last executing test programs: 27m18.785464337s ago: executing program 32 (id=63): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 27m7.795531334s ago: executing program 33 (id=187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="18010000070a0101"], 0x118}, 0x1, 0x0, 0x0, 0x20080010}, 0x24000082) 27m6.003281937s ago: executing program 1 (id=198): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0) 27m5.883084777s ago: executing program 1 (id=199): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x800000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 27m5.765636907s ago: executing program 1 (id=200): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$rxrpc(r0, 0x0, 0x0, 0x60, 0x0, 0x0) 27m5.745598341s ago: executing program 1 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 27m5.691011035s ago: executing program 1 (id=202): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)) 27m3.888213717s ago: executing program 1 (id=207): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 27m3.635266758s ago: executing program 34 (id=207): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 25m7.100004282s ago: executing program 5 (id=983): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4000008, "ab3cfa07558139ede6dc06270ee04200", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x8dc3e4e26cb29028, 0x0, 0x0}) 25m6.770668374s ago: executing program 5 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000950304001080080015"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 25m6.581758851s ago: executing program 5 (id=990): socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 25m5.682548163s ago: executing program 5 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9f341a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f881, 0x0) 25m5.328037689s ago: executing program 5 (id=999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/83, 0x53}, {0x0}, {&(0x7f0000000780)=""/30, 0x1e}], 0x3}, 0x40000100) 25m4.059344312s ago: executing program 5 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 25m3.39941592s ago: executing program 35 (id=1013): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 19m32.708055141s ago: executing program 2 (id=3306): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40000c4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000500)={0x9, 0x6, 0x5, 0x80000001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) r5 = socket$inet(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) 19m32.58962335s ago: executing program 2 (id=3308): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xcf) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) utime(&(0x7f0000000000)='./file0\x00', 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) mremap(&(0x7f000062b000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000557000/0x2000)=nil) 19m32.531001263s ago: executing program 2 (id=3310): socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080), 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x2d) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050) 19m32.151757999s ago: executing program 2 (id=3314): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) pread64(r0, &(0x7f0000000040), 0x34, 0x7ff) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@cswp={0x58, 0x114, 0x7, {{0x4, 0x81e}, &(0x7f00000000c0)=0xb72, 0x0, 0x800008, 0xe0000, 0x1e, 0x2, 0x3b, 0xffffffff}}, @cswp={0x58, 0x114, 0x7, {{0xb, 0x3}, 0x0, 0x0, 0x401, 0x5, 0x8, 0x3, 0x40, 0x8}}], 0xb0}, 0x0) 19m29.213965431s ago: executing program 2 (id=3320): socket$rds(0x15, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, 0x0}) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_PAGE_SCAN_ACTIVITY={{0x5}, 0x7}}}, 0x7) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/134, 0x86}, {0x0}, {&(0x7f0000000380)=""/153, 0x99}], 0x5}, 0x9a9}], 0x1, 0x21, 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) socket(0xa, 0x2, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x280c002, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x2, 0xff2e}], 0x1, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x40084146, &(0x7f0000000080)) 19m27.657804067s ago: executing program 2 (id=3323): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) 19m10.364390033s ago: executing program 36 (id=3323): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = fanotify_init(0xf00, 0x1) fanotify_mark(r3, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) 10m1.129940734s ago: executing program 8 (id=7493): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 10m0.021948762s ago: executing program 8 (id=7501): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002400), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xf) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = fanotify_init(0xf00, 0x1000) fanotify_mark(r6, 0x105, 0x10000839, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0x615, 0x51d000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) syz_ublk_setup_io_uring(0xd61, &(0x7f0000000280)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_ublk_add_dev(0xffffffffffffffff, r8, r9, r10, 0x0, &(0x7f0000000180)) 9m58.490206262s ago: executing program 8 (id=7509): r0 = io_uring_setup(0x78eb, &(0x7f00000000c0)={0x0, 0xc63b, 0x3018, 0x2, 0x1f9}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x2000000]}, 0x18) 9m58.18806853s ago: executing program 8 (id=7514): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/file0\x00', &(0x7f0000000100)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x18d083, 0x0) 9m58.076830055s ago: executing program 8 (id=7516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000100)) 9m56.455687795s ago: executing program 8 (id=7540): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 9m56.146778736s ago: executing program 37 (id=7540): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = dup(r0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 6m7.445747786s ago: executing program 7 (id=9372): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000fe0000000000000000010000850000002e000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c6788"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de7", 0x2e}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m1.079825731s ago: executing program 7 (id=9393): socket$netlink(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m0.413047781s ago: executing program 7 (id=9395): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$radio(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x40000000000009e, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x22, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 5m57.160046154s ago: executing program 7 (id=9401): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000000)=""/45, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80, 0xd}, 'port1\x00', 0xf3, 0x1b1c06, 0xfffffffa, 0x4, 0x1000000, 0x0, 0x1, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5319, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, 0x0, 0xf, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5m52.965436758s ago: executing program 7 (id=9413): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x4000000000002, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0x1c) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) write(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m45.465122739s ago: executing program 7 (id=9425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x80080) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 5m28.821785996s ago: executing program 38 (id=9425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x80080) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 10.493404549s ago: executing program 4 (id=12206): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="60000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100004000128008000100736974003400028005000a000100000005000a0400000000050004000000000008000200ac1e000106000e0001000000050005"], 0x60}, 0x1, 0x0, 0x0, 0x40054d0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 10.246565105s ago: executing program 4 (id=12211): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000004200)={0x2020}, 0x2020) 9.940208988s ago: executing program 4 (id=12217): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd25, 0xfffffffc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x40089c0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="200d0400000069"], 0x0, 0x0, 0x0, 0x0}) 6.332310701s ago: executing program 4 (id=12238): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000002c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.455204018s ago: executing program 6 (id=12275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4.234097104s ago: executing program 6 (id=12280): close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003b0009002bbd7000fddbc72512"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9ca}, @TCA_CAKE_MPU={0x8, 0xe, 0x5b}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.161474132s ago: executing program 4 (id=12282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b80)='k', 0x1}, {&(0x7f0000000240)="c28684d2", 0x4}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "ed00", "afdc015c0ff3470bcc8c53b3a89926b6", "20ff9b00", "2db940642b545ea2"}, 0x28) 4.105736131s ago: executing program 9 (id=12284): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x3, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x44040) 4.074430286s ago: executing program 3 (id=12285): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) fcntl$notify(r0, 0x402, 0x80000003) r1 = fanotify_init(0x1a, 0x800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8) fanotify_mark(r1, 0x229, 0x4800001a, r2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.051229914s ago: executing program 6 (id=12286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0xe0000003}) 3.962363146s ago: executing program 4 (id=12288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='core\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='mem\n', 0x4) 3.904717078s ago: executing program 9 (id=12289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) dup(r2) socket$packet(0x11, 0x3, 0x300) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe09c, 0x0, 0x1, 0xb5}, 0x0, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000) 3.74873747s ago: executing program 3 (id=12291): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001580)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1}) 2.733614776s ago: executing program 3 (id=12292): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00042ebd7200fddb0c000000914e46ca16da4b5dd5179188a5ec2e23c63f99ba79b4bbb035e14292dc"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) 2.52115701s ago: executing program 6 (id=12294): mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)={[{@stats}]}) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000001}}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) 2.269859764s ago: executing program 9 (id=12297): syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x2, 0xb1f1, &(0x7f0000000040)={{0x0, 0x5, 0x402}}, 0x0, 0x0}}) r0 = syz_io_uring_setup(0x2f47, &(0x7f0000000480)={0x0, 0xa29e, 0x800, 0x3, 0x15e}, &(0x7f00000003c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000240)=0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000040)={0x39, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x2, 0x1, 0x0, 0x0) 2.097110575s ago: executing program 6 (id=12299): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x23) 1.775734855s ago: executing program 3 (id=12305): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) truncate(&(0x7f0000000140)='./file0\x00', 0x55) close(r0) 1.614227342s ago: executing program 3 (id=12307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xf642, 0x20, 0x6, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000009c0)=0x16) 1.474480007s ago: executing program 3 (id=12310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200002, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_usb_connect$cdc_ncm(0x3, 0x6e, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) 1.402074998s ago: executing program 0 (id=12311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 1.395284388s ago: executing program 0 (id=12312): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300000000000004050006"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) 1.323756735s ago: executing program 9 (id=12313): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0xc8801) 310.190332ms ago: executing program 0 (id=12314): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0, 0x0, 0x3) fsync(r0) 309.953689ms ago: executing program 6 (id=12315): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 225.979823ms ago: executing program 0 (id=12316): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, 0x0) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d2) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) close_range(r0, 0xffffffffffffffff, 0x0) 148.202708ms ago: executing program 9 (id=12317): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/153, 0x99}], 0x1}, 0x1a021) 93.860707ms ago: executing program 0 (id=12318): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) dup(r2) socket$packet(0x11, 0x3, 0x300) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe09c, 0x0, 0x1, 0xb5}, 0x0, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x4000000) 16.526965ms ago: executing program 9 (id=12319): recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/19, 0x13}, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 0 (id=12320): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff1}, {0x10, 0xffff}, {0x0, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "55f9a310c6ab7794fd109f95accb2cf9"}]}}]}, 0x50}}, 0x4040004) kernel console output (not intermixed with test programs): [ 1088.002931][T22991] bridge0: port 3(erspan0) entered blocking state [ 1088.013201][T22991] bridge0: port 3(erspan0) entered forwarding state [ 1090.210835][T23047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6679'. [ 1091.872020][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1092.505185][T23090] fuse: Unknown parameter 'user_id00000000000000000000' [ 1094.102153][T23125] fuse: Bad value for 'rootmode' [ 1095.437134][T23160] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1095.888869][T23166] fuse: Bad value for 'rootmode' [ 1096.264497][T23158] fuse: fd is not a fuse device [ 1097.472101][T23199] fuse: Bad value for 'fd' [ 1098.488769][T23205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6743'. [ 1098.559101][ T38] kauditd_printk_skb: 30 callbacks suppressed [ 1098.559119][ T38] audit: type=1326 audit(2000000922.331:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.559169][ T38] audit: type=1326 audit(2000000922.331:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.583649][ T38] audit: type=1326 audit(2000000922.351:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.589531][ T38] audit: type=1326 audit(2000000922.361:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.589601][ T38] audit: type=1326 audit(2000000922.361:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.589650][ T38] audit: type=1326 audit(2000000922.361:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.595897][ T38] audit: type=1326 audit(2000000922.361:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.649691][ T38] audit: type=1326 audit(2000000922.411:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.649858][ T38] audit: type=1326 audit(2000000922.411:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.654122][ T38] audit: type=1326 audit(2000000922.421:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23209 comm="syz.6.6747" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1098.980914][T23221] batadv_slave_1: entered promiscuous mode [ 1098.981130][T23221] macvlan2: entered allmulticast mode [ 1098.981153][T23221] batadv_slave_1: entered allmulticast mode [ 1100.732257][T23244] fuse: Bad value for 'fd' [ 1101.993127][T23261] fuse: Unknown parameter '0x0000000000000005' [ 1104.408439][T23275] fuse: Unknown parameter 'use00000000000000000000' [ 1105.712078][T23295] fuse: Unknown parameter '0x0000000000000005' [ 1106.398160][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1107.890855][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1107.890872][ T38] audit: type=1326 audit(2000000931.662:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.890989][ T38] audit: type=1326 audit(2000000931.662:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.910697][ T38] audit: type=1326 audit(2000000931.682:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.910883][ T38] audit: type=1326 audit(2000000931.682:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.914829][ T38] audit: type=1326 audit(2000000931.692:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.914881][ T38] audit: type=1326 audit(2000000931.692:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.915124][ T38] audit: type=1326 audit(2000000931.692:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.923165][ T38] audit: type=1326 audit(2000000931.692:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.924590][ T38] audit: type=1326 audit(2000000931.702:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1107.926787][ T38] audit: type=1326 audit(2000000931.702:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23368 comm="syz.6.6812" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1108.178402][T23373] netlink: 'syz.9.6813': attribute type 6 has an invalid length. [ 1109.738350][T23406] netlink: 'syz.8.6829': attribute type 15 has an invalid length. [ 1109.767528][T23406] netlink: 'syz.8.6829': attribute type 15 has an invalid length. [ 1109.933578][ T5703] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1110.093693][ T5703] usb 8-1: Using ep0 maxpacket: 32 [ 1110.097234][ T5703] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1110.097259][ T5703] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.149872][ T5703] usb 8-1: config 0 descriptor?? [ 1110.375306][ T5703] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1110.480572][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1110.491670][ T5703] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1110.495139][ T5703] usb 8-1: media controller created [ 1110.805321][T23431] fuse: fd is not a fuse device [ 1110.831663][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1110.954729][T23437] program syz.8.6843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1111.466744][ T5703] az6027: usb out operation failed. (-71) [ 1111.472945][ T5703] az6027: usb out operation failed. (-71) [ 1111.472958][ T5703] stb0899_attach: Driver disabled by Kconfig [ 1111.472967][ T5703] az6027: no front-end attached [ 1111.472967][ T5703] [ 1111.502610][ T5703] az6027: usb out operation failed. (-71) [ 1111.502636][ T5703] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1111.537551][ T5703] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input94 [ 1111.665335][ T5703] dvb-usb: schedule remote query interval to 400 msecs. [ 1111.665359][ T5703] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1111.717648][ T5703] usb 8-1: USB disconnect, device number 32 [ 1112.220627][T23471] fuse: Unknown parameter '0x0000000000000005' [ 1113.793809][T23489] fuse: Unknown parameter 'fd0x0000000000000005' [ 1113.955230][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1114.392020][ T5703] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1115.278491][T23510] syz.8.6871 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1115.913348][T23529] fuse: Unknown parameter 'fd0x0000000000000005' [ 1116.539098][T23533] netlink: 'syz.8.6880': attribute type 1 has an invalid length. [ 1116.539121][T23533] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6880'. [ 1117.082467][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 1117.082483][ T38] audit: type=1326 audit(2000000940.852:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23546 comm="syz.7.6887" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d2de99 code=0x0 [ 1117.501042][T23556] overlayfs: failed to clone upperpath [ 1118.622525][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6893'. [ 1119.310667][T23589] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6905'. [ 1119.495113][T23601] netlink: 180 bytes leftover after parsing attributes in process `syz.7.6911'. [ 1121.018323][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6939'. [ 1121.018346][T23671] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6939'. [ 1121.913243][T23708] Invalid argument reading file caps for ./file0 [ 1122.260857][ T5703] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1122.280638][ T5703] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1124.111110][T23756] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1124.114527][T23755] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6978'. [ 1126.115745][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1128.234965][T23873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7031'. [ 1128.234994][T23873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7031'. [ 1128.599764][T23887] nbd: socks must be embedded in a SOCK_ITEM attr [ 1128.670005][T23887] block nbd1: shutting down sockets [ 1130.302200][ T37] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1130.382212][ T5610] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1130.532126][ T5610] usb 10-1: Using ep0 maxpacket: 8 [ 1130.534703][ T5610] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 1130.534728][ T5610] usb 10-1: config 0 has no interface number 0 [ 1130.534772][ T5610] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1130.534795][ T5610] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.590938][ T5610] usb 10-1: config 0 descriptor?? [ 1131.307147][ T5610] viperboard 10-1:0.143: version 0.00 found at bus 010 address 011 [ 1131.532816][ T37] usb 9-1: New USB device found, idVendor=0408, idProduct=3001, bcdDevice= 0.00 [ 1131.532851][ T37] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.811217][ T37] usb 9-1: config 0 descriptor?? [ 1131.875205][ T5610] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1131.875237][ T5610] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1132.799445][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799480][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799504][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799528][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799552][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799575][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799598][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799622][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.799645][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1132.862439][ T5610] usb 10-1: USB disconnect, device number 11 [ 1132.884064][ T37] hid-generic 0003:0408:3001.0012: unknown main item tag 0x0 [ 1133.151108][ T37] hid-generic 0003:0408:3001.0012: hidraw0: USB HID v0.06 Device [HID 0408:3001] on usb-dummy_hcd.8-1/input0 [ 1133.178850][ T37] usb 9-1: USB disconnect, device number 16 [ 1133.366018][T23978] fido_id[23978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 1133.439298][T23979] veth3: entered allmulticast mode [ 1137.069119][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1137.686630][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7108'. [ 1137.826044][T24068] input: syz0 as /devices/virtual/input/input99 [ 1138.008942][ T38] audit: type=1326 audit(2000000961.773:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24071 comm="syz.7.7114" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a18d2de99 code=0x0 [ 1138.337514][T24092] netlink: 60 bytes leftover after parsing attributes in process `syz.9.7123'. [ 1138.529231][T24102] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7128'. [ 1138.533887][T24102] netlink: 60 bytes leftover after parsing attributes in process `syz.8.7128'. [ 1138.538963][T24102] netlink: 508 bytes leftover after parsing attributes in process `syz.8.7128'. [ 1139.461406][T24142] fuse: fd is not a fuse device [ 1142.108192][T24181] fuse: fd is not a fuse device [ 1147.291442][T24254] fuse: fd is not a fuse device [ 1148.636904][T24276] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7194'. [ 1149.600550][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060f9b400: rx timeout, send abort [ 1149.694225][T24291] netlink: 66 bytes leftover after parsing attributes in process `syz.7.7201'. [ 1149.694246][T24291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7201'. [ 1149.694282][T24291] netlink: 66 bytes leftover after parsing attributes in process `syz.7.7201'. [ 1150.108338][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888060f9b400: abort rx timeout. Force session deactivation [ 1151.473160][T24324] fuse: fd is not a fuse device [ 1154.361641][T24371] fuse: fd is not a fuse device [ 1155.833619][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7273'. [ 1155.840051][T24443] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7273'. [ 1158.040626][ T5703] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1158.210534][ T5703] usb 9-1: Using ep0 maxpacket: 16 [ 1158.237116][ T5703] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.237142][ T5703] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1158.239671][ T5703] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.239696][ T5703] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.239715][ T5703] usb 9-1: Product: syz [ 1158.239728][ T5703] usb 9-1: Manufacturer: syz [ 1158.239742][ T5703] usb 9-1: SerialNumber: syz [ 1158.335238][ T5703] usb 9-1: 0:2 : does not exist [ 1158.566413][ T5703] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1158.594529][ T38] audit: type=1800 audit(2000000982.365:408): pid=24507 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.7300" name="idVendor" dev="configfs" ino=68266 res=0 errno=0 [ 1158.660192][ T5703] usb 9-1: USB disconnect, device number 17 [ 1158.717595][T24484] udevd[24484]: setting mode of /dev/bus/usb/009/017 to 020664 failed: No such file or directory [ 1158.717708][T24484] udevd[24484]: setting owner of /dev/bus/usb/009/017 to uid=0, gid=0 failed: No such file or directory [ 1158.808910][T24484] udevd[24484]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1158.866562][T24513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1158.866577][T24513] IPv6: NLM_F_CREATE should be set when creating new route [ 1158.866607][T24513] IPv6: NLM_F_CREATE should be set when creating new route [ 1159.327943][T24525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1159.720059][T24543] 9p: Bad value for 'wfdno' [ 1160.826303][T24552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7321'. [ 1160.923412][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7322'. [ 1161.339733][T24580] 9p: Bad value for 'rfdno' [ 1161.852874][ T38] audit: type=1326 audit(2000000985.625:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.854536][ T38] audit: type=1326 audit(2000000985.625:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.857339][ T38] audit: type=1326 audit(2000000985.625:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.857469][ T38] audit: type=1326 audit(2000000985.625:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.859115][ T38] audit: type=1326 audit(2000000985.625:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.859439][ T38] audit: type=1326 audit(2000000985.625:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.859579][ T38] audit: type=1326 audit(2000000985.625:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.860017][ T38] audit: type=1326 audit(2000000985.625:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1161.860212][ T38] audit: type=1326 audit(2000000985.625:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24611 comm="syz.6.7350" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1162.390769][ T5703] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1162.540664][ T5703] usb 8-1: Using ep0 maxpacket: 16 [ 1162.544506][ T5703] usb 8-1: config index 0 descriptor too short (expected 37359, got 202) [ 1162.544533][ T5703] usb 8-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 1162.544556][ T5703] usb 8-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.544577][ T5703] usb 8-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 1162.549855][ T5703] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1162.549884][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.549906][ T5703] usb 8-1: Product: syz [ 1162.549921][ T5703] usb 8-1: Manufacturer: syz [ 1162.549936][ T5703] usb 8-1: SerialNumber: syz [ 1162.652667][ T5703] usb 8-1: 0:2 : does not exist [ 1162.903276][ T5703] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1163.023594][ T5703] usb 8-1: USB disconnect, device number 33 [ 1163.084242][T24484] udevd[24484]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1167.427948][T24725] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7398'. [ 1167.473403][T24725] netlink: 'syz.6.7398': attribute type 12 has an invalid length. [ 1167.473425][T24725] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7398'. [ 1172.755357][T24857] fuse: Bad value for 'fd' [ 1173.571648][T24890] sit2: entered promiscuous mode [ 1173.650042][ T5703] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1173.809634][ T5703] usb 10-1: Using ep0 maxpacket: 32 [ 1173.826364][ T5703] usb 10-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1173.826394][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.826417][ T5703] usb 10-1: Product: syz [ 1173.826432][ T5703] usb 10-1: Manufacturer: syz [ 1173.826460][ T5703] usb 10-1: SerialNumber: syz [ 1173.877950][ T5703] usb 10-1: config 0 descriptor?? [ 1173.904414][ T5703] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1174.348436][T24912] loop2: detected capacity change from 0 to 7 [ 1174.358638][T24912] Dev loop2: unable to read RDB block 7 [ 1174.358748][T24912] loop2: AHDI p1 p2 p3 p4 [ 1174.358770][T24912] loop2: partition table partially beyond EOD, truncated [ 1174.359007][T24912] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1174.359025][T24912] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1174.359041][T24912] loop2: p3 start 9 is beyond EOD, truncated [ 1174.946888][ T5703] gspca_ov534_9: reg_w failed -71 [ 1175.249987][ T5703] gspca_ov534_9: Unknown sensor 0000 [ 1175.250090][ T5703] ov534_9 10-1:0.0: probe with driver ov534_9 failed with error -22 [ 1175.259349][ T5703] usb 10-1: USB disconnect, device number 12 [ 1175.661447][T24947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7490'. [ 1178.004979][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1179.314996][T25023] openvswitch: netlink: Actions may not be safe on all matching packets [ 1180.072804][ T9916] smbdirect: ib_dev[syz1] removed [ 1181.008108][T21942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1181.092916][T21942] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1181.095024][T21942] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1181.134914][T21942] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1181.137155][T21942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1181.733415][T25104] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1182.016195][T25120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7567'. [ 1182.572377][T25144] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7573'. [ 1183.309340][ T4910] Bluetooth: hci2: command tx timeout [ 1183.924079][T25073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.924278][T25073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.924460][T25073] bridge_slave_0: entered allmulticast mode [ 1183.932764][T25073] bridge_slave_0: entered promiscuous mode [ 1183.963517][T25073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.964332][T25073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.964496][T25073] bridge_slave_1: entered allmulticast mode [ 1183.974678][T25073] bridge_slave_1: entered promiscuous mode [ 1184.243000][T25073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1184.246700][T25073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.403969][T25182] fuse: Unknown parameter 'group_id00000000000000000000' [ 1185.300402][T25073] team0: Port device team_slave_0 added [ 1185.319498][T25073] team0: Port device team_slave_1 added [ 1185.374719][T25073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.374735][T25073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.374760][T25073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.377771][T25073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.377806][T25073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.377834][T25073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.389114][ T4910] Bluetooth: hci2: command tx timeout [ 1185.559054][T25073] hsr_slave_0: entered promiscuous mode [ 1185.560348][T25073] hsr_slave_1: entered promiscuous mode [ 1185.561370][T25073] debugfs: 'hsr0' already exists in 'hsr' [ 1185.561392][T25073] Cannot create hsr debugfs directory [ 1187.474347][ T4910] Bluetooth: hci2: command tx timeout [ 1187.576271][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.664946][T25242] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 1187.664963][T25242] binder: 25238:25242 ioctl 4018620d 200000004a80 returned -1 [ 1188.266088][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7626'. [ 1188.697743][T25290] gr_udc pcspkr: error -EINVAL: invalid resource (null) [ 1188.697776][T25290] gr_udc pcspkr: probe with driver gr_udc failed with error -22 [ 1189.550671][ T4910] Bluetooth: hci2: command tx timeout [ 1193.574954][T25073] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.764578][T25073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1193.766108][T25073] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1193.873228][T25073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1193.877256][T25073] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1193.961990][T25073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1193.963131][T25073] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1194.142464][T25073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1194.627639][T25511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7704'. [ 1194.653024][T25073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.718030][T25073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.736347][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.736482][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.997523][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.997646][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.162688][T25530] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7703'. [ 1195.698936][T25551] fuse: fd is not a fuse device [ 1196.968977][T25613] tls_set_device_offload: netdev not found [ 1196.977657][T25073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.399625][T25073] veth0_vlan: entered promiscuous mode [ 1197.491611][T25073] veth1_vlan: entered promiscuous mode [ 1197.757353][T25073] veth0_macvtap: entered promiscuous mode [ 1197.783533][T25073] veth1_macvtap: entered promiscuous mode [ 1197.788613][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1197.905077][T25073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.942736][T25073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.979422][T13198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.980483][T13198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.981096][T13198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.055513][T13198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.655918][T25661] ip6gre1: entered allmulticast mode [ 1198.964736][T12047] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1199.665519][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1199.665540][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.152888][T12047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.152908][T12047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.815064][T25726] bridge_slave_0: invalid flags given to default FDB implementation [ 1200.846492][T25726] bridge_slave_0: invalid flags given to default FDB implementation [ 1201.056694][T25734] fuse: fd is not a fuse device [ 1201.697108][T25752] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7777'. [ 1202.617543][T25775] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7789'. [ 1203.449385][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1205.775899][T25862] gr_udc pcspkr: error -EINVAL: invalid resource (null) [ 1205.775931][T25862] gr_udc pcspkr: probe with driver gr_udc failed with error -22 [ 1205.785765][T25865] veth1_to_bond: entered allmulticast mode [ 1205.814434][T25865] veth1_to_bond: left allmulticast mode [ 1206.140701][T25874] 9pnet: p9_errstr2errno: server reported unknown error  [ 1208.668294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1208.995556][T25988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7865'. [ 1209.365635][T26002] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7875'. [ 1210.399462][ T37] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1210.550445][ T37] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1210.550482][ T37] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1210.550513][ T37] usb 10-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 1210.550536][ T37] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.628658][ T37] usb 10-1: config 0 descriptor?? [ 1210.631197][T26046] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1210.932109][T26082] input: syz1 as /devices/virtual/input/input111 [ 1211.016755][T26075] ffs_data_put(): freeing [ 1211.146087][ T37] hid_parser_main: 470 callbacks suppressed [ 1211.146112][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146143][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146170][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146198][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146224][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146250][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146276][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146302][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146328][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.146354][ T37] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 1211.173158][ T37] razer 0003:1532:010D.0013: unexpected long global item [ 1211.194178][ T37] razer 0003:1532:010D.0013: probe with driver razer failed with error -22 [ 1211.318476][ T4910] Bluetooth: hci2: command 0x0406 tx timeout [ 1211.326196][ T37] usb 10-1: USB disconnect, device number 13 [ 1211.418763][T26096] fuse: fd is not a fuse device [ 1211.822705][T26112] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 1211.822705][T26112] program syz.3.7924 not setting count and/or reply_len properly [ 1211.868470][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1211.963645][T26117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.991275][T26117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.076898][T26117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.077011][T26117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1212.077343][T26117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.105443][T26117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1212.240126][T26117] team0: Port device bridge0 added [ 1212.336872][T26130] fuse: fd is not a fuse device [ 1212.564900][T26135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1213.896916][T26176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1213.962894][T26176] batman_adv: batadv0: Adding interface: gretap1 [ 1213.962912][T26176] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.962944][T26176] batman_adv: batadv0: Interface activated: gretap1 [ 1215.165636][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7972'. [ 1216.428623][T26239] netlink: 'syz.3.7983': attribute type 12 has an invalid length. [ 1216.428644][T26239] netlink: 'syz.3.7983': attribute type 29 has an invalid length. [ 1216.428655][T26239] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1216.428692][T26239] netlink: 'syz.3.7983': attribute type 1 has an invalid length. [ 1216.428704][T26239] netlink: 'syz.3.7983': attribute type 2 has an invalid length. [ 1216.428716][T26239] netlink: 11 bytes leftover after parsing attributes in process `syz.3.7983'. [ 1216.734362][T26254] veth0: entered promiscuous mode [ 1216.744204][T26252] veth0: left promiscuous mode [ 1217.627498][T26296] futex_wake_op: syz.9.8009 tries to shift op by -1; fix this program [ 1217.668319][T26296] trusted_key: encrypted_key: key user:syz not found [ 1217.907641][T26309] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8015'. [ 1217.970893][T26314] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8015'. [ 1218.015097][T26309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.015362][T26309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.409924][T26339] netlink: 11870 bytes leftover after parsing attributes in process `syz.6.8026'. [ 1221.338326][T26466] netlink: 'syz.6.8084': attribute type 1 has an invalid length. [ 1221.338354][T26466] netlink: 'syz.6.8084': attribute type 2 has an invalid length. [ 1221.767755][T26486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1222.043910][T26495] loop5: detected capacity change from 0 to 7 [ 1222.046079][T26495] loop5: p3 p4 [ 1222.046102][T26495] loop5: partition table partially beyond EOD, truncated [ 1222.366680][T26505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1222.390534][T26505] batman_adv: batadv0: Adding interface: gretap1 [ 1222.390566][T26505] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1222.390596][T26505] batman_adv: batadv0: Interface activated: gretap1 [ 1222.462569][T26047] udevd[26047]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1222.477782][T26094] udevd[26094]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1224.519285][T26552] overlayfs: failed to resolve './cgroup': -2 [ 1225.988933][ T5584] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1226.153504][ T5584] usb 4-1: Using ep0 maxpacket: 16 [ 1226.155982][ T5584] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1226.177531][ T5584] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1226.177558][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.177579][ T5584] usb 4-1: Product: syz [ 1226.177593][ T5584] usb 4-1: Manufacturer: syz [ 1226.177607][ T5584] usb 4-1: SerialNumber: syz [ 1226.184650][ T5584] usb 4-1: config 0 descriptor?? [ 1226.235256][ T5584] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1226.247709][ T5584] usb 4-1: Detected FT232R [ 1226.394272][ T5584] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1226.394853][ T5584] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1226.395360][ T5584] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 1226.420871][ T5584] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1226.424550][ T5584] usb 4-1: USB disconnect, device number 3 [ 1226.451304][ T5584] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1226.454034][ T5584] ftdi_sio 4-1:0.0: device disconnected [ 1227.026039][T26622] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8153'. [ 1227.026069][T26622] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8153'. [ 1227.026087][T26622] netlink: 19 bytes leftover after parsing attributes in process `syz.9.8153'. [ 1227.026104][T26622] netlink: 'syz.9.8153': attribute type 2 has an invalid length. [ 1227.026118][T26622] netlink: 'syz.9.8153': attribute type 3 has an invalid length. [ 1227.026131][T26622] netlink: 19 bytes leftover after parsing attributes in process `syz.9.8153'. [ 1228.303737][T26671] 9p: Bad value for 'wfdno' [ 1228.507207][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.963246][T26691] fuse: Unknown parameter 'user_i00000000000000000000' [ 1229.798518][ T5724] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1229.947210][ T5724] usb 10-1: Using ep0 maxpacket: 8 [ 1229.954462][ T5724] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.954503][ T5724] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1229.954524][ T5724] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.006260][ T5724] usb 10-1: config 0 descriptor?? [ 1230.079966][ T5724] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1231.461218][ T5724] gspca_vc032x: reg_w err -71 [ 1231.461371][ T5724] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1231.466014][ T5724] usb 10-1: USB disconnect, device number 14 [ 1233.493319][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8238'. [ 1233.957046][ T5703] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1234.121443][ T5703] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1234.121473][ T5703] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.121491][ T5703] usb 10-1: Product: syz [ 1234.121504][ T5703] usb 10-1: Manufacturer: syz [ 1234.121517][ T5703] usb 10-1: SerialNumber: syz [ 1236.414335][ T5703] usb 10-1: usb_control_msg returned -71 [ 1236.414378][ T5703] usbtmc 10-1:1.0: can't read capabilities [ 1236.603682][ T5703] usb 10-1: USB disconnect, device number 15 [ 1236.971869][T26916] fuse: fd is not a fuse device [ 1238.555333][T26973] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8304'. [ 1238.693271][T26976] fuse: fd is not a fuse device [ 1243.112384][T27084] fuse: fd is not a fuse device [ 1243.181768][T27088] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1243.701820][T27119] netlink: 88 bytes leftover after parsing attributes in process `syz.6.8372'. [ 1248.951453][T27331] netlink: 'syz.3.8468': attribute type 83 has an invalid length. [ 1248.988974][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1252.885418][T27429] overlayfs: failed to clone lowerpath [ 1253.110606][T27442] fuse: Bad value for 'fd' [ 1253.407409][ T5584] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1253.492181][T27451] fuse: Unknown parameter 'fd0x0000000000000005' [ 1254.502143][ T5584] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1254.502173][ T5584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.502191][ T5584] usb 10-1: Product: syz [ 1254.502204][ T5584] usb 10-1: Manufacturer: syz [ 1254.502217][ T5584] usb 10-1: SerialNumber: syz [ 1254.582334][ T5584] usb 10-1: config 0 descriptor?? [ 1254.598241][ T5584] ch341 10-1:0.0: ch341-uart converter detected [ 1254.934689][T27472] netlink: 'syz.7.8527': attribute type 83 has an invalid length. [ 1255.096235][T27473] netlink: 'syz.7.8527': attribute type 83 has an invalid length. [ 1255.643513][ T5584] usb 10-1: failed to send control message: -71 [ 1255.643572][ T5584] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1255.665297][ T5584] usb 10-1: USB disconnect, device number 16 [ 1255.685922][ T5584] ch341 10-1:0.0: device disconnected [ 1255.703994][T26047] udevd[26047]: setting mode of /dev/bus/usb/010/016 to 020664 failed: No such file or directory [ 1255.704163][T26047] udevd[26047]: setting owner of /dev/bus/usb/010/016 to uid=0, gid=0 failed: No such file or directory [ 1256.330776][T27515] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8547'. [ 1256.464530][T27521] fuse: Bad value for 'fd' [ 1256.771107][T27534] overlayfs: failed to clone lowerpath [ 1257.472603][T27569] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8568'. [ 1257.710567][T27578] netlink: 'syz.3.8573': attribute type 15 has an invalid length. [ 1257.710588][T27578] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.8573'. [ 1257.712487][T27578] netlink: 'syz.3.8573': attribute type 6 has an invalid length. [ 1257.712501][T27578] netlink: 'syz.3.8573': attribute type 7 has an invalid length. [ 1257.712511][T27578] netlink: 'syz.3.8573': attribute type 11 has an invalid length. [ 1257.712522][T27578] netlink: 'syz.3.8573': attribute type 15 has an invalid length. [ 1257.712532][T27578] netlink: 'syz.3.8573': attribute type 16 has an invalid length. [ 1257.712560][T27578] netlink: 'syz.3.8573': attribute type 21 has an invalid length. [ 1257.712572][T27578] netlink: 'syz.3.8573': attribute type 25 has an invalid length. [ 1258.409070][T27607] netlink: 148 bytes leftover after parsing attributes in process `syz.6.8582'. [ 1260.507117][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1260.911835][T27683] wg2: entered allmulticast mode [ 1261.338615][ T31] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1261.347361][T27696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8621'. [ 1261.488580][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 1261.495755][ T31] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.495811][ T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1261.495835][ T31] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.543239][ T31] usb 10-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1261.543265][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.543284][ T31] usb 10-1: Product: syz [ 1261.543296][ T31] usb 10-1: Manufacturer: syz [ 1261.543309][ T31] usb 10-1: SerialNumber: syz [ 1261.595638][ T31] usb 10-1: config 0 descriptor?? [ 1261.612278][ T31] mcba_usb 10-1:0.0: Can't find endpoints [ 1261.845945][ T31] usb 10-1: USB disconnect, device number 17 [ 1263.237020][ T5584] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1263.394990][ T38] kauditd_printk_skb: 15 callbacks suppressed [ 1263.395007][ T38] audit: type=1326 audit(2000001343.166:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x0 [ 1263.440827][ T5584] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1263.442256][ T5584] usb 10-1: config 63 has an invalid interface number: 66 but max is 0 [ 1263.442281][ T5584] usb 10-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.442299][ T5584] usb 10-1: config 63 has no interface number 0 [ 1263.442328][ T5584] usb 10-1: config 63 interface 66 has no altsetting 0 [ 1263.493637][ T5584] usb 10-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1263.493669][ T5584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.493691][ T5584] usb 10-1: Product: syz [ 1263.493707][ T5584] usb 10-1: Manufacturer: syz [ 1263.493722][ T5584] usb 10-1: SerialNumber: syz [ 1263.617904][ T38] audit: type=1326 audit(2000001343.386:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.617950][ T38] audit: type=1326 audit(2000001343.386:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.618357][ T38] audit: type=1326 audit(2000001343.396:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.618405][ T38] audit: type=1326 audit(2000001343.396:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.620269][ T38] audit: type=1326 audit(2000001343.396:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.621963][ T38] audit: type=1326 audit(2000001343.396:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1263.670378][ T38] audit: type=1326 audit(2000001343.446:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2cd94e6ce code=0x7ffc0000 [ 1263.674212][ T38] audit: type=1326 audit(2000001343.446:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2cd94e6ce code=0x7ffc0000 [ 1263.677867][ T38] audit: type=1326 audit(2000001343.446:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27764 comm="syz.6.8652" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2cd94e6ce code=0x7ffc0000 [ 1263.867959][ T5584] uvcvideo 10-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1263.868090][ T5584] uvcvideo 10-1:63.66: No valid video chain found. [ 1263.874568][ T5584] usb 10-1: USB disconnect, device number 18 [ 1263.983683][T27774] fuse: Bad value for 'fd' [ 1265.917080][T27816] fuse: fd is not a fuse device [ 1267.823642][T27867] loop2: detected capacity change from 0 to 7 [ 1267.846112][T27867] Dev loop2: unable to read RDB block 7 [ 1267.846166][T27867] loop2: unable to read partition table [ 1267.846377][T27867] loop2: partition table beyond EOD, truncated [ 1267.846409][T27867] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1268.051892][T27874] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8697'. [ 1268.669894][T27889] fuse: fd is not a fuse device [ 1268.931019][ T4910] Bluetooth: hci5: command 0x1003 tx timeout [ 1269.227355][T21942] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1271.198573][T27921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8716'. [ 1272.102856][T27944] syzkaller0: entered promiscuous mode [ 1272.102881][T27944] syzkaller0: entered allmulticast mode [ 1272.846990][T27972] syzkaller0: entered promiscuous mode [ 1272.847017][T27972] syzkaller0: entered allmulticast mode [ 1273.969256][T28020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1274.627043][ T5584] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1274.797066][ T5584] usb 4-1: Using ep0 maxpacket: 16 [ 1274.806265][ T5584] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1274.806290][ T5584] usb 4-1: config 0 has no interface number 0 [ 1274.806329][ T5584] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1274.806354][ T5584] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 1274.861448][ T5584] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1274.861474][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.861491][ T5584] usb 4-1: Product: syz [ 1274.861504][ T5584] usb 4-1: Manufacturer: syz [ 1274.861516][ T5584] usb 4-1: SerialNumber: syz [ 1274.925519][ T5584] usb 4-1: config 0 descriptor?? [ 1274.926328][T28043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1274.926456][T28043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1275.146200][T28043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1275.146339][T28043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1275.472147][T28072] fuse: fd is not a fuse device [ 1276.197155][ T5584] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1276.437907][ T38] kauditd_printk_skb: 145 callbacks suppressed [ 1276.437927][ T38] audit: type=1326 audit(2000001356.206:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28079 comm="syz.6.8776" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x0 [ 1277.523894][T28129] fuse: fd is not a fuse device [ 1277.608550][T28131] fuse: fd is not a fuse device [ 1277.823326][ T5584] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1277.823357][ T5584] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1277.823680][ T5584] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1277.900244][ T5584] usb 4-1: USB disconnect, device number 4 [ 1278.000920][T28140] uprobe: syz.7.8804:28140 failed to unregister, leaking uprobe [ 1278.593369][T28174] validate_nla: 4 callbacks suppressed [ 1278.593385][T28174] netlink: 'syz.9.8818': attribute type 4 has an invalid length. [ 1278.635070][T28177] overlayfs: failed to clone upperpath [ 1278.680547][T28174] netlink: 'syz.9.8818': attribute type 4 has an invalid length. [ 1279.055619][ T38] audit: type=1326 audit(2000001358.826:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28186 comm="syz.6.8824" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7fc00000 [ 1279.064348][ T38] audit: type=1326 audit(2000001358.826:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28186 comm="syz.6.8824" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff2cd98de99 code=0x7fc00000 [ 1280.633689][ T38] audit: type=1326 audit(2000001360.406:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7fc00000 [ 1280.634908][ T38] audit: type=1326 audit(2000001360.406:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d6751de99 code=0x7fc00000 [ 1280.729829][ T38] audit: type=1326 audit(2000001360.506:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d67517c17 code=0x7fc00000 [ 1280.729878][ T38] audit: type=1326 audit(2000001360.506:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d674bf219 code=0x7fc00000 [ 1280.729920][ T38] audit: type=1326 audit(2000001360.506:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4d674bf2dd code=0x7fc00000 [ 1280.729960][ T38] audit: type=1326 audit(2000001360.506:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28238 comm="syz.3.8846" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d6751de99 code=0x7fc00000 [ 1282.688588][T28287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.539086][T28309] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1283.866297][T28282] syz.9.8860 (28282): drop_caches: 2 [ 1283.955675][T28326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1284.022885][T28326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1284.309320][T28331] macvlan2: entered promiscuous mode [ 1284.309345][T28331] macvlan2: entered allmulticast mode [ 1284.309705][T28331] bond1: entered allmulticast mode [ 1284.309758][T28331] bond1: entered promiscuous mode [ 1284.310682][T28331] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1285.216840][T28331] team0: Port device macvlan2 added [ 1286.161477][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803818cc00: rx timeout, send abort [ 1286.661581][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803818cc00: abort rx timeout. Force session deactivation [ 1287.369670][T28402] binder_alloc: 28401: pid 28401 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1287.372932][T28402] binder_alloc: 28401: pid 28401 spamming oneway? 2 buffers allocated for a total size of 5120 [ 1299.481535][T28577] overlayfs: failed to clone upperpath [ 1302.603791][T28652] netlink: 'syz.9.9007': attribute type 4 has an invalid length. [ 1302.652298][T28652] netlink: 'syz.9.9007': attribute type 4 has an invalid length. [ 1305.420375][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1307.438847][T28713] overlayfs: failed to clone upperpath [ 1307.467249][ T4910] Bluetooth: hci2: command 0x0406 tx timeout [ 1308.604234][T28741] fuse: Bad value for 'fd' [ 1311.165230][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1311.307618][ T5724] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1311.459637][ T5724] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.459701][ T5724] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1311.459728][ T5724] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1311.459763][ T5724] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1311.459786][ T5724] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.539960][ T5724] usb 10-1: config 0 descriptor?? [ 1312.860482][ T5724] hid-picolcd 0003:04D8:F002.0014: unknown global tag 0xd [ 1312.860505][ T5724] hid-picolcd 0003:04D8:F002.0014: item 0 0 1 13 parsing failed [ 1312.861165][ T5724] hid-picolcd 0003:04D8:F002.0014: device report parse failed [ 1312.861265][ T5724] hid-picolcd 0003:04D8:F002.0014: probe with driver hid-picolcd failed with error -22 [ 1314.773039][ T5584] usb 10-1: USB disconnect, device number 19 [ 1314.905324][T28829] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.020427][T28836] binder_alloc: 28833: pid 28833 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1316.078624][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1316.079837][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.716312][T28834] batman_adv: batadv0: Interface deactivated: gretap1 [ 1323.690676][T28929] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9104'. [ 1325.797896][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1329.197315][ T5703] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1329.347187][ T5703] usb 10-1: Using ep0 maxpacket: 8 [ 1329.353748][ T5703] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1329.353782][ T5703] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1329.353835][ T5703] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1329.353858][ T5703] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.417826][ T5703] usb 10-1: config 0 descriptor?? [ 1329.848275][T28986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1329.855312][T28986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1329.910430][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9134'. [ 1329.942032][T28986] tipc: Started in network mode [ 1329.942060][T28986] tipc: Node identity ac14140f, cluster identity 4711 [ 1330.188413][T28986] tipc: Enabled bearer , priority 10 [ 1330.217945][ T5703] usbhid 10-1:0.0: can't add hid device: -71 [ 1330.218557][ T5703] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1330.243641][ T5703] usb 10-1: USB disconnect, device number 20 [ 1331.232966][ T5610] tipc: Node number set to 2886997007 [ 1339.263392][T29090] netlink: 'syz.9.9164': attribute type 4 has an invalid length. [ 1341.104377][ T38] audit: type=1326 audit(2000001420.846:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d2de99 code=0x7ffc0000 [ 1341.104445][ T38] audit: type=1326 audit(2000001420.876:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2a18d2de99 code=0x7ffc0000 [ 1341.104490][ T38] audit: type=1326 audit(2000001420.876:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a18d2de99 code=0x7ffc0000 [ 1341.225423][ T38] audit: type=1326 audit(2000001420.996:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2a18d2de99 code=0x7ffc0000 [ 1341.225530][ T38] audit: type=1326 audit(2000001420.996:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a18d27c17 code=0x7ffc0000 [ 1341.225576][ T38] audit: type=1326 audit(2000001420.996:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a18ccf219 code=0x7ffc0000 [ 1341.225630][ T38] audit: type=1326 audit(2000001420.996:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a18d27c17 code=0x7ffc0000 [ 1341.225806][ T38] audit: type=1326 audit(2000001420.996:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a18ccf219 code=0x7ffc0000 [ 1341.301856][ T38] audit: type=1326 audit(2000001421.036:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2a18d27c17 code=0x7ffc0000 [ 1341.302891][ T38] audit: type=1326 audit(2000001421.076:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29093 comm="syz.7.9166" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a18ccf219 code=0x7ffc0000 [ 1352.104667][T29187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9198'. [ 1361.594384][T29288] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9234'. [ 1366.756191][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1371.941640][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1375.023229][T29405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.999815][T28853] libceph: connect (1)[c::]:6789 error -101 [ 1385.000072][T28853] libceph: mon0 (1)[c::]:6789 connect error [ 1385.031012][T29501] ceph: No mds server is up or the cluster is laggy [ 1393.735218][T29549] futex_wake_op: syz.3.9325 tries to shift op by 144; fix this program [ 1404.829228][T29638] overlayfs: failed to resolve './file1': -2 [ 1411.943997][T29701] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 1414.981056][T29737] overlayfs: failed to clone lowerpath [ 1415.044472][T29738] overlayfs: failed to clone lowerpath [ 1417.136974][T29776] overlayfs: failed to clone upperpath [ 1418.215555][T29759] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9395'. [ 1419.233506][T29787] overlayfs: failed to resolve './cgroup': -2 [ 1421.060342][T29795] netlink: 'syz.3.9402': attribute type 28 has an invalid length. [ 1421.060364][T29795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1421.060382][T29795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9402'. [ 1433.141586][T29868] lo speed is unknown, defaulting to 1000 [ 1433.144545][T29868] lo speed is unknown, defaulting to 1000 [ 1433.146568][T29868] lo speed is unknown, defaulting to 1000 [ 1433.428575][T29868] infiniband syz1: set active [ 1433.428599][T29868] infiniband syz1: added lo [ 1433.508516][T29868] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1433.508554][T29868] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1433.508593][T29868] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1433.782593][T29868] RDS/IB: syz1: added [ 1433.783911][T29868] smc: adding ib device syz1 with port count 1 [ 1433.790042][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.860454][T29868] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1433.866656][T29868] lo speed is unknown, defaulting to 1000 [ 1434.174182][ T5845] lo speed is unknown, defaulting to 1000 [ 1434.229196][T29868] lo speed is unknown, defaulting to 1000 [ 1434.325824][ T5703] lo speed is unknown, defaulting to 1000 [ 1434.546479][T29868] lo speed is unknown, defaulting to 1000 [ 1434.686439][T21942] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 1434.854960][T29868] lo speed is unknown, defaulting to 1000 [ 1435.091399][T29868] lo speed is unknown, defaulting to 1000 [ 1435.284056][T29868] lo speed is unknown, defaulting to 1000 [ 1437.042417][T29908] netlink: 'syz.3.9438': attribute type 1 has an invalid length. [ 1437.289443][T29908] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1437.695520][T29920] overlayfs: failed to clone lowerpath [ 1439.478826][T29932] netlink: 'syz.6.9445': attribute type 12 has an invalid length. [ 1440.550354][ T38] kauditd_printk_skb: 142 callbacks suppressed [ 1440.550372][ T38] audit: type=1326 audit(2000001520.326:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.550502][ T38] audit: type=1326 audit(2000001520.326:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.551380][ T38] audit: type=1326 audit(2000001520.326:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.552946][ T38] audit: type=1326 audit(2000001520.326:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.553849][ T38] audit: type=1326 audit(2000001520.326:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.690643][ T38] audit: type=1326 audit(2000001520.466:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1440.691780][ T38] audit: type=1326 audit(2000001520.466:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff2cd98dc02 code=0x7ffc0000 [ 1440.691833][ T38] audit: type=1326 audit(2000001520.466:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff2cd98dc97 code=0x7ffc0000 [ 1440.694087][ T38] audit: type=1326 audit(2000001520.466:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff2cd94ab91 code=0x7ffc0000 [ 1440.694142][ T38] audit: type=1326 audit(2000001520.466:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29936 comm="syz.6.9448" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff2cd98ec89 code=0x7ffc0000 [ 1452.735902][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1452.793258][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1452.795136][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1452.796685][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1452.926752][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1453.783778][T30025] fuse: fd is not a fuse device [ 1453.796737][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1454.934495][T30005] lo speed is unknown, defaulting to 1000 [ 1455.136937][T30046] overlayfs: failed to clone upperpath [ 1455.930958][T21942] Bluetooth: hci5: command tx timeout [ 1456.317985][T30055] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1457.712898][T30067] netlink: 'syz.3.9489': attribute type 12 has an invalid length. [ 1458.657129][T21942] Bluetooth: hci5: command tx timeout [ 1460.676926][T21942] Bluetooth: hci5: command tx timeout [ 1460.890442][T30100] overlayfs: failed to clone upperpath [ 1462.757690][T21942] Bluetooth: hci5: command tx timeout [ 1464.081342][T30005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.081601][T30005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.082158][T30005] bridge_slave_0: entered allmulticast mode [ 1464.084930][T30005] bridge_slave_0: entered promiscuous mode [ 1464.142075][T30005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.144013][T30005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.144220][T30005] bridge_slave_1: entered allmulticast mode [ 1464.173556][T30005] bridge_slave_1: entered promiscuous mode [ 1464.273718][T30005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1464.290227][T30005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.317245][T30121] fuse: Bad value for 'fd' [ 1464.374405][T30005] team0: Port device team_slave_0 added [ 1464.821340][T30005] team0: Port device team_slave_1 added [ 1466.133886][T30148] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9520'. [ 1466.374598][T30005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.374615][T30005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.374637][T30005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.402953][T30005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.402997][T30005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1466.403058][T30005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.469259][T30152] Invalid ELF header magic: != ELF [ 1467.662267][T30005] hsr_slave_0: entered promiscuous mode [ 1467.666156][T30005] hsr_slave_1: entered promiscuous mode [ 1467.669199][T30005] debugfs: 'hsr0' already exists in 'hsr' [ 1467.669221][T30005] Cannot create hsr debugfs directory [ 1472.214114][ T38] kauditd_printk_skb: 150 callbacks suppressed [ 1472.214134][ T38] audit: type=1800 audit(2000001551.986:909): pid=30204 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.9539" name="nullb0" dev="tmpfs" ino=1250 res=0 errno=0 [ 1474.049693][T30249] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1476.530087][T30265] netlink: 'syz.6.9559': attribute type 24 has an invalid length. [ 1490.232322][T30446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9601'. [ 1491.011839][T30446] bridge_slave_1 (unregistering): left allmulticast mode [ 1491.011874][T30446] bridge_slave_1 (unregistering): left promiscuous mode [ 1491.011977][T30446] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.757144][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1497.333192][T30513] netlink: 'syz.6.9621': attribute type 26 has an invalid length. [ 1501.647359][ T38] audit: type=1107 audit(2000001581.416:910): pid=30548 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='é`' [ 1501.653067][T30549] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:21 [ 1502.606225][T30573] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9626'. [ 1502.606257][T30573] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9626'. [ 1502.685729][T30577] netlink: 'syz.3.9622': attribute type 9 has an invalid length. [ 1502.685746][T30577] netlink: 'syz.3.9622': attribute type 7 has an invalid length. [ 1502.685755][T30577] netlink: 'syz.3.9622': attribute type 8 has an invalid length. [ 1503.019609][T30583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1503.699794][T30005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1504.039467][T30597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9646'. [ 1504.578903][T30005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.699156][T30005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1504.818003][T30593] can: request_module (can-proto-0) failed. [ 1505.179913][T30005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.205100][T30005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1506.161364][T30005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1506.339728][T30005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1506.405088][T30005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1508.814785][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1508.908476][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1508.945088][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1508.968558][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1508.975047][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1511.226968][T21942] Bluetooth: hci1: command tx timeout [ 1511.895583][T30687] overlayfs: failed to clone lowerpath [ 1511.970438][T30690] overlayfs: failed to clone lowerpath [ 1513.307182][T21942] Bluetooth: hci1: command tx timeout [ 1515.478489][T21942] Bluetooth: hci1: command tx timeout [ 1515.587236][T30645] lo speed is unknown, defaulting to 1000 [ 1517.949382][T21942] Bluetooth: hci1: command tx timeout [ 1521.493337][T30792] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9698'. [ 1522.847453][T21942] Bluetooth: hci4: unexpected event for opcode 0x100c [ 1523.661729][T30823] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9710'. [ 1525.232365][T21942] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 1525.833991][T30855] netlink: 'syz.9.9722': attribute type 21 has an invalid length. [ 1525.882300][T30856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9723'. [ 1528.075139][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9734'. [ 1532.400874][T30359] bridge_slave_1: left allmulticast mode [ 1532.400907][T30359] bridge_slave_1: left promiscuous mode [ 1532.401177][T30359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.580618][T30359] bridge_slave_0: left allmulticast mode [ 1532.580668][T30359] bridge_slave_0: left promiscuous mode [ 1532.580915][T30359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.178690][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9767'. [ 1533.867767][T21942] Bluetooth: hci2: command 0x0406 tx timeout [ 1534.241063][T21942] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 1535.410708][T31047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9786'. [ 1535.849787][T31050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9788'. [ 1536.727884][T30359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1537.721254][T30359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1537.800146][T30359] bond0 (unregistering): Released all slaves [ 1537.838700][T30645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.838886][T30645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.839133][T30645] bridge_slave_0: entered allmulticast mode [ 1537.841741][T30645] bridge_slave_0: entered promiscuous mode [ 1537.904113][T31066] veth0_vlan: entered allmulticast mode [ 1537.904629][T30645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.904825][T30645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.905125][T30645] bridge_slave_1: entered allmulticast mode [ 1537.940443][T30645] bridge_slave_1: entered promiscuous mode [ 1538.045785][T21942] Bluetooth: hci2: unexpected event for opcode 0x200a [ 1538.297661][T30645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.423361][T30645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.573281][T30645] team0: Port device team_slave_0 added [ 1538.599677][T30645] team0: Port device team_slave_1 added [ 1540.547081][T31134] bond0: option all_slaves_active: invalid value (253) [ 1540.730611][T30359] hsr_slave_0: left promiscuous mode [ 1540.768592][T30359] hsr_slave_1: left promiscuous mode [ 1540.772265][T30359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.819601][T30359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.288901][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9830'. [ 1541.288931][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9830'. [ 1543.258115][T31190] netlink: 'syz.3.9840': attribute type 21 has an invalid length. [ 1543.258139][T31190] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9840'. [ 1543.449300][T30359] team0 (unregistering): Port device team_slave_1 removed [ 1543.547678][T30359] team0 (unregistering): Port device team_slave_0 removed [ 1543.616456][T31205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9845'. [ 1543.869391][T30645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.869408][T30645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.869434][T30645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.880020][T30645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.880055][T30645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.880111][T30645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.500557][T30645] hsr_slave_0: entered promiscuous mode [ 1544.501914][T30645] hsr_slave_1: entered promiscuous mode [ 1544.509040][T30645] debugfs: 'hsr0' already exists in 'hsr' [ 1544.509065][T30645] Cannot create hsr debugfs directory [ 1544.591278][T31235] netlink: 'syz.9.9856': attribute type 29 has an invalid length. [ 1545.947360][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1547.011518][T31275] overlayfs: failed to clone lowerpath [ 1547.070881][T31276] overlayfs: failed to clone lowerpath [ 1548.265952][T31295] netlink: 'syz.3.9878': attribute type 1 has an invalid length. [ 1548.265975][T31295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9878'. [ 1549.342692][T31334] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1549.621236][T31347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9898'. [ 1549.621259][T31347] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9898'. [ 1549.621275][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9898'. [ 1550.353489][T31359] overlayfs: missing 'lowerdir' [ 1550.920159][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1551.123388][T31368] syz_tun: entered allmulticast mode [ 1552.312466][T31366] syz_tun: left allmulticast mode [ 1553.917861][T31469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1555.944617][T31519] netlink: 1 bytes leftover after parsing attributes in process `syz.6.9964'. [ 1556.149017][T31526] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9967'. [ 1556.192088][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.396311][T31533] bridge2: entered allmulticast mode [ 1557.802447][T30645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1557.901844][T30645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1557.915639][T30645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1558.886010][T30645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1558.895380][T30645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1558.937168][T30645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1558.939877][T30645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1559.374539][T30645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1560.402950][T30645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.483157][T30645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.540780][T12049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.541054][T12049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1560.594969][T12049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.595089][T12049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.047004][T31627] overlayfs: failed to clone lowerpath [ 1562.278462][T31642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10007'. [ 1562.315978][T31642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10007'. [ 1562.316071][T31642] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1563.570936][T31652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10012'. [ 1563.733507][T31662] netlink: 2 bytes leftover after parsing attributes in process `syz.9.10014'. [ 1564.291108][T31681] overlayfs: failed to clone lowerpath [ 1565.285161][T31686] openvswitch: netlink: IP tunnel TTL not specified. [ 1565.688019][T31700] overlayfs: failed to clone lowerpath [ 1565.762271][T31701] overlayfs: failed to clone lowerpath [ 1567.548952][T21942] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1567.701538][T31744] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 1567.751353][T31746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1567.841186][T30645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.702010][T31784] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10058'. [ 1571.079667][ T4910] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1571.818484][ T4910] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1571.822834][ T4910] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1571.828364][ T4910] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1571.862535][ T4910] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.892175][T31801] netlink: 'syz.6.10067': attribute type 1 has an invalid length. [ 1571.892195][T31801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10067'. [ 1572.334972][T31807] overlayfs: missing 'lowerdir' [ 1572.814340][T31824] overlayfs: failed to clone lowerpath [ 1572.879342][T31825] overlayfs: failed to clone lowerpath [ 1574.127996][ T4910] Bluetooth: hci5: command tx timeout [ 1574.158315][T31835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10081'. [ 1574.299931][T31820] tc_dump_action: action bad kind [ 1575.071856][T31874] netlink: 'syz.9.10098': attribute type 58 has an invalid length. [ 1575.071878][T31874] netlink: 152 bytes leftover after parsing attributes in process `syz.9.10098'. [ 1575.173891][T31878] netlink: 'syz.6.10100': attribute type 49 has an invalid length. [ 1575.789696][T31794] lo speed is unknown, defaulting to 1000 [ 1575.861284][ T3344] hsr0: left allmulticast mode [ 1575.861303][ T3344] hsr_slave_0: left allmulticast mode [ 1575.861326][ T3344] hsr_slave_1: left allmulticast mode [ 1575.861354][ T3344] hsr0: left promiscuous mode [ 1575.861642][ T3344] bridge0: port 3(hsr0) entered disabled state [ 1576.054565][T31909] netlink: 'syz.6.10113': attribute type 8 has an invalid length. [ 1576.084693][ T3344] bridge_slave_1: left allmulticast mode [ 1576.084724][ T3344] bridge_slave_1: left promiscuous mode [ 1576.084964][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.186877][ T4910] Bluetooth: hci5: command tx timeout [ 1576.251509][ T3344] bridge_slave_0: left allmulticast mode [ 1576.251557][ T3344] bridge_slave_0: left promiscuous mode [ 1576.251800][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.905889][ T3344] ip6gretap1: left allmulticast mode [ 1577.905924][ T3344] ip6gretap1: left promiscuous mode [ 1577.906170][ T3344] bridge1: port 1(ip6gretap1) entered disabled state [ 1578.628692][ T4910] Bluetooth: hci5: command tx timeout [ 1580.824973][T21942] Bluetooth: hci5: command tx timeout [ 1581.708308][ T3344] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1582.367177][T32025] netlink: 45 bytes leftover after parsing attributes in process `syz.3.10158'. [ 1582.654449][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1582.759460][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1582.861641][ T3344] bond0 (unregistering): Released all slaves [ 1583.258967][ T3344] bond1 (unregistering): Released all slaves [ 1584.303644][ T5256] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1586.324690][T32073] overlayfs: failed to clone lowerpath [ 1586.380749][T32074] overlayfs: failed to clone lowerpath [ 1586.677738][ T3344] tipc: Left network mode [ 1588.941097][T31794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.941367][T31794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.941619][T31794] bridge_slave_0: entered allmulticast mode [ 1588.961055][T31794] bridge_slave_0: entered promiscuous mode [ 1589.005690][T31794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.017570][T31794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.020985][T31794] bridge_slave_1: entered allmulticast mode [ 1589.051641][T31794] bridge_slave_1: entered promiscuous mode [ 1589.472055][T31794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.489116][T31794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.490720][ T5256] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1590.820774][T32169] netlink: 'syz.6.10205': attribute type 15 has an invalid length. [ 1591.164269][T31794] team0: Port device team_slave_0 added [ 1591.181999][T31794] team0: Port device team_slave_1 added [ 1591.575229][T31794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1591.575251][T31794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.575273][T31794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1591.636529][T31794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1591.636547][T31794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1591.636579][T31794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.903098][T31794] hsr_slave_0: entered promiscuous mode [ 1591.919485][T31794] hsr_slave_1: entered promiscuous mode [ 1591.940866][T31794] debugfs: 'hsr0' already exists in 'hsr' [ 1591.940890][T31794] Cannot create hsr debugfs directory [ 1592.609629][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10234'. [ 1593.091447][T32247] netlink: 'syz.9.10244': attribute type 10 has an invalid length. [ 1593.091468][T32247] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10244'. [ 1593.196314][T32247] team0: entered promiscuous mode [ 1593.196357][T32247] team_slave_0: entered promiscuous mode [ 1593.196647][T32247] team_slave_1: entered promiscuous mode [ 1593.216245][T32247] team0: entered allmulticast mode [ 1593.216273][T32247] team_slave_0: entered allmulticast mode [ 1593.216299][T32247] team_slave_1: entered allmulticast mode [ 1593.216322][T32247] bridge0: entered allmulticast mode [ 1593.243781][T32247] bridge0: port 3(team0) entered blocking state [ 1593.245072][T32247] bridge0: port 3(team0) entered disabled state [ 1593.456486][T32247] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1593.907867][T32272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10249'. [ 1594.448471][ T5256] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1597.605431][T32335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10277'. [ 1599.256790][T32359] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10285'. [ 1601.277707][ T5256] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1601.654646][T32401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10303'. [ 1601.700120][ T3344] hsr_slave_0: left promiscuous mode [ 1601.877950][T32422] netlink: 44 bytes leftover after parsing attributes in process `syz.9.10312'. [ 1602.757378][ T3344] hsr_slave_1: left promiscuous mode [ 1602.758503][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.888675][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.955013][T32441] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10320'. [ 1605.422233][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 1605.699053][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 1606.249414][T32525] IPv6: sit2: Disabled Multicast RS [ 1606.255457][T32525] sit2: entered allmulticast mode [ 1606.633871][T32543] overlayfs: failed to clone lowerpath [ 1606.685965][T32545] overlayfs: failed to clone lowerpath [ 1612.253334][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10393'. [ 1613.579242][ T3344] IPVS: stop unused estimator thread 0... [ 1617.337128][ T3344] bridge_slave_1: left allmulticast mode [ 1617.337164][ T3344] bridge_slave_1: left promiscuous mode [ 1617.382807][ T3344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.573461][ T3344] bridge_slave_0: left allmulticast mode [ 1617.573498][ T3344] bridge_slave_0: left promiscuous mode [ 1617.598676][ T3344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.633584][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.852824][T32719] CIFS: Unable to determine destination address [ 1619.019745][ T3344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1619.099197][ T3344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1619.151600][ T3344] bond0 (unregistering): Released all slaves [ 1619.940169][ T326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10474'. [ 1622.042740][ T3344] hsr_slave_0: left promiscuous mode [ 1622.082606][ T3344] hsr_slave_1: left promiscuous mode [ 1622.083698][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1622.128177][ T398] overlayfs: failed to clone lowerpath [ 1622.132423][ T3344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.160798][ T398] overlayfs: failed to clone lowerpath [ 1622.609336][ T417] overlayfs: failed to clone lowerpath [ 1622.629784][ T417] overlayfs: failed to clone lowerpath [ 1623.532629][ T3344] team0 (unregistering): Port device team_slave_1 removed [ 1623.588365][ T3344] team0 (unregistering): Port device team_slave_0 removed [ 1624.040096][T31794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1624.110632][T31794] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1624.135128][T31794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1624.204641][T31794] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1624.268522][T31794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1624.631229][T31794] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1624.650713][T31794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1624.754014][T31794] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1625.514207][T31794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1625.621861][T31794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.658641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.658779][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1625.875592][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.875736][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1625.991342][ T506] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1626.383819][ T518] overlayfs: failed to clone lowerpath [ 1626.435856][ T519] overlayfs: failed to clone lowerpath [ 1626.687408][ T526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10538'. [ 1628.619220][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10551'. [ 1629.098128][T31794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.093074][ T612] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10563'. [ 1630.166181][ T4910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1630.261691][ T4910] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1630.293751][ T4910] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1630.311030][ T4910] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1630.312546][ T4910] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1631.729778][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10574'. [ 1631.729856][ T643] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1632.990457][T21942] Bluetooth: hci1: command tx timeout [ 1635.067004][T21942] Bluetooth: hci1: command tx timeout [ 1635.542122][ T611] lo speed is unknown, defaulting to 1000 [ 1637.147542][T21942] Bluetooth: hci1: command tx timeout [ 1638.460286][ T821] netlink: 192 bytes leftover after parsing attributes in process `syz.9.10648'. [ 1639.153573][ T611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.153786][ T611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.154036][ T611] bridge_slave_0: entered allmulticast mode [ 1639.157196][ T611] bridge_slave_0: entered promiscuous mode [ 1639.226890][T21942] Bluetooth: hci1: command tx timeout [ 1639.254099][ T611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.254195][ T611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.254351][ T611] bridge_slave_1: entered allmulticast mode [ 1639.287592][ T611] bridge_slave_1: entered promiscuous mode [ 1639.356531][ T611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.378102][ T611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.498295][ T611] team0: Port device team_slave_0 added [ 1639.692645][ T611] team0: Port device team_slave_1 added [ 1640.295095][ T611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.295112][ T611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.295139][ T611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.345384][ T611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.345400][ T611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.345444][ T611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.404463][ T877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10663'. [ 1641.020834][ T611] hsr_slave_0: entered promiscuous mode [ 1641.025309][ T611] hsr_slave_1: entered promiscuous mode [ 1641.039482][ T611] debugfs: 'hsr0' already exists in 'hsr' [ 1641.039521][ T611] Cannot create hsr debugfs directory [ 1641.290771][ T13] bridge_slave_1: left allmulticast mode [ 1641.290806][ T13] bridge_slave_1: left promiscuous mode [ 1641.291054][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.479455][ T13] bridge_slave_0: left allmulticast mode [ 1641.479489][ T13] bridge_slave_0: left promiscuous mode [ 1641.479706][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.135682][ T985] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10710'. [ 1643.481288][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1643.558558][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1643.831256][ T13] bond0 (unregistering): Released all slaves [ 1644.924830][ T5256] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1645.448124][ T1055] netlink: 96 bytes leftover after parsing attributes in process `syz.9.10739'. [ 1645.530667][ T1055] vlan0: entered allmulticast mode [ 1645.530688][ T1055] gretap0: entered allmulticast mode [ 1648.992432][ T13] hsr_slave_0: left promiscuous mode [ 1649.027340][ T13] hsr_slave_1: left promiscuous mode [ 1649.031406][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.073285][ T1120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10752'. [ 1649.090827][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.559226][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1650.640951][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1651.122877][ T5256] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1651.220636][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10779'. [ 1653.685376][ T1214] netlink: 'syz.3.10794': attribute type 1 has an invalid length. [ 1657.811151][ T1352] geneve2: entered promiscuous mode [ 1658.354292][ T1407] netlink: 'syz.6.10873': attribute type 1 has an invalid length. [ 1658.721354][ T1420] netlink: 108 bytes leftover after parsing attributes in process `syz.9.10879'. [ 1658.721393][ T1420] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10879'. [ 1659.819144][ T611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1659.901340][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1659.904946][ T611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1660.108491][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1660.110222][ T611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1661.058806][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1661.065247][ T611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1661.279643][ T611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1661.974759][ T611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.111030][ T611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.152188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.156359][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1662.250546][T13198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.250671][T13198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.291116][ T1611] openvswitch: netlink: IP tunnel dst address not specified [ 1664.381620][ T611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.013238][ T1647] overlayfs: failed to clone lowerpath [ 1665.054815][ T1647] overlayfs: failed to clone lowerpath [ 1665.196243][ T611] veth0_vlan: entered promiscuous mode [ 1665.275914][ T611] veth1_vlan: entered promiscuous mode [ 1665.433067][ T1654] netlink: 'syz.9.10957': attribute type 2 has an invalid length. [ 1666.245198][ T611] veth0_macvtap: entered promiscuous mode [ 1666.317525][ T611] veth1_macvtap: entered promiscuous mode [ 1666.399688][ T611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.629278][ T611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.790623][ T8181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.792619][ T8181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.792905][ T8181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.793501][ T8181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1667.128067][ T1692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10972'. [ 1668.182870][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.182889][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1668.463180][T28555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1668.463209][T28555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1671.266159][ T1765] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11005'. [ 1672.253649][ T1796] netlink: 52 bytes leftover after parsing attributes in process `syz.6.11019'. [ 1673.391688][ T1835] overlayfs: failed to clone lowerpath [ 1673.465003][ T1835] overlayfs: failed to clone lowerpath [ 1676.279964][ T1912] netlink: 'syz.6.11072': attribute type 1 has an invalid length. [ 1676.279985][ T1912] netlink: 'syz.6.11072': attribute type 2 has an invalid length. [ 1676.336853][ T5610] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1676.486886][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 1676.490685][ T5610] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1676.490710][ T5610] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1676.490732][ T5610] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1676.495441][ T5610] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1676.495468][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.495489][ T5610] usb 5-1: Product: syz [ 1676.495504][ T5610] usb 5-1: Manufacturer: syz [ 1676.495520][ T5610] usb 5-1: SerialNumber: syz [ 1676.594857][ T5610] usb 5-1: config 0 descriptor?? [ 1677.038339][ T5610] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1677.323553][ T1937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11083'. [ 1677.336448][ T5610] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1677.359626][ T5610] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 1677.482138][ T5610] usb 5-1: USB disconnect, device number 5 [ 1679.070476][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1680.608527][ T5724] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1681.514909][ T5724] usb 5-1: Using ep0 maxpacket: 16 [ 1681.530892][ T5724] usb 5-1: config 251 has an invalid interface number: 202 but max is 0 [ 1681.530918][ T5724] usb 5-1: config 251 has no interface number 0 [ 1681.530948][ T5724] usb 5-1: too many endpoints for config 251 interface 202 altsetting 1: 165, using maximum allowed: 30 [ 1681.530993][ T5724] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid maxpacket 2048, setting to 1024 [ 1681.531018][ T5724] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1681.531041][ T5724] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1681.531067][ T5724] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1681.531092][ T5724] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 1681.531115][ T5724] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120 [ 1681.531138][ T5724] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 165 [ 1681.531163][ T5724] usb 5-1: config 251 interface 202 has no altsetting 0 [ 1681.659587][ T5724] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1681.659616][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1681.659635][ T5724] usb 5-1: Product: syz [ 1681.659648][ T5724] usb 5-1: SerialNumber: syz [ 1681.704756][ T2032] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1682.273333][ T5724] cxacru 5-1:251.202: send of cm 0x90 failed (-71) [ 1682.320467][ T5724] usb 5-1: USB disconnect, device number 6 [ 1682.321493][ T2068] cxacru 5-1:251.202: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1682.321584][ T2068] cxacru 5-1:251.202: Falling back to sysfs fallback for: cxacru-fw.bin [ 1683.383119][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11156'. [ 1685.382398][ T2189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11196'. [ 1687.083443][ T2227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11209'. [ 1687.725956][ T2257] 9p: Bad value for 'rfdno' [ 1689.240868][ T2315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11247'. [ 1692.515380][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11275'. [ 1693.502806][ T2392] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1693.717694][T21942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1693.717994][T21942] Bluetooth: hci1: Injecting HCI hardware error event [ 1693.721621][ T4910] Bluetooth: hci1: hardware error 0x00 [ 1693.774590][ T2410] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11293'. [ 1695.076451][ T2441] lo speed is unknown, defaulting to 1000 [ 1696.107276][ T4910] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1697.060143][ T2536] fuse: Bad value for 'fd' [ 1699.101721][ T2606] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11368'. [ 1699.277516][ T2605] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11369'. [ 1699.845536][ T2616] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11374'. [ 1701.313518][ T2691] fuse: Bad value for 'fd' [ 1701.673725][ T2707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11402'. [ 1703.101849][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11424'. [ 1703.138164][ T2767] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11425'. [ 1703.336096][ T2772] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11429'. [ 1705.614842][ T2846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11447'. [ 1707.939180][ T2944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11493'. [ 1708.297832][ T5710] IPVS: starting estimator thread 0... [ 1708.387916][ T2973] IPVS: using max 8 ests per chain, 19200 per kthread [ 1708.803330][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11507'. [ 1709.787006][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1709.890118][ T3012] overlayfs: failed to clone lowerpath [ 1709.944648][ T3014] overlayfs: failed to clone lowerpath [ 1710.070753][ T3020] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11521'. [ 1711.679935][ T3076] /dev/nullb0: Can't lookup blockdev [ 1711.681009][ T3076] /dev/nullb0: Can't lookup blockdev [ 1712.400862][ T3095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11553'. [ 1713.653663][ T3137] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11577'. [ 1713.653698][ T3137] netlink: 'syz.6.11577': attribute type 7 has an invalid length. [ 1713.653712][ T3137] netlink: 'syz.6.11577': attribute type 8 has an invalid length. [ 1713.653724][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11577'. [ 1713.714881][ T3137] gretap0: entered promiscuous mode [ 1714.016902][ T3137] gretap0: left promiscuous mode [ 1714.047154][ T3143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11579'. [ 1714.829171][ T3164] netlink: 'syz.9.11588': attribute type 12 has an invalid length. [ 1715.168762][ T3175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11590'. [ 1717.934098][ T3271] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1720.060194][ T3335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11661'. [ 1720.777816][ T3354] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1721.201498][ T3363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11671'. [ 1722.010778][ T3396] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1722.468217][ T3409] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11690'. [ 1722.912255][ T3417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11697'. [ 1723.774922][ T383] kernel write not supported for file bpf-map (pid: 383 comm: kworker/1:0) [ 1724.068377][ T38] audit: type=1326 audit(2000002059.849:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.068430][ T38] audit: type=1326 audit(2000002059.849:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.217291][ T3459] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1724.474506][ T38] audit: type=1326 audit(2000002059.849:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.474933][ T38] audit: type=1326 audit(2000002060.069:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.475141][ T38] audit: type=1326 audit(2000002060.069:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.475268][ T38] audit: type=1326 audit(2000002060.069:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.475352][ T38] audit: type=1326 audit(2000002060.079:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.475782][ T38] audit: type=1326 audit(2000002060.089:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.476061][ T38] audit: type=1326 audit(2000002060.099:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1724.476230][ T38] audit: type=1326 audit(2000002060.099:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3452 comm="syz.3.11714" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x7ffc0000 [ 1725.519671][ T3463] netlink: 14 bytes leftover after parsing attributes in process `syz.9.11716'. [ 1726.841972][ T3516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11738'. [ 1730.128841][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.770599][ T3707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11824'. [ 1733.882447][ T3714] syz.4.11829 (3714): attempted to duplicate a private mapping with mremap. This is not supported. [ 1734.498449][ T3736] loop5: detected capacity change from 0 to 7 [ 1734.500672][ T3736] Dev loop5: unable to read RDB block 7 [ 1734.500700][ T3736] loop5: AHDI p1 p2 p3 [ 1734.500720][ T3736] loop5: partition table partially beyond EOD, truncated [ 1734.500940][ T3736] loop5: p1 size 150995456 extends beyond EOD, truncated [ 1734.570230][ T3736] loop5: p2 size 151585024 extends beyond EOD, truncated [ 1734.701342][ T3743] overlayfs: failed to clone lowerpath [ 1734.758080][ T3744] overlayfs: failed to clone lowerpath [ 1735.241879][ T2528] udevd[2528]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1735.242387][ T1906] udevd[1906]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1736.812277][ T3830] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1736.812277][ T3830] The task syz.3.11880 (3830) triggered the difference, watch for misbehavior. [ 1737.066886][ T3844] fuse: Bad value for 'fd' [ 1737.513592][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11898'. [ 1737.513627][ T3866] netlink: 'syz.9.11898': attribute type 26 has an invalid length. [ 1737.513642][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11898'. [ 1737.547695][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11898'. [ 1737.547729][ T3866] netlink: 'syz.9.11898': attribute type 26 has an invalid length. [ 1737.547741][ T3866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11898'. [ 1737.918171][ T3880] loop2: detected capacity change from 0 to 7 [ 1737.953030][ T3883] kernel read not supported for file /file1 (pid: 3883 comm: syz.6.11906) [ 1737.953441][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 1737.953454][ T38] audit: type=1800 audit(2000002073.729:935): pid=3883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.11906" name="file1" dev="mqueue" ino=98729 res=0 errno=0 [ 1738.027401][ T3880] Dev loop2: unable to read RDB block 7 [ 1738.027506][ T3880] loop2: AHDI p1 p2 p3 [ 1738.027525][ T3880] loop2: partition table partially beyond EOD, truncated [ 1738.028357][ T3880] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1738.028377][ T3880] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1738.276282][ T3891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1740.576315][ T3946] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11932'. [ 1740.787499][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1741.934178][ T38] audit: type=1326 audit(2000002077.709:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3957 comm="syz.3.11940" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d6751de99 code=0x0 [ 1742.138205][ T3958] lo speed is unknown, defaulting to 1000 [ 1743.835483][ T38] audit: type=1326 audit(2000002079.609:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.861568][ T38] audit: type=1326 audit(2000002079.639:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.865155][ T38] audit: type=1326 audit(2000002079.639:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.865311][ T38] audit: type=1326 audit(2000002079.639:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.866048][ T38] audit: type=1326 audit(2000002079.639:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.866234][ T38] audit: type=1326 audit(2000002079.639:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.866540][ T38] audit: type=1326 audit(2000002079.639:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.908685][ T38] audit: type=1326 audit(2000002079.689:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.908990][ T38] audit: type=1326 audit(2000002079.689:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1743.947859][ T38] audit: type=1326 audit(2000002079.729:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4016 comm="syz.6.11965" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff2cd98de99 code=0x7ffc0000 [ 1745.059754][ T4055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11978'. [ 1746.287090][ T2068] cxacru 5-1:251.202: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1746.923915][ T4081] lo speed is unknown, defaulting to 1000 [ 1747.543211][ T4101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11999'. [ 1748.464184][ T4104] hsr0: entered promiscuous mode [ 1748.468341][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12003'. [ 1749.234470][ T4127] overlayfs: failed to clone lowerpath [ 1749.271929][ T4127] overlayfs: failed to clone lowerpath [ 1750.443865][ T4172] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12028'. [ 1751.633550][ T383] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1751.656030][ T4187] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12035'. [ 1751.807805][ T383] usb 5-1: Using ep0 maxpacket: 16 [ 1751.809505][ T383] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1751.809527][ T383] usb 5-1: config 0 has no interface number 0 [ 1751.812131][ T383] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1751.812167][ T383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.812188][ T383] usb 5-1: Product: syz [ 1751.812203][ T383] usb 5-1: Manufacturer: syz [ 1751.812218][ T383] usb 5-1: SerialNumber: syz [ 1751.934535][ T383] usb 5-1: config 0 descriptor?? [ 1751.944851][ T383] hub 5-1:0.132: bad descriptor, ignoring hub [ 1751.944898][ T383] hub 5-1:0.132: probe with driver hub failed with error -5 [ 1752.121213][ T383] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input112 [ 1752.392491][ T383] usb 5-1: USB disconnect, device number 7 [ 1756.582236][ T4306] ffs_data_put(): freeing [ 1758.126496][ T4372] netlink: 'syz.9.12116': attribute type 2 has an invalid length. [ 1758.344358][ T4372] : entered promiscuous mode [ 1758.674217][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12122'. [ 1758.743683][ T6897] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.743884][ T6897] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.743919][ T6897] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.744039][ T6897] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1758.745257][ T4386] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12122'. [ 1759.416054][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1759.416163][ T38] audit: type=1326 audit(2000002095.189:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4402 comm="syz.9.12129" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f632b4cde99 code=0x0 [ 1767.067730][T25534] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1767.277232][T25534] usb 5-1: Using ep0 maxpacket: 32 [ 1767.282070][T25534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1767.282102][T25534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.282144][T25534] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1767.282168][T25534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.356369][T25534] usb 5-1: config 0 descriptor?? [ 1767.403765][T25534] hub 5-1:0.0: USB hub found [ 1767.582475][T25534] hub 5-1:0.0: 1 port detected [ 1767.807929][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12218'. [ 1768.961276][T25534] hub 5-1:0.0: activate --> -90 [ 1769.164575][T25534] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1769.165312][T25534] usb 5-1: USB disconnect, device number 8 [ 1770.707628][ T5710] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 1770.873313][ T5710] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1770.873345][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.873366][ T5710] usb 5-1: Product: syz [ 1770.873382][ T5710] usb 5-1: Manufacturer: syz [ 1770.873397][ T5710] usb 5-1: SerialNumber: syz [ 1770.918646][ T5710] usb 5-1: config 0 descriptor?? [ 1771.133028][ T5710] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1771.463980][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12260'. [ 1771.878778][ T4722] fuse: Bad value for 'fd' [ 1771.950308][ T5710] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1771.954628][ T5710] usb 5-1: USB disconnect, device number 9 [ 1773.070194][ T4773] PM: suspend entry (deep) [ 1774.692759][ T809] Filesystems sync: 1.208 seconds [ 1775.033327][ T4809] fuse: Bad value for 'fd' [ 1775.034595][ T4773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1775.049857][ T4773] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1775.458173][ T4825] overlayfs: failed to clone lowerpath [ 1775.524319][ T4826] overlayfs: failed to clone lowerpath [ 1776.425616][ T4773] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1776.425775][ T4773] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1776.577968][ T4773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1776.745374][ T4773] Freezing user space processes [ 1776.824000][ T4773] Freezing user space processes completed (elapsed 0.078 seconds) [ 1776.824417][ T4773] OOM killer disabled. [ 1776.824430][ T4773] Freezing remaining freezable tasks [ 1776.854666][ T4773] Freezing remaining freezable tasks completed (elapsed 0.030 seconds) [ 1776.856368][ T4773] printk: Suspending console(s) (use no_console_suspend to debug) [ 1777.069166][ T4910] Bluetooth: hci3: command 0x0406 tx timeout [ 1778.243846][ T4773] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 1778.310326][ T4773] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 1778.353715][ T4773] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 1778.400561][ T4773] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 1778.426927][ T4910] Bluetooth: hci4: command 0x0406 tx timeout [ 1778.445452][ T4773] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 1778.488833][ T4773] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 1778.538158][ T4773] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 1778.585179][ T4773] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 1778.589487][ T4910] Bluetooth: hci2: command 0x0406 tx timeout [ 1778.640848][ T4773] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 1778.757816][ T4773] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 1778.765479][ T4773] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 1778.806400][ T4773] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 1778.848871][ T4773] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 1778.890318][ T4773] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 1778.928833][ T4773] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 1778.973316][ T4773] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 1779.146843][ T4910] Bluetooth: hci3: command 0x0406 tx timeout [ 1780.516944][ T4910] Bluetooth: hci4: command 0x0406 tx timeout [ 1782.610836][ T4773] ACPI: PM: Preparing to enter system sleep state S3 [ 1782.644123][ T4773] ACPI: PM: Saving platform NVS memory [ 1782.678748][ T4773] Disabling non-boot CPUs ... [ 1782.864671][ T4773] smpboot: CPU 1 is now offline [ 1783.016862][ T4773] ACPI: PM: Low-level resume complete [ 1783.016936][ T4773] ACPI: PM: Restoring platform NVS memory [ 1783.056647][ T4773] Enabling non-boot CPUs ... [ 1783.070281][ T4773] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 1783.160374][ T4773] CPU1 is up [ 1783.163440][ T4773] ACPI: PM: Waking up from system sleep state S3 [ 1785.686159][ T4773] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 1785.803071][ T4773] virtio-pci 0000:00:03.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 1785.803915][ T4773] virtio-pci 0000:00:03.0: PM: failed to resume: error -4 [ 1785.893546][ T4773] virtio-pci 0000:00:04.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 1785.893780][ T4773] virtio-pci 0000:00:04.0: PM: failed to resume: error -4 [ 1785.899815][ T4773] virtio-pci 0000:00:06.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 1785.900115][ T4773] virtio-pci 0000:00:06.0: PM: failed to resume: error -4 [ 1785.956245][ T4773] virtio-pci 0000:00:07.0: PM: dpm_run_callback(): pci_pm_resume returns -4 [ 1785.956571][ T4773] virtio-pci 0000:00:07.0: PM: failed to resume: error -4 [ 1788.095516][ T4773] OOM killer enabled. [ 1788.095527][ T4773] Restarting tasks: Starting [ 1788.099231][T25534] ================================================================== [ 1788.099244][T25534] BUG: KFENCE: use-after-free read in virtqueue_get_buf_ctx+0x42/0x2150 [ 1788.099244][T25534] [ 1788.099271][T25534] Use-after-free read at 0xffff88823be22048 (in kfence-#16): [ 1788.099292][T25534] virtqueue_get_buf_ctx+0x42/0x2150 [ 1788.099309][T25534] update_balloon_stats_func+0x121/0x300 [ 1788.099332][T25534] process_scheduled_works+0xa8e/0x14e0 [ 1788.099351][T25534] worker_thread+0xa47/0xfb0 [ 1788.099368][T25534] kthread+0x388/0x470 [ 1788.099390][T25534] ret_from_fork+0x514/0xb70 [ 1788.099420][T25534] ret_from_fork_asm+0x1a/0x30 [ 1788.099433][T25534] [ 1788.099438][T25534] kfence-#16: 0xffff88823be22f00-0xffff88823be22fef, size=240, cache=skbuff_head_cache [ 1788.099438][T25534] [ 1788.099472][T25534] allocated by task 13198 on cpu 0 at 1787.700554s (0.398917s ago): [ 1788.099500][T25534] __alloc_skb+0x1d7/0x7a0 [ 1788.099515][T25534] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1788.099537][T25534] process_scheduled_works+0xa8e/0x14e0 [ 1788.099554][T25534] worker_thread+0xa47/0xfb0 [ 1788.099572][T25534] kthread+0x388/0x470 [ 1788.099595][T25534] ret_from_fork+0x514/0xb70 [ 1788.099618][T25534] ret_from_fork_asm+0x1a/0x30 [ 1788.099633][T25534] [ 1788.099636][T25534] freed by task 13198 on cpu 0 at 1787.704288s (0.395347s ago): [ 1788.099673][T25534] nsim_dev_trap_report_work+0x879/0xcb0 [ 1788.099697][T25534] process_scheduled_works+0xa8e/0x14e0 [ 1788.099717][T25534] worker_thread+0xa47/0xfb0 [ 1788.099736][T25534] kthread+0x388/0x470 [ 1788.099757][T25534] ret_from_fork+0x514/0xb70 [ 1788.099780][T25534] ret_from_fork_asm+0x1a/0x30 [ 1788.099793][T25534] [ 1788.099807][T25534] CPU: 0 UID: 0 PID: 25534 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1788.099832][T25534] Tainted: [L]=SOFTLOCKUP [ 1788.099838][T25534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1788.099848][T25534] Workqueue: events_freezable update_balloon_stats_func [ 1788.099877][T25534] RIP: 0010:virtqueue_get_buf_ctx+0x42/0x2150 [ 1788.099896][T25534] Code: 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 26 18 87 fc 4c 8d 73 48 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d5 15 00 00 <45> 8b 36 4c 89 f7 48 c7 c6 e0 de a8 8e e8 0c 1e 87 fc 41 83 fe 01 [ 1788.099911][T25534] RSP: 0018:ffffc900110d7960 EFLAGS: 00010246 [ 1788.099925][T25534] RAX: 0000000000000000 RBX: ffff88823be22000 RCX: ffff88803a8e8000 [ 1788.099938][T25534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1788.099948][T25534] RBP: 0000000000000000 R08: ffffffff8de1c71f R09: 0000000000000000 [ 1788.099959][T25534] R10: fffff5200221aeb8 R11: fffffbfff1bc38e4 R12: 1ffff11004063d32 [ 1788.099972][T25534] R13: dffffc0000000000 R14: ffff88823be22048 R15: ffffc900110d7a80 [ 1788.099984][T25534] FS: 0000000000000000(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 1788.099998][T25534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1788.100009][T25534] CR2: ffff88823be22048 CR3: 0000000027530000 CR4: 00000000003526f0 [ 1788.100025][T25534] Call Trace: [ 1788.100032][T25534] [ 1788.100046][T25534] update_balloon_stats_func+0x121/0x300 [ 1788.100074][T25534] ? __pfx_update_balloon_stats_func+0x10/0x10 [ 1788.100173][T25534] ? rcu_is_watching+0x15/0xb0 [ 1788.100199][T25534] ? process_scheduled_works+0xa20/0x14e0 [ 1788.100218][T25534] process_scheduled_works+0xa8e/0x14e0 [ 1788.100251][T25534] ? __pfx_process_scheduled_works+0x10/0x10 [ 1788.100273][T25534] ? assign_work+0x3cf/0x5d0 [ 1788.100294][T25534] worker_thread+0xa47/0xfb0 [ 1788.100321][T25534] ? __kthread_parkme+0x71/0x1f0 [ 1788.100348][T25534] kthread+0x388/0x470 [ 1788.100372][T25534] ? __pfx_worker_thread+0x10/0x10 [ 1788.100391][T25534] ? __pfx_kthread+0x10/0x10 [ 1788.100419][T25534] ret_from_fork+0x514/0xb70 [ 1788.100447][T25534] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.100472][T25534] ? __switch_to+0xc89/0x1420 [ 1788.100496][T25534] ? __pfx_kthread+0x10/0x10 [ 1788.100521][T25534] ret_from_fork_asm+0x1a/0x30 [ 1788.100545][T25534] [ 1788.100551][T25534] ================================================================== [ 1788.100569][T25534] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 1788.100584][T25534] CPU: 0 UID: 0 PID: 25534 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1788.100612][T25534] Tainted: [L]=SOFTLOCKUP [ 1788.100621][T25534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1788.100632][T25534] Workqueue: events_freezable update_balloon_stats_func [ 1788.100659][T25534] Call Trace: [ 1788.100673][T25534] [ 1788.100693][T25534] vpanic+0x56c/0xa60 [ 1788.100712][T25534] ? __pfx_vpanic+0x10/0x10 [ 1788.100728][T25534] ? is_bpf_text_address+0x292/0x2b0 [ 1788.100755][T25534] panic+0xc5/0xd0 [ 1788.100770][T25534] ? __pfx_panic+0x10/0x10 [ 1788.100788][T25534] ? __pfx__printk+0x10/0x10 [ 1788.100815][T25534] check_panic_on_warn+0x89/0xb0 [ 1788.100833][T25534] kfence_report_error+0x76a/0xa60 [ 1788.100879][T25534] ? __pfx_kfence_report_error+0x10/0x10 [ 1788.100896][T25534] ? virtqueue_get_buf_ctx+0x42/0x2150 [ 1788.100912][T25534] ? update_balloon_stats_func+0x121/0x300 [ 1788.100934][T25534] ? process_scheduled_works+0xa8e/0x14e0 [ 1788.100970][T25534] ? worker_thread+0xa47/0xfb0 [ 1788.100990][T25534] ? kthread+0x388/0x470 [ 1788.101019][T25534] ? ret_from_fork+0x514/0xb70 [ 1788.101044][T25534] ? ret_from_fork_asm+0x1a/0x30 [ 1788.101123][T25534] kfence_handle_page_fault+0x3e1/0x720 [ 1788.101148][T25534] ? __pfx_kfence_handle_page_fault+0x10/0x10 [ 1788.101180][T25534] page_fault_oops+0x1a5/0xac0 [ 1788.101206][T25534] ? __pfx_page_fault_oops+0x10/0x10 [ 1788.101224][T25534] ? is_prefetch+0x433/0x690 [ 1788.101245][T25534] ? __pfx_is_prefetch+0x10/0x10 [ 1788.101274][T25534] exc_page_fault+0x91/0xc0 [ 1788.101342][T25534] asm_exc_page_fault+0x26/0x30 [ 1788.101359][T25534] RIP: 0010:virtqueue_get_buf_ctx+0x42/0x2150 [ 1788.101379][T25534] Code: 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 26 18 87 fc 4c 8d 73 48 4c 89 f0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 d5 15 00 00 <45> 8b 36 4c 89 f7 48 c7 c6 e0 de a8 8e e8 0c 1e 87 fc 41 83 fe 01 [ 1788.101394][T25534] RSP: 0018:ffffc900110d7960 EFLAGS: 00010246 [ 1788.101408][T25534] RAX: 0000000000000000 RBX: ffff88823be22000 RCX: ffff88803a8e8000 [ 1788.101420][T25534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1788.101430][T25534] RBP: 0000000000000000 R08: ffffffff8de1c71f R09: 0000000000000000 [ 1788.101440][T25534] R10: fffff5200221aeb8 R11: fffffbfff1bc38e4 R12: 1ffff11004063d32 [ 1788.101453][T25534] R13: dffffc0000000000 R14: ffff88823be22048 R15: ffffc900110d7a80 [ 1788.101494][T25534] update_balloon_stats_func+0x121/0x300 [ 1788.101523][T25534] ? __pfx_update_balloon_stats_func+0x10/0x10 [ 1788.101557][T25534] ? rcu_is_watching+0x15/0xb0 [ 1788.101582][T25534] ? process_scheduled_works+0xa20/0x14e0 [ 1788.101603][T25534] process_scheduled_works+0xa8e/0x14e0 [ 1788.101652][T25534] ? __pfx_process_scheduled_works+0x10/0x10 [ 1788.101693][T25534] ? assign_work+0x3cf/0x5d0 [ 1788.101720][T25534] worker_thread+0xa47/0xfb0 [ 1788.101774][T25534] ? __kthread_parkme+0x71/0x1f0 [ 1788.101808][T25534] kthread+0x388/0x470 [ 1788.101834][T25534] ? __pfx_worker_thread+0x10/0x10 [ 1788.101854][T25534] ? __pfx_kthread+0x10/0x10 [ 1788.101880][T25534] ret_from_fork+0x514/0xb70 [ 1788.101919][T25534] ? __pfx_ret_from_fork+0x10/0x10 [ 1788.101946][T25534] ? __switch_to+0xc89/0x1420 [ 1788.101971][T25534] ? __pfx_kthread+0x10/0x10 [ 1788.101997][T25534] ret_from_fork_asm+0x1a/0x30 [ 1788.102028][T25534] [ 1788.103229][T25534] Kernel Offset: disabled