699'. [ 967.321293][T16332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19707'. [ 968.548432][T16430] netlink: 96 bytes leftover after parsing attributes in process `syz.1.19753'. [ 968.720113][T16441] 9pnet: Insufficient options for proto=fd [ 969.238691][T16479] fuse: Bad value for 'fd' [ 969.801294][T16514] tmpfs: Bad value for 'mpol' [ 970.647295][T16566] overlayfs: failed to clone upperpath [ 970.835280][T16582] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 970.884577][T16582] overlayfs: missing 'lowerdir' [ 972.212962][T16668] netlink: 5 bytes leftover after parsing attributes in process `syz.4.19863'. [ 972.731434][T16700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.19880'. [ 973.192034][T16726] tipc: Enabling of bearer rejected, failed to enable media [ 973.576685][T16751] netlink: 56 bytes leftover after parsing attributes in process `syz.6.19902'. [ 975.001687][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 975.008200][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.315530][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19938'. [ 975.754970][T16873] overlayfs: missing 'lowerdir' [ 976.409524][T16906] 9pnet: Insufficient options for proto=fd [ 977.395883][T16970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20008'. [ 977.673935][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20005'. [ 978.064019][T17001] netlink: 'syz.1.20021': attribute type 10 has an invalid length. [ 978.109379][T17001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20021'. [ 978.393391][T17027] overlayfs: failed to resolve './file1': -2 [ 978.609969][T17045] 9pnet: Insufficient options for proto=fd [ 980.002806][T17116] netlink: 'syz.0.20075': attribute type 4 has an invalid length. [ 980.013715][T17116] netlink: 'syz.0.20075': attribute type 4 has an invalid length. [ 980.296354][T17128] loop0: detected capacity change from 0 to 512 [ 980.374581][T17128] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 980.391159][T17128] EXT4-fs (loop0): inline encryption not supported [ 980.423404][T17128] EXT4-fs (loop0): Test dummy encryption mode enabled [ 980.451159][T17128] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 980.467837][T17128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 980.532304][T17128] EXT4-fs (loop0): 1 truncate cleaned up [ 980.538081][T17128] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 980.813681][T17162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20098'. [ 980.977226][T17170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 981.009973][T17170] overlayfs: missing 'lowerdir' [ 981.164337][T17180] netlink: 192 bytes leftover after parsing attributes in process `syz.4.20104'. [ 981.963352][T17212] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20119'. [ 982.028680][T17216] overlayfs: missing 'workdir' [ 982.222745][T17230] overlayfs: failed to clone upperpath [ 982.293677][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20127'. [ 982.384744][T17239] overlayfs: missing 'lowerdir' [ 982.970132][ T26] audit: type=1326 audit(938.954:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.3.20150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 983.011046][T17281] 9pnet: Insufficient options for proto=fd [ 983.053258][ T26] audit: type=1326 audit(938.954:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.3.20150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 983.160254][ T26] audit: type=1326 audit(938.954:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.3.20150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 983.279759][ T26] audit: type=1326 audit(938.954:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.3.20150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 983.312312][ T26] audit: type=1326 audit(938.954:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.3.20150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 983.815242][T17337] 9pnet: Insufficient options for proto=fd [ 985.002824][T17426] tmpfs: Unknown parameter 'nosw' [ 985.684678][ T26] audit: type=1326 audit(941.506:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17485 comm="syz.4.20251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc93fb5c749 code=0x0 [ 986.002779][T17512] netlink: 172 bytes leftover after parsing attributes in process `syz.0.20263'. [ 986.040199][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20263'. [ 986.059468][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20263'. [ 986.127570][T17522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20268'. [ 986.168097][T17522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20268'. [ 986.587150][ T26] audit: type=1326 audit(942.360:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.0.20280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 986.640602][ T26] audit: type=1326 audit(942.388:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.0.20280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 986.711845][ T26] audit: type=1326 audit(942.388:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.0.20280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 986.803931][ T26] audit: type=1326 audit(942.388:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17545 comm="syz.0.20280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe271069749 code=0x7ffc0000 [ 987.267965][T17592] overlayfs: missing 'lowerdir' [ 987.273210][T17595] netlink: 'syz.4.20303': attribute type 16 has an invalid length. [ 987.307039][T17595] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.20303'. [ 987.466157][T17607] overlayfs: missing 'workdir' [ 987.639596][T17627] overlayfs: failed to clone upperpath [ 988.890718][T17724] overlayfs: failed to clone upperpath [ 989.030747][T17733] netlink: 156 bytes leftover after parsing attributes in process `syz.1.20369'. [ 989.054314][T17733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20369'. [ 989.074285][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20369'. [ 989.088663][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20369'. [ 989.286636][T17738] loop0: detected capacity change from 0 to 8192 [ 990.167455][T17807] loop0: detected capacity change from 0 to 512 [ 990.194701][T17807] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 990.221029][T17809] 9pnet: Could not find request transport: 0xffffffffffffffff [ 990.264054][T17807] EXT4-fs (loop0): 1 truncate cleaned up [ 990.270050][T17807] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 990.622355][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 990.622371][ T26] audit: type=1326 audit(946.132:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 990.731824][ T26] audit: type=1326 audit(946.132:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 990.771364][ T26] audit: type=1326 audit(946.132:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30ae223f90 code=0x7ffc0000 [ 990.834223][ T26] audit: type=1326 audit(946.132:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30ae223f90 code=0x7ffc0000 [ 990.873601][ T26] audit: type=1326 audit(946.151:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 990.945387][ T26] audit: type=1326 audit(946.151:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 990.971631][ T26] audit: type=1326 audit(946.151:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 991.010658][ T26] audit: type=1326 audit(946.151:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 991.047149][ T26] audit: type=1326 audit(946.151:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 991.120572][ T26] audit: type=1326 audit(946.151:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17834 comm="syz.3.20418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f30ae225749 code=0x7ffc0000 [ 992.280541][T17907] __nla_validate_parse: 3 callbacks suppressed [ 992.280560][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.20449'. [ 993.510597][T18006] 9pnet: Insufficient options for proto=fd [ 993.601425][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20501'. [ 993.654418][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20501'. [ 993.677464][T18012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20501'. [ 993.708098][T18012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20501'. [ 993.733574][T18022] netlink: 80 bytes leftover after parsing attributes in process `syz.6.20504'. [ 993.844416][T18029] netlink: 'syz.6.20507': attribute type 4 has an invalid length. [ 994.276338][T18074] netlink: 536 bytes leftover after parsing attributes in process `syz.1.20528'. [ 994.314730][T18074] netlink: 52 bytes leftover after parsing attributes in process `syz.1.20528'. [ 994.350467][T18080] netlink: 104 bytes leftover after parsing attributes in process `syz.0.20531'. [ 994.373199][T18082] overlayfs: missing 'lowerdir' [ 995.553612][T18151] netlink: 68 bytes leftover after parsing attributes in process `syz.6.20563'. [ 995.557675][T18155] loop0: detected capacity change from 0 to 512 [ 995.605690][T18155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 995.672127][T18155] EXT4-fs (loop0): 1 truncate cleaned up [ 995.681377][T18155] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 997.939360][T18305] [ 997.941724][T18305] ====================================================== [ 997.948741][T18305] WARNING: possible circular locking dependency detected [ 997.955868][T18305] syzkaller #0 Not tainted [ 997.960465][T18305] ------------------------------------------------------ [ 997.967681][T18305] syz.0.20636/18305 is trying to acquire lock: [ 997.974136][T18305] ffff888023108238 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x710 [ 997.983256][T18305] [ 997.983256][T18305] but task is already holding lock: [ 997.991344][T18305] ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 998.001368][T18305] [ 998.001368][T18305] which lock already depends on the new lock. [ 998.001368][T18305] [ 998.012546][T18305] [ 998.012546][T18305] the existing dependency chain (in reverse order) is: [ 998.022594][T18305] [ 998.022594][T18305] -> #2 (hrtimer_bases.lock){-.-.}-{2:2}: [ 998.030860][T18305] _raw_spin_lock_irqsave+0xa4/0xf0 [ 998.036599][T18305] hrtimer_start_range_ns+0xff/0xc20 [ 998.042639][T18305] kvfree_call_rcu+0x60d/0x7c0 [ 998.048052][T18305] rtnl_register_internal+0x489/0x590 [ 998.054053][T18305] rtnl_register+0x2e/0x70 [ 998.058998][T18305] ip_rt_init+0x2e0/0x3a0 [ 998.064245][T18305] ip_init+0xa/0x20 [ 998.068835][T18305] inet_init+0x28b/0x3a0 [ 998.075255][T18305] do_one_initcall+0x1ee/0x680 [ 998.080973][T18305] do_initcall_level+0x137/0x1f0 [ 998.086892][T18305] do_initcalls+0x4b/0x90 [ 998.091905][T18305] kernel_init_freeable+0x3ce/0x560 [ 998.097708][T18305] kernel_init+0x19/0x1b0 [ 998.103245][T18305] ret_from_fork+0x1f/0x30 [ 998.108482][T18305] [ 998.108482][T18305] -> #1 (krc.lock){..-.}-{2:2}: [ 998.115985][T18305] _raw_spin_lock+0x2a/0x40 [ 998.121107][T18305] kvfree_call_rcu+0x186/0x7c0 [ 998.126385][T18305] trie_update_elem+0x86e/0xc50 [ 998.132000][T18305] bpf_map_update_value+0x57d/0x650 [ 998.137700][T18305] generic_map_update_batch+0x525/0x7c0 [ 998.143752][T18305] bpf_map_do_batch+0x466/0x600 [ 998.149188][T18305] __sys_bpf+0x601/0x670 [ 998.154633][T18305] __x64_sys_bpf+0x78/0x90 [ 998.159947][T18305] do_syscall_64+0x4c/0xa0 [ 998.165423][T18305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 998.172020][T18305] [ 998.172020][T18305] -> #0 (&trie->lock){..-.}-{2:2}: [ 998.179705][T18305] __lock_acquire+0x2c33/0x7c60 [ 998.185080][T18305] lock_acquire+0x197/0x3f0 [ 998.190096][T18305] _raw_spin_lock_irqsave+0xa4/0xf0 [ 998.196074][T18305] trie_delete_elem+0x90/0x710 [ 998.201861][T18305] bpf_prog_2c29ac5cdc6b1842+0x3a/0x558 [ 998.209172][T18305] bpf_trace_run2+0x15b/0x2d0 [ 998.215201][T18305] enqueue_hrtimer+0x314/0x370 [ 998.221097][T18305] hrtimer_start_range_ns+0xa7e/0xc20 [ 998.227155][T18305] futex_wait_queue_me+0x18c/0x440 [ 998.233033][T18305] futex_wait+0x202/0x5c0 [ 998.238053][T18305] do_futex+0xd1c/0x1240 [ 998.242902][T18305] __se_sys_futex+0x3a3/0x430 [ 998.248080][T18305] do_syscall_64+0x4c/0xa0 [ 998.253094][T18305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 998.259582][T18305] [ 998.259582][T18305] other info that might help us debug this: [ 998.259582][T18305] [ 998.270699][T18305] Chain exists of: [ 998.270699][T18305] &trie->lock --> krc.lock --> hrtimer_bases.lock [ 998.270699][T18305] [ 998.283182][T18305] Possible unsafe locking scenario: [ 998.283182][T18305] [ 998.290872][T18305] CPU0 CPU1 [ 998.296210][T18305] ---- ---- [ 998.301549][T18305] lock(hrtimer_bases.lock); [ 998.306228][T18305] lock(krc.lock); [ 998.312537][T18305] lock(hrtimer_bases.lock); [ 998.319720][T18305] lock(&trie->lock); [ 998.324320][T18305] [ 998.324320][T18305] *** DEADLOCK *** [ 998.324320][T18305] [ 998.333924][T18305] 2 locks held by syz.0.20636/18305: [ 998.339194][T18305] #0: ffff8880b902a258 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0xff/0xc20 [ 998.349979][T18305] #1: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 998.359352][T18305] [ 998.359352][T18305] stack backtrace: [ 998.365232][T18305] CPU: 0 PID: 18305 Comm: syz.0.20636 Not tainted syzkaller #0 [ 998.372775][T18305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 998.383073][T18305] Call Trace: [ 998.386341][T18305] [ 998.389268][T18305] dump_stack_lvl+0x168/0x230 [ 998.393943][T18305] ? load_image+0x3b0/0x3b0 [ 998.398432][T18305] ? show_regs_print_info+0x20/0x20 [ 998.403622][T18305] ? print_circular_bug+0x12b/0x1a0 [ 998.408942][T18305] check_noncircular+0x274/0x310 [ 998.414318][T18305] ? add_chain_block+0x940/0x940 [ 998.419235][T18305] ? lockdep_lock+0xdc/0x1e0 [ 998.424255][T18305] ? mark_lock+0x94/0x320 [ 998.428657][T18305] ? mark_lock+0x94/0x320 [ 998.432961][T18305] ? _find_first_zero_bit+0xce/0xf0 [ 998.438165][T18305] __lock_acquire+0x2c33/0x7c60 [ 998.443077][T18305] ? __lock_acquire+0x12d9/0x7c60 [ 998.448086][T18305] ? verify_lock_unused+0x140/0x140 [ 998.453350][T18305] ? mark_lock+0x94/0x320 [ 998.457672][T18305] lock_acquire+0x197/0x3f0 [ 998.462151][T18305] ? trie_delete_elem+0x90/0x710 [ 998.467067][T18305] ? verify_lock_unused+0x140/0x140 [ 998.472250][T18305] ? read_lock_is_recursive+0x10/0x10 [ 998.477619][T18305] _raw_spin_lock_irqsave+0xa4/0xf0 [ 998.482812][T18305] ? trie_delete_elem+0x90/0x710 [ 998.487742][T18305] ? _raw_spin_lock+0x40/0x40 [ 998.492401][T18305] trie_delete_elem+0x90/0x710 [ 998.497144][T18305] bpf_prog_2c29ac5cdc6b1842+0x3a/0x558 [ 998.502662][T18305] bpf_trace_run2+0x15b/0x2d0 [ 998.507488][T18305] ? lockdep_hardirqs_off+0x70/0x100 [ 998.513058][T18305] ? bpf_trace_run1+0x2d0/0x2d0 [ 998.518035][T18305] ? debug_object_activate+0x2d2/0x480 [ 998.523494][T18305] ? _raw_spin_lock+0x40/0x40 [ 998.528343][T18305] enqueue_hrtimer+0x314/0x370 [ 998.533110][T18305] hrtimer_start_range_ns+0xa7e/0xc20 [ 998.538467][T18305] futex_wait_queue_me+0x18c/0x440 [ 998.543647][T18305] futex_wait+0x202/0x5c0 [ 998.548041][T18305] ? do_futex+0x1240/0x1240 [ 998.552520][T18305] ? __remove_hrtimer+0x3a0/0x3a0 [ 998.557526][T18305] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 998.563938][T18305] do_futex+0xd1c/0x1240 [ 998.568269][T18305] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 998.574643][T18305] ? lockdep_hardirqs_on+0x94/0x140 [ 998.579954][T18305] ? ktime_get+0x7b/0x270 [ 998.585522][T18305] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 998.591768][T18305] ? ktime_get_real_ts64+0x420/0x420 [ 998.597048][T18305] ? futex_exit_release+0x1c0/0x1c0 [ 998.602326][T18305] ? get_timespec64+0x10e/0x1a0 [ 998.607265][T18305] ? timespec64_add_safe+0x1d0/0x1d0 [ 998.612738][T18305] ? ktime_get+0x247/0x270 [ 998.617220][T18305] __se_sys_futex+0x3a3/0x430 [ 998.621907][T18305] ? __x64_sys_futex+0xf0/0xf0 [ 998.626867][T18305] ? vtime_user_exit+0x2dc/0x400 [ 998.631896][T18305] ? __x64_sys_futex+0x1d/0xf0 [ 998.636646][T18305] do_syscall_64+0x4c/0xa0 [ 998.641071][T18305] ? clear_bhb_loop+0x30/0x80 [ 998.645733][T18305] ? clear_bhb_loop+0x30/0x80 [ 998.650411][T18305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 998.656473][T18305] RIP: 0033:0x7fe271069749 [ 998.661000][T18305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.680707][T18305] RSP: 002b:00007ffec57b8438 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 998.689107][T18305] RAX: ffffffffffffffda RBX: 00000000000e8ab6 RCX: 00007fe271069749 [ 998.697068][T18305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2712bffac [ 998.705479][T18305] RBP: 0000000000000032 R08: 000089ee3c572980 R09: 0000000fc57b872f [ 998.713456][T18305] R10: 00007ffec57b8530 R11: 0000000000000246 R12: 00007fe2712bffac [ 998.722466][T18305] R13: 00007ffec57b8530 R14: 00000000000e8ae8 R15: 00007ffec57b8550 [ 998.730544][T18305] SYZFAIL: failed to send rpc fd=3 want=480 sent=0 n=-1 (errno 32: Broken pipe)