last executing test programs: 9.670646136s ago: executing program 3 (id=799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x1, 0x4, 0x1, 0x0, 0x7, 0x90200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x3c0c, 0x200000000000c8, 0xfffffffc, 0x5, 0x400000000003, 0x4, 0x0, 0x0, 0x10, 0x0, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x15754166b9f0ab70, &(0x7f0000000140)=ANY=[@ANYBLOB="7472584aab08616e733d66642c7266", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYRESDEC=r0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0xff, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x107a03, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0x10, 0x400000002, 0x0) vmsplice(r7, 0x0, 0x0, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$inet6(0xa, 0x80002, 0x0) io_submit(0x0, 0x0, &(0x7f0000000500)) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x0, 0x7ff}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000500) sendmsg$inet(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="010725bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 8.621783378s ago: executing program 3 (id=802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1414aa000000000000000000000000fefffffffffffffffeffffffffffffff0000000000000000000000000000000000000000000000007f000000000000000000000000000000000000000000000000000000000000000008400000000000000000000000000000000000000000000000000000000000feffffff0000000000000000020004032c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10c7fffffffffffffff00074f4c001400686d61632873686132353629"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9}, 0x48) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r3}, 0x20) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="050000"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x801) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='\a'], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0xb9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @alu={0x4, 0x1, 0xb, 0x0, 0xb, 0x4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x3, 0x8, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000380)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x37, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x8, 0x7, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r1, r4, r2, r9, r2, r4, r4, r4], &(0x7f0000000580)=[{0x0, 0x2, 0xc}], 0x10, 0x1}, 0x94) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$poke(0x420f, r10, 0x0, 0x7fffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6.541070772s ago: executing program 3 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() set_mempolicy(0x2002, 0x0, 0x9) sched_setscheduler(r0, 0x2, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x171}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4884) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffff9c, 0x0, 0x42000, 0x10) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000240)={0x0, 0xec21, 0x80, 0x1, 0x100038c}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r3, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000380)=""/189, 0xbd}], 0x2, 0x0, 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 5.639016145s ago: executing program 3 (id=822): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x14ffffff) mmap$qrtrtun(&(0x7f000073e000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x2) pwrite64(r0, &(0x7f0000000040), 0x0, 0x3) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x1404, 0x20, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x5f, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}}, 0x4880) syz_emit_ethernet(0xfd5, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f51000000000000000000000000000000000000fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc9c5118a436ffb6b700fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"], 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000180)=""/205) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0) 5.176251853s ago: executing program 3 (id=824): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x44000) 4.836592993s ago: executing program 3 (id=827): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x800}, 0x800, 0x4005, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$eJzs3M9rG0cUwPEnWZYlGVs6lJYWiof20l4WW+25VBQbSgU1tlVqFwxre9UKbSWjFS4qpbZPvZbccwrkYHz0zZD4H/Alt+SSS266BHKICSEb9pf107asyJFjfz8QdjQzTzujGYW3i1f1X///s5i3tLxelXBMSUhE5EQkJWEJhPxj2C1HpdmOfD3+4vHni8srP2Wy2dkFpeYyS9+klVKTUw/++ifudzsck+PUav15+tnxx8ef1t8s/VGwVMFSpXJV6Wqt/LSqr5mG2ihYRU2pedPQLUMVSpZR8drLXnveLG9u1pRe2phIbFYMy1J6qaaKRk1Vy6paqSn9d71QUpqmqYmE4ALOgi7omT6j1wc8GlyRSiWjj4hIvKMltzeUAQEAgKFqz//DTkrfV/4vk27+73Ru5P/7XxxVx385mDx0Ylfrh9Fu+f+3T7z3asn/YyLST/5/Vy6R/3dmRLdLbm+h//wf18NUtKMq1PLKyf8T/vfXtfvb/rRbIP8HAAAAAAAAAAAAAAAAAAAAAOBDcGLbSdu2k8Ex+Nd4hMB/jRvprPUfE5GYs/o263+TLS6vSMx9cM9ZY/O/rdxWzjv6HY5ExBRDpiUpr9394HPKwZNHypGSh+a2G//KOY64LZm8FNz4GUlKqj3etud+zM7OKI8ff/qYUqI5Pi1J+ah7fLo13hn/9lYuKl992RSvSVIerUtZTNlw93Uj/t8ZpX74OdsWH/dOAgAAAADADaApFfIvn1Ot17/e9bumKdW93fuVkUzevU10xv0B7/p6uuv1eST5WWTYswcAAAAA4Hawan8XddM0KucU4nJxn/4Lkd46R9tqRs/rPNI0w17HE3VvZIi867zu9fipthSCP6RoaYr5lf2NJ5j/wNZrp7kmLD1ERdoHP+VUqEuefdefyGlNcNsoesbnLPOd7xM+ZyeMDmw/f3Ln/svBfUG+Owh2wMWdd/s9V6x917mF0av+fwcAAADA+9dI+oOa75ubQ0MZFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8yV/KRfW2HYcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACui7cBAAD//5Oa+gc=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_emit_ethernet(0x57, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x28, 0x49, 0x67, 0x0, 0x17, 0x6, 0x0, @broadcast, @private=0xa010100, {[@end, @lsrr={0x83, 0x7, 0xc9, [@local]}]}}, @payload_named={{{{{0x2d, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0xa6e6, 0x8, 0x0, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)=ANY=[]) connect$x25(r1, &(0x7f0000000140), 0x12) mknod(0x0, 0x1000, 0x1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ff0101000000000000000000000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001fc2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x720, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="1f5686f3ede12a1d617b4f91df79334fdf9b4235bf09b9f0efc80fbd74d59c39479c818b70def420f8dacc25bb2cf12df94d7039311b932e7687ac8c03691c231f0b315102e1f458937e3a5f65dcd7a2dc1ebc2979afb0dcd54689e752a36a6d98fb62c79625d414b3351962616dd332acf1c7226a0219834db3a36c489abd0ba9b1ed06a2680106246684e3a24b0f889631286aaa449a04549bfdde621922b2594a1e4bd1112de25df94408ca7d52793fa5979cef332604c9c4b88b", @ANYRESOCT=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_sock_diag(0x10, 0x3, 0x4) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffff8c) 4.809885895s ago: executing program 32 (id=827): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x800}, 0x800, 0x4005, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) syz_emit_ethernet(0x57, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x1, 0x28, 0x49, 0x67, 0x0, 0x17, 0x6, 0x0, @broadcast, @private=0xa010100, {[@end, @lsrr={0x83, 0x7, 0xc9, [@local]}]}}, @payload_named={{{{{0x2d, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0xa6e6, 0x8, 0x0, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, &(0x7f0000000580)=ANY=[]) connect$x25(r1, &(0x7f0000000140), 0x12) mknod(0x0, 0x1000, 0x1) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000080003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ff0101000000000000000000000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001fc2000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x720, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRES16=r4, @ANYBLOB="1f5686f3ede12a1d617b4f91df79334fdf9b4235bf09b9f0efc80fbd74d59c39479c818b70def420f8dacc25bb2cf12df94d7039311b932e7687ac8c03691c231f0b315102e1f458937e3a5f65dcd7a2dc1ebc2979afb0dcd54689e752a36a6d98fb62c79625d414b3351962616dd332acf1c7226a0219834db3a36c489abd0ba9b1ed06a2680106246684e3a24b0f889631286aaa449a04549bfdde621922b2594a1e4bd1112de25df94408ca7d52793fa5979cef332604c9c4b88b", @ANYRESOCT=r4], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$nl_sock_diag(0x10, 0x3, 0x4) read(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffff8c) 4.566988809s ago: executing program 2 (id=829): r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, r2, 0x6a98047402e98331, 0x70bd21, 0xff9f, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) r4 = syz_io_uring_setup(0x102, &(0x7f0000000380)={0x0, 0x2d48, 0x10000, 0x3, 0x2000089}, &(0x7f0000000500)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x14, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x880, 0x1}, &(0x7f0000010180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r4, 0x3516, 0x7723, 0xa, 0x0, 0x0) r7 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r7}, 0x8) 2.595182506s ago: executing program 2 (id=833): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x2010, r1, 0x13732000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x20, 0x2}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390440bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0198000000000000180012800e000100776972656775617264000000440002800800290016150700080028008ee60004"], 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x200, 0x0, 0xe4, 0x6, 0x860, 0x2, 0xdfa0}, 0x1c) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.179498491s ago: executing program 2 (id=839): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)={0x30, r0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x40891) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r9, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r12}, 0x4) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r13, 0x0, 0xe, 0x0, &(0x7f00000000c0)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.626476494s ago: executing program 1 (id=843): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x842, 0x20) syz_emit_ethernet(0x5a, &(0x7f00000003c0)={@broadcast, @dev, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x1, 0x28, 0x4c, 0x67, 0x0, 0x17, 0x6, 0x0, @broadcast, @private=0xa010100, {[@timestamp_prespec={0x44, 0x4, 0x4e, 0x3, 0xf}, @ra={0x94, 0x4}, @end]}}, @payload_named={{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xa, 0x2, 0x2, 0x0, 0x0, 0x3, 0x7, 0x2, 0x2, 0xa6e6, 0x8, 0x0, 0x4e23, 0x4e20}, 0x2, 0x1}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x2000000, 0x0) mknod(0x0, 0x1000, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x720, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000240)=0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x8d2, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xffffff8c) 1.502549821s ago: executing program 1 (id=846): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x39, 0x9, 0x3000000, 0x0, {0x1}, [@typed={0x4}, @nested={0x4, 0x1}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x24}}, 0x0) 1.474771743s ago: executing program 2 (id=847): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x44000) 1.467141823s ago: executing program 0 (id=848): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="8cff7cf9080000f80329555351c4bf78"], 0x10) unshare(0x40180) 1.391085618s ago: executing program 2 (id=850): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0xc0000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x50, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x9, 0x7, 0x3, 0x0, 0x1, 0x0, 0x8f, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 1.36223862s ago: executing program 4 (id=851): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0xc0000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x50, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x9, 0x7, 0x3, 0x0, 0x1, 0x0, 0x8f, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 1.342448481s ago: executing program 0 (id=852): bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xd, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000680)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0x22, 0x10000, 0x82, 0x80003}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x10, 0x2d, 0x1, 0x2}, 0x10}], 0x1, 0x0, 0x0, 0x24040040}, 0x800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) close(r10) 1.282888234s ago: executing program 1 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)={0x14, r3, 0xa17, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44814}, 0x8904) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1.262010746s ago: executing program 4 (id=854): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f00000001c0)=""/157, 0x9d, 0x8) pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0x190, 0x190, 0x98, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @private, 0x0, 0x0, 'ip6tnl0\x00', 'veth0_to_bond\x00', {}, {}, 0x6c, 0x0, 0x21}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x5}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010101, @empty, 0xff000000, 0x0, 'vcan0\x00', 'ip_vti0\x00', {}, {}, 0x11, 0x1, 0x1e}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(r4, &(0x7f00000000c0)='io\x00') capset(&(0x7f0000000440)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) setpriority(0x1, 0x0, 0xbbb) pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c04000f0080000300", 0x33a) sendmsg$nl_route(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001900100027bd7000fddbdf251c008009fd00ff00002800000000000000140012000100a7dcd85faf96fcf5e56bb4d0e86ac7ea41b65f000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) sched_setattr(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x35a16}], 0x14, 0x7800, 0x0, 0x3) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000500)=0x730, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d300000018010000e4d400bf00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000d00)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) 1.228539838s ago: executing program 2 (id=855): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d77e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 1.226293968s ago: executing program 1 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500), &(0x7f0000000540)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x2, 0x800020, 0x6, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f00000000c0)=0xffffffff, 0xfee2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.159919482s ago: executing program 4 (id=857): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) openat$cgroup_int(r2, 0x0, 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) (async) get_mempolicy(0x0, &(0x7f00000001c0), 0x4, &(0x7f0000001000/0x1000)=nil, 0x1) r4 = socket$inet6(0xa, 0x3, 0x1) (async) r5 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) (async) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) (async) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) 1.071975977s ago: executing program 4 (id=858): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x1000003, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, &(0x7f0000000a40)="1475e5b81f6d04df64e28f2e2824d9185d4cd1a3bc11126176250aede7f858abb744b0877ffbe9811480b0bb79863b9eaa1bd21ff79779fc55bc2adad310de9bd15a", 0x0, 0x2, 0x0, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r3, &(0x7f0000000a80), 0x0}, 0x20) ioctl$TIOCSTI(r2, 0x5412, 0x0) 1.02154486s ago: executing program 4 (id=859): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="240012800b00010062726964676500"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="0100"], 0x3c}}, 0x0) 310.175942ms ago: executing program 1 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 221.444637ms ago: executing program 0 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44000) 199.616188ms ago: executing program 4 (id=862): r0 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x4, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x891b, 0x0) write$nci(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="400404"], 0x7) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000001080)=0x5c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)={r5, 0xfffe, 0x10, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001400)={r5, @in6={{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, [0xffffffffffffffff, 0x6ab6, 0xa99, 0x100000001, 0x8000000000000001, 0x100000000, 0xffffffffffffffff, 0x100000000, 0x100, 0x9, 0x6, 0x6, 0xffffe00000000000, 0x5, 0xc4c]}, &(0x7f0000000340)=0x100) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) write(r7, &(0x7f0000000300)="2cd889f035a53e14f3d5ac", 0xb) syz_open_dev$tty1(0xc, 0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) 123.752733ms ago: executing program 0 (id=863): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000214235027c07000fddbdf250a0005"], 0x20}, 0x1, 0x0, 0x0, 0x24044044}, 0x4008000) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70100000000000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000040)={0x2c, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @jumbo={0xc2, 0x4, 0x16a}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x1, [0x0]}, @generic={0x7, 0xa6, "d52d8fda8fed87e22b68a1b7a971a7014d8e99168cd14b02a35af8f5b2e007e7c94f4d8a6756ae185960652a50268083dfc9b206bf9fd797c59d3a6ed46fad2ecce2fb638e66a3da49cb7621f52f6009ec9c7103671fdf869e1f96d997c4f8bc8a95bfb59c4fbe3e99ebceae9cd4719a5af59fe9e52488b467d061dbda679c656786ef1aef42228aaad4ee4224d3beb185aaf18e20b9b2f3a4d09858d2bb2c4a2765c941c503"}]}, 0xd8) 123.309333ms ago: executing program 0 (id=864): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5, 0xffffffff}, [], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x2}}, 0x24, 0x3) 14.277789ms ago: executing program 0 (id=865): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0xc0000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xeb, 0x50, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x9, 0x7, 0x3, 0x0, 0x1, 0x0, 0x8f, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) 0s ago: executing program 1 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) kernel console output (not intermixed with test programs): c: denied { create } for pid=4124 comm="syz.4.246" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.698307][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.732416][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.754438][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.765146][ T4144] loop3: detected capacity change from 0 to 128 [ 46.779669][ T4144] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 47.060983][ T4142] loop4: detected capacity change from 0 to 512 [ 47.077948][ T4142] EXT4-fs: Ignoring removed oldalloc option [ 47.097621][ T4142] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.127690][ T4170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 47.143306][ T4142] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #11: comm syz.4.252: corrupted in-inode xattr: invalid ea_ino [ 47.181303][ T4142] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.181720][ T4142] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.252: couldn't read orphan inode 11 (err -117) [ 47.190955][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.190972][ C0] EXT4-fs (loop4): initial error at time 1771015795: ext4_iget_extra_inode:5025: inode 11 [ 47.191004][ C0] EXT4-fs (loop4): last error at time 1771015795: ext4_iget_extra_inode:5025: inode 11 [ 47.247876][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.270515][ T4142] loop4: lost filesystem error report for type 5 error -117 [ 47.271124][ T4142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.272072][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.304227][ T4142] ======================================================= [ 47.304227][ T4142] WARNING: The mand mount option has been deprecated and [ 47.304227][ T4142] and is ignored by this kernel. Remove the mand [ 47.304227][ T4142] option from the mount to silence this warning. [ 47.304227][ T4142] ======================================================= [ 47.352056][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.361499][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.386024][ T4181] program syz.3.267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.486204][ T4186] loop2: detected capacity change from 0 to 128 [ 47.598335][ T4186] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 47.729786][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 47.753789][ T4199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.274'. [ 47.902292][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.000616][ T4198] syz.1.265 (4198) used greatest stack depth: 9488 bytes left [ 48.039142][ T4170] syz.0.266 (4170) used greatest stack depth: 9464 bytes left [ 48.085635][ T4196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.099913][ T4207] loop0: detected capacity change from 0 to 512 [ 48.107154][ T4196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.122180][ T4207] EXT4-fs: Ignoring removed bh option [ 48.133433][ T4207] EXT4-fs: Ignoring removed oldalloc option [ 48.160347][ T4207] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.213185][ T4207] EXT4-fs (loop0): 1 truncate cleaned up [ 48.219498][ T4207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.522100][ T3310] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 48.535968][ T3310] CPU: 1 UID: 0 PID: 3310 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 48.535994][ T3310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 48.536088][ T3310] Call Trace: [ 48.536096][ T3310] [ 48.536104][ T3310] __dump_stack+0x1d/0x30 [ 48.536134][ T3310] dump_stack_lvl+0x95/0xd0 [ 48.536194][ T3310] dump_stack+0x15/0x1b [ 48.536288][ T3310] dump_header+0x80/0x240 [ 48.536311][ T3310] oom_kill_process+0x295/0x350 [ 48.536348][ T3310] out_of_memory+0x97d/0xb80 [ 48.536399][ T3310] try_charge_memcg+0x62e/0xa10 [ 48.536511][ T3310] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 48.536561][ T3310] __swap_cache_prepare_and_add+0x386/0x530 [ 48.536592][ T3310] swap_cache_alloc_folio+0xa2/0x120 [ 48.536691][ T3310] swap_cluster_readahead+0x26e/0x3d0 [ 48.536728][ T3310] swapin_readahead+0xde/0x840 [ 48.536816][ T3310] ? __rcu_read_unlock+0x33/0x70 [ 48.536869][ T3310] ? __rcu_read_unlock+0x4e/0x70 [ 48.536891][ T3310] ? swap_cache_get_folio+0x26f/0x280 [ 48.536917][ T3310] do_swap_page+0x309/0x21f0 [ 48.536940][ T3310] ? css_rstat_updated+0xbb/0x280 [ 48.537003][ T3310] ? __rcu_read_lock+0x36/0x50 [ 48.537021][ T3310] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 48.537042][ T3310] handle_mm_fault+0xb40/0x3020 [ 48.537090][ T3310] ? vma_start_read+0x1c7/0x2c0 [ 48.537268][ T3310] do_user_addr_fault+0x62f/0x1050 [ 48.537412][ T3310] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 48.537491][ T3310] ? irqentry_exit+0x3c/0x520 [ 48.537516][ T3310] exc_page_fault+0x62/0xa0 [ 48.537582][ T3310] asm_exc_page_fault+0x26/0x30 [ 48.537601][ T3310] RIP: 0033:0x7f19285ba077 [ 48.537624][ T3310] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 b7 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 b6 ed 00 48 01 d1 39 7c 24 [ 48.537678][ T3310] RSP: 002b:00007fff6fda1f90 EFLAGS: 00010202 [ 48.537741][ T3310] RAX: 0000001b33524000 RBX: 00000000000000ba RCX: 000000000000bb80 [ 48.537758][ T3310] RDX: 0000000006eedfaf RSI: 00007fff6fda2020 RDI: 0000000000000004 [ 48.537774][ T3310] RBP: 00007fff6fda1fcc R08: 000000001a729b2c R09: 7fffffffffffffff [ 48.537786][ T3310] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 48.537798][ T3310] R13: 00000000000927c0 R14: 000000000000bc42 R15: 00007fff6fda2020 [ 48.537816][ T3310] [ 48.537863][ T3310] memory: usage 307200kB, limit 307200kB, failcnt 2287 [ 48.783807][ T3310] memory+swap: usage 297768kB, limit 9007199254740988kB, failcnt 0 [ 48.791970][ T3310] kmem: usage 297372kB, limit 9007199254740988kB, failcnt 0 [ 48.799286][ T3310] Memory cgroup stats for /syz2: [ 48.799518][ T3310] cache 0 [ 48.807508][ T3310] rss 12288 [ 48.810632][ T3310] shmem 0 [ 48.834326][ T3310] mapped_file 0 [ 48.837891][ T3310] dirty 0 [ 48.840843][ T3310] writeback 4096 [ 48.858341][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.864462][ T3310] workingset_refault_anon 23 [ 48.898651][ T4230] loop0: detected capacity change from 0 to 128 [ 48.915021][ T4230] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 48.924316][ T3310] workingset_refault_file 2 [ 48.928844][ T3310] swap 192512 [ 48.961771][ T3310] swapcached 212992 [ 48.965621][ T3310] pgpgin 29797 [ 48.969015][ T3310] pgpgout 29792 [ 49.011921][ T3310] pgfault 34576 [ 49.015458][ T3310] pgmajfault 14 [ 49.029136][ T3310] inactive_anon 8192 [ 49.045527][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 49.045542][ T28] audit: type=1400 audit(1771015797.254:422): avc: denied { bind } for pid=4241 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.047310][ T3310] active_anon 12288 [ 49.087919][ T28] audit: type=1400 audit(1771015797.284:423): avc: denied { setopt } for pid=4241 comm="syz.3.290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.127775][ T3310] inactive_file 0 [ 49.131444][ T3310] active_file 0 [ 49.153893][ T3310] unevictable 0 [ 49.167449][ T3310] hierarchical_memory_limit 314572800 [ 49.181815][ T3310] hierarchical_memsw_limit 9223372036854771712 [ 49.188173][ T3310] total_cache 0 [ 49.191755][ T3310] total_rss 12288 [ 49.201852][ T3310] total_shmem 0 [ 49.205472][ T3310] total_mapped_file 0 [ 49.225230][ T3310] total_dirty 0 [ 49.236417][ T3310] total_writeback 4096 [ 49.240544][ T3310] total_workingset_refault_anon 23 [ 49.245710][ T3310] total_workingset_refault_file 2 [ 49.250776][ T3310] total_swap 192512 [ 49.279697][ T3310] total_swapcached 212992 [ 49.294114][ T3310] total_pgpgin 29797 [ 49.299427][ T3310] total_pgpgout 29792 [ 49.303517][ T3310] total_pgfault 34576 [ 49.307651][ T3310] total_pgmajfault 14 [ 49.311778][ T3310] total_inactive_anon 8192 [ 49.316291][ T3310] total_active_anon 12288 [ 49.320721][ T3310] total_inactive_file 0 [ 49.332795][ T3310] total_active_file 0 [ 49.338007][ T3310] total_unevictable 0 [ 49.348010][ T3310] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.275,pid=4201,uid=0 [ 49.362888][ T3310] Memory cgroup out of memory: Killed process 4201 (syz.2.275) total-vm:96204kB, anon-rss:1236kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 49.495709][ T4258] syzkaller0: entered promiscuous mode [ 49.497288][ T28] audit: type=1400 audit(1771015797.704:424): avc: denied { ioctl } for pid=4256 comm="syz.2.296" path="socket:[7269]" dev="sockfs" ino=7269 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.501240][ T4258] syzkaller0: entered allmulticast mode [ 49.552349][ T4267] loop2: detected capacity change from 0 to 128 [ 49.559332][ T4267] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 49.775194][ T4260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.793523][ T4260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.828476][ T28] audit: type=1400 audit(1771015798.034:425): avc: denied { ioctl } for pid=4281 comm="syz.2.306" path="mnt:[4026532380]" dev="nsfs" ino=4026532380 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 49.973320][ T4291] syzkaller0: entered promiscuous mode [ 49.985509][ T4291] syzkaller0: entered allmulticast mode [ 50.016970][ T4293] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 50.057700][ T4296] loop2: detected capacity change from 0 to 512 [ 50.066860][ T4297] lo: entered promiscuous mode [ 50.067516][ T4296] EXT4-fs: Ignoring removed bh option [ 50.078900][ T4296] EXT4-fs: Ignoring removed oldalloc option [ 50.087666][ T4296] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.097802][ T4297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.114559][ T4296] EXT4-fs (loop2): 1 truncate cleaned up [ 50.122287][ T4296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.226498][ T28] audit: type=1400 audit(1771015798.434:426): avc: denied { map } for pid=4302 comm="syz.0.314" path="socket:[7308]" dev="sockfs" ino=7308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.253640][ T28] audit: type=1400 audit(1771015798.434:427): avc: denied { read } for pid=4302 comm="syz.0.314" path="socket:[7308]" dev="sockfs" ino=7308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 50.288132][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.463246][ T4310] loop3: detected capacity change from 0 to 512 [ 50.478240][ T4307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 50.512236][ T4310] EXT4-fs: Ignoring removed bh option [ 50.517698][ T4310] EXT4-fs: Ignoring removed oldalloc option [ 50.531723][ T4310] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.550243][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.559176][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.561366][ T4310] EXT4-fs (loop3): 1 truncate cleaned up [ 50.582007][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.600596][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.621736][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 50.665881][ T4319] syzkaller0: entered promiscuous mode [ 50.671488][ T4319] syzkaller0: entered allmulticast mode [ 50.746878][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.896192][ T4328] netlink: 56 bytes leftover after parsing attributes in process `syz.4.326'. [ 50.908695][ T28] audit: type=1326 audit(1771015799.114:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 50.948531][ T28] audit: type=1326 audit(1771015799.114:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 50.950883][ T4333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 50.975769][ T28] audit: type=1326 audit(1771015799.114:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 51.023676][ T28] audit: type=1326 audit(1771015799.114:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4330 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 51.186921][ T4339] program syz.1.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.314435][ T4374] program syz.1.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.353623][ T4379] loop2: detected capacity change from 0 to 128 [ 52.391983][ T4379] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 52.503309][ T4379] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.521598][ T4379] FAT-fs (loop2): Filesystem has been set read-only [ 52.528330][ T4379] bio_check_eod: 22563 callbacks suppressed [ 52.528416][ T4379] syz.2.345: attempt to access beyond end of device [ 52.528416][ T4379] loop2: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 52.578847][ T4379] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.588205][ T4379] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 52.600020][ T4389] syz.2.345: attempt to access beyond end of device [ 52.600020][ T4389] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.616175][ T4392] loop3: detected capacity change from 0 to 128 [ 52.625172][ T4389] syz.2.345: attempt to access beyond end of device [ 52.625172][ T4389] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.639446][ T4379] syz.2.345: attempt to access beyond end of device [ 52.639446][ T4379] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.654492][ T4392] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 52.666347][ T4389] syz.2.345: attempt to access beyond end of device [ 52.666347][ T4389] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.683107][ T4389] syz.2.345: attempt to access beyond end of device [ 52.683107][ T4389] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.698643][ T4392] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.714581][ T4392] FAT-fs (loop3): Filesystem has been set read-only [ 52.723100][ T4392] syz.3.350: attempt to access beyond end of device [ 52.723100][ T4392] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 52.739592][ T4392] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.747650][ T4379] syz.2.345: attempt to access beyond end of device [ 52.747650][ T4379] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.764306][ T4378] syz.2.345: attempt to access beyond end of device [ 52.764306][ T4378] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 52.780506][ T4392] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 52.788704][ T4379] syz.2.345: attempt to access beyond end of device [ 52.788704][ T4379] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 53.364092][ T4412] netlink: 'syz.0.355': attribute type 16 has an invalid length. [ 53.391572][ T4412] netlink: 'syz.0.355': attribute type 17 has an invalid length. [ 53.403585][ T4412] lo: left promiscuous mode [ 53.422586][ T4416] loop1: detected capacity change from 0 to 128 [ 53.463876][ T4416] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 53.482396][ T4412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.567631][ T4422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.360'. [ 53.612826][ T4422] loop3: detected capacity change from 0 to 764 [ 53.775784][ T4422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 53.915808][ T4449] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.956769][ T4451] loop3: detected capacity change from 0 to 128 [ 53.997333][ T4451] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 54.023249][ T4451] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 54.040155][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'. [ 54.059397][ T4449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.066960][ T4451] FAT-fs (loop3): Filesystem has been set read-only [ 54.093097][ T4451] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 54.102033][ T4449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.113940][ T4451] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 54.212637][ T4447] loop1: detected capacity change from 0 to 1024 [ 54.241982][ T4447] EXT4-fs (loop1): inodes count not valid: 27 vs 32 [ 55.184029][ T4476] loop4: detected capacity change from 0 to 512 [ 55.201920][ T4476] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.215995][ T4476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.230743][ T4476] __quota_error: 337 callbacks suppressed [ 55.230755][ T4476] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 55.256156][ T4476] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 55.256179][ T4476] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.379: Failed to acquire dquot type 1 [ 55.256198][ T4476] loop4: lost filesystem error report for type 5 error -5 [ 55.256697][ T4476] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.379: bg 0: block 40: padding at end of block bitmap is not set [ 55.256756][ T4476] loop4: lost filesystem error report for type 5 error -117 [ 55.256897][ T4476] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 55.256918][ T4476] loop4: lost filesystem error report for type 5 error -117 [ 55.257306][ T4476] EXT4-fs (loop4): 1 truncate cleaned up [ 55.271737][ T4476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.352901][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.369000][ T4489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.384'. [ 55.372683][ T4489] loop4: detected capacity change from 0 to 512 [ 55.380972][ T4489] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 55.381096][ T4489] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.381523][ T4489] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 55.381541][ T4489] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 55.381560][ T4489] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.384: Failed to acquire dquot type 1 [ 55.381579][ T4489] loop4: lost filesystem error report for type 5 error -5 [ 55.382157][ T4489] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.384: bg 0: block 40: padding at end of block bitmap is not set [ 55.382208][ T4489] loop4: lost filesystem error report for type 5 error -117 [ 55.382367][ T4489] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 55.382403][ T4489] loop4: lost filesystem error report for type 5 error -117 [ 55.382662][ T4489] EXT4-fs (loop4): 1 truncate cleaned up [ 55.404080][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 55.404098][ C1] EXT4-fs (loop4): initial error at time 1771015803: ext4_acquire_dquot:7003 [ 55.404121][ C1] EXT4-fs (loop4): last error at time 1771015803: ext4_mb_clear_bb:6687 [ 55.404509][ T4489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.433610][ T4492] netlink: 4556 bytes leftover after parsing attributes in process `syz.3.385'. [ 55.472645][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.766623][ T4509] loop3: detected capacity change from 0 to 128 [ 55.770886][ T28] audit: type=1400 audit(1771015803.974:769): avc: denied { create } for pid=4511 comm="syz.0.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.793052][ T4509] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 55.833002][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 55.864368][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 56.122746][ T4530] loop1: detected capacity change from 0 to 512 [ 56.141039][ T4530] EXT4-fs: Ignoring removed bh option [ 56.147122][ T4530] EXT4-fs: Ignoring removed oldalloc option [ 56.162784][ T4530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.182540][ T4530] EXT4-fs (loop1): 1 truncate cleaned up [ 56.209113][ T4530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.236409][ T28] audit: type=1400 audit(1771015804.444:770): avc: denied { add_name } for pid=4528 comm="syz.1.401" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.321264][ T28] audit: type=1400 audit(1771015804.524:771): avc: denied { write } for pid=4535 comm="syz.4.402" path="socket:[7706]" dev="sockfs" ino=7706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.489797][ T4543] EXT4-fs: Ignoring removed oldalloc option [ 56.503188][ T4543] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.516590][ T4543] EXT4-fs (loop0): 1 truncate cleaned up [ 56.525123][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.532984][ T4543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.639340][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.678570][ T4553] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 56.703162][ T4553] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.720502][ T4553] FAT-fs (loop2): Filesystem has been set read-only [ 56.728174][ T4553] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.736204][ T4553] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 56.773453][ T4561] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.410: couldn't read orphan inode 26 (err -116) [ 56.787697][ T4561] loop0: lost filesystem error report for type 5 error -116 [ 56.788363][ T4561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.808358][ T4561] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.825202][ T28] audit: type=1400 audit(1771015805.034:772): avc: denied { bind } for pid=4547 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.916963][ T28] audit: type=1400 audit(1771015805.124:773): avc: denied { setopt } for pid=4560 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.097899][ T28] audit: type=1400 audit(1771015805.294:774): avc: denied { mounton } for pid=4571 comm="syz.4.412" path="/68/file0" dev="cgroup" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 57.196509][ T4576] syzkaller0: entered promiscuous mode [ 57.205454][ T4576] syzkaller0: entered allmulticast mode [ 57.296483][ T4578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 57.337659][ T4580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 57.480525][ T4585] set_capacity_and_notify: 3 callbacks suppressed [ 57.480539][ T4585] loop1: detected capacity change from 0 to 512 [ 57.510199][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.418: corrupted inode contents [ 57.532009][ T4553] bio_check_eod: 47490 callbacks suppressed [ 57.532025][ T4553] syz.2.409: attempt to access beyond end of device [ 57.532025][ T4553] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.533293][ T4585] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.569067][ T4553] syz.2.409: attempt to access beyond end of device [ 57.569067][ T4553] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.578412][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 57.578429][ C1] EXT4-fs (loop1): initial error at time 1771015805: ext4_do_update_inode:5569: inode 15 [ 57.578457][ C1] EXT4-fs (loop1): last error at time 1771015805: ext4_do_update_inode:5569: inode 15 [ 57.605129][ T4585] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 57.608809][ T4553] syz.2.409: attempt to access beyond end of device [ 57.608809][ T4553] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.640245][ T4553] syz.2.409: attempt to access beyond end of device [ 57.640245][ T4553] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.641177][ T4585] loop1: lost filesystem error report for type 5 error -117 [ 57.654158][ T4553] syz.2.409: attempt to access beyond end of device [ 57.654158][ T4553] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 57.666418][ T4585] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.418: corrupted inode contents [ 57.699826][ T4585] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.699993][ T4585] EXT4-fs error (device loop1): ext4_evict_inode:303: inode #15: comm syz.1.418: mark_inode_dirty error [ 57.725206][ T4585] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.725402][ T4585] EXT4-fs (loop1): 1 orphan inode deleted [ 57.740944][ T4585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.753622][ T4585] netlink: 'syz.1.418': attribute type 1 has an invalid length. [ 57.765473][ T4561] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.845056][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.028798][ T4622] loop1: detected capacity change from 0 to 128 [ 58.047560][ T4622] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.279607][ T4630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.408310][ T4641] loop1: detected capacity change from 0 to 512 [ 58.421953][ T4641] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 58.446608][ T4641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 58.461377][ T4641] System zones: 1-12 [ 58.468705][ T4641] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.432: corrupted in-inode xattr: e_value size too large [ 58.491262][ T4641] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.491831][ T4641] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.432: couldn't read orphan inode 15 (err -117) [ 58.512717][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.512752][ C1] EXT4-fs (loop1): initial error at time 1771015806: ext4_iget_extra_inode:5025: inode 15 [ 58.512789][ C1] EXT4-fs (loop1): last error at time 1771015806: ext4_iget_extra_inode:5025: inode 15 [ 58.548504][ T4641] loop1: lost filesystem error report for type 5 error -117 [ 58.562361][ T4641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.666534][ T4648] program syz.4.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.686647][ T4653] loop3: detected capacity change from 0 to 128 [ 58.709503][ T4653] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 58.711777][ T4656] netlink: 80 bytes leftover after parsing attributes in process `syz.0.436'. [ 58.883961][ T4658] loop2: detected capacity change from 0 to 8192 [ 58.978424][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 59.026866][ T4672] loop4: detected capacity change from 0 to 128 [ 59.111717][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.140018][ T4674] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.502497][ T4665] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 59.517925][ T4683] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.536391][ T4665] SELinux: failed to load policy [ 59.624134][ T4683] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.792243][ T4683] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.979116][ T4683] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.077703][ T4696] loop0: detected capacity change from 0 to 128 [ 60.119113][ T4696] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 60.131562][ T4700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 60.145242][ T4696] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 60.157368][ T4696] FAT-fs (loop0): Filesystem has been set read-only [ 60.177660][ T4696] syz.0.451: attempt to access beyond end of device [ 60.177660][ T4696] loop0: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 60.211750][ T4696] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 60.227575][ T4696] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 60.237311][ T4704] syz.0.451: attempt to access beyond end of device [ 60.237311][ T4704] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 60.261397][ T4696] syz.0.451: attempt to access beyond end of device [ 60.261397][ T4696] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 60.293340][ T4695] syz.0.451: attempt to access beyond end of device [ 60.293340][ T4695] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 60.308585][ T4704] syz.0.451: attempt to access beyond end of device [ 60.308585][ T4704] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 60.366223][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.374916][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.396022][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.413596][ T4711] loop1: detected capacity change from 0 to 512 [ 60.435484][ T30] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.464128][ T4711] EXT4-fs: Ignoring removed bh option [ 60.488798][ T4711] EXT4-fs: Ignoring removed oldalloc option [ 60.501584][ T4713] loop4: detected capacity change from 0 to 128 [ 60.508259][ T4711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.512735][ T4713] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 60.545417][ T4711] EXT4-fs (loop1): 1 truncate cleaned up [ 60.581773][ T4711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.602815][ T4716] team0 (unregistering): Port device team_slave_0 removed [ 60.612244][ T4716] team0 (unregistering): Port device team_slave_1 removed [ 60.937481][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.007517][ T4718] loop2: detected capacity change from 0 to 164 [ 61.032169][ T4718] iso9660: Unknown parameter '18446744073709551615' [ 61.144698][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 61.153898][ T4722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.169647][ T4722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.226904][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 61.226919][ T28] audit: type=1326 audit(1771015809.425:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.260083][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.284487][ T4736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.293123][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.307544][ T28] audit: type=1326 audit(1771015809.425:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.331794][ T28] audit: type=1326 audit(1771015809.425:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.355414][ T28] audit: type=1326 audit(1771015809.425:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.379551][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.392805][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.401381][ T28] audit: type=1326 audit(1771015809.425:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.443152][ T28] audit: type=1326 audit(1771015809.425:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.468682][ T28] audit: type=1326 audit(1771015809.425:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.492559][ T28] audit: type=1326 audit(1771015809.425:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.516022][ T28] audit: type=1326 audit(1771015809.425:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 61.540226][ T28] audit: type=1326 audit(1771015809.425:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4735 comm="syz.2.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19286ebf79 code=0x7ffc0000 [ 62.175203][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 62.636470][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.652116][ T4787] netlink: 12 bytes leftover after parsing attributes in process `syz.1.481'. [ 62.686241][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.728735][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.738628][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.747997][ T4784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.763317][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.778227][ T4784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.790410][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.010398][ T4793] FAULT_INJECTION: forcing a failure. [ 63.010398][ T4793] name failslab, interval 1, probability 0, space 0, times 1 [ 63.023312][ T4793] CPU: 1 UID: 0 PID: 4793 Comm: syz.0.484 Not tainted syzkaller #0 PREEMPT(full) [ 63.023338][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 63.023351][ T4793] Call Trace: [ 63.023359][ T4793] [ 63.023368][ T4793] __dump_stack+0x1d/0x30 [ 63.023450][ T4793] dump_stack_lvl+0x95/0xd0 [ 63.023544][ T4793] dump_stack+0x15/0x1b [ 63.023562][ T4793] should_fail_ex+0x263/0x280 [ 63.023582][ T4793] ? hid_allocate_device+0x2f/0x1b0 [ 63.023611][ T4793] should_failslab+0x8c/0xb0 [ 63.023687][ T4793] __kmalloc_cache_noprof+0x5f/0x400 [ 63.023709][ T4793] hid_allocate_device+0x2f/0x1b0 [ 63.023741][ T4793] uhid_dev_create2+0xc0/0x440 [ 63.023811][ T4793] uhid_char_write+0x1bf/0x650 [ 63.023831][ T4793] ? __pfx_uhid_char_write+0x10/0x10 [ 63.023854][ T4793] vfs_write+0x269/0x9f0 [ 63.023886][ T4793] ? __rcu_read_unlock+0x4e/0x70 [ 63.023908][ T4793] ? __fget_files+0x184/0x1c0 [ 63.023982][ T4793] ksys_write+0xdc/0x1a0 [ 63.024014][ T4793] __x64_sys_write+0x40/0x50 [ 63.024046][ T4793] x64_sys_call+0x27e1/0x3020 [ 63.024108][ T4793] do_syscall_64+0x12c/0x370 [ 63.024134][ T4793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.024156][ T4793] RIP: 0033:0x7fb93fafbf79 [ 63.024173][ T4793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.024227][ T4793] RSP: 002b:00007fb93e557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.024249][ T4793] RAX: ffffffffffffffda RBX: 00007fb93fd75fa0 RCX: 00007fb93fafbf79 [ 63.024289][ T4793] RDX: 0000000000000119 RSI: 00002000000007c0 RDI: 0000000000000004 [ 63.024302][ T4793] RBP: 00007fb93e557090 R08: 0000000000000000 R09: 0000000000000000 [ 63.024400][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.024409][ T4793] R13: 00007fb93fd76038 R14: 00007fb93fd75fa0 R15: 00007ffecbf057c8 [ 63.024466][ T4793] [ 63.941791][ T4814] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.047814][ T4814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.490'. [ 64.099706][ T4816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4816 comm=syz.1.490 [ 64.469033][ T4825] loop2: detected capacity change from 0 to 512 [ 64.495318][ T4822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 64.516333][ T4825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.529985][ T4825] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.550343][ T4822] syz.3.492 (4822) used greatest stack depth: 9288 bytes left [ 64.595367][ T4825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.608804][ T4831] loop3: detected capacity change from 0 to 512 [ 64.619786][ T4825] syz.2.493 (4825) used greatest stack depth: 9224 bytes left [ 64.687460][ T4831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.701371][ T4831] ext4 filesystem being mounted at /91/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.809346][ T4843] syzkaller0: entered promiscuous mode [ 64.814038][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.815069][ T4843] syzkaller0: entered allmulticast mode [ 64.924431][ T4849] loop3: detected capacity change from 0 to 128 [ 64.934823][ T4849] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 64.957304][ T4849] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 64.966009][ T4849] FAT-fs (loop3): Filesystem has been set read-only [ 64.973025][ T4849] bio_check_eod: 10990 callbacks suppressed [ 64.973036][ T4849] syz.3.501: attempt to access beyond end of device [ 64.973036][ T4849] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 64.994164][ T4849] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 65.002125][ T4849] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 65.010345][ T4849] syz.3.501: attempt to access beyond end of device [ 65.010345][ T4849] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.026610][ T4856] syz.3.501: attempt to access beyond end of device [ 65.026610][ T4856] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.040968][ T4849] syz.3.501: attempt to access beyond end of device [ 65.040968][ T4849] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.095038][ T4849] syz.3.501: attempt to access beyond end of device [ 65.095038][ T4849] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.109703][ T4858] loop2: detected capacity change from 0 to 2048 [ 65.124095][ T4849] syz.3.501: attempt to access beyond end of device [ 65.124095][ T4849] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.138079][ T4849] syz.3.501: attempt to access beyond end of device [ 65.138079][ T4849] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.165736][ T4856] syz.3.501: attempt to access beyond end of device [ 65.165736][ T4856] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.180332][ T4858] loop2: p1 < > p2 p3 < p5 > [ 65.185055][ T4858] loop2: partition table partially beyond EOD, truncated [ 65.192499][ T4858] loop2: p1 start 4278190080 is beyond EOD, truncated [ 65.199297][ T4858] loop2: p2 start 16908800 is beyond EOD, truncated [ 65.203104][ T4856] syz.3.501: attempt to access beyond end of device [ 65.203104][ T4856] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.218558][ T4858] loop2: p5 start 16908800 is beyond EOD, [ 65.220141][ T4856] syz.3.501: attempt to access beyond end of device [ 65.220141][ T4856] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 65.221303][ T4858] truncated [ 65.255229][ T4858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.452025][ T4881] program syz.2.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.553221][ T4887] 9p: Bad value for 'wfdno' [ 65.807466][ T4898] loop0: detected capacity change from 0 to 8192 [ 65.855346][ T4905] FAULT_INJECTION: forcing a failure. [ 65.855346][ T4905] name failslab, interval 1, probability 0, space 0, times 0 [ 65.873413][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: syz.4.523 Not tainted syzkaller #0 PREEMPT(full) [ 65.873450][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 65.873461][ T4905] Call Trace: [ 65.873512][ T4905] [ 65.873521][ T4905] __dump_stack+0x1d/0x30 [ 65.873544][ T4905] dump_stack_lvl+0x95/0xd0 [ 65.873581][ T4905] dump_stack+0x15/0x1b [ 65.873599][ T4905] should_fail_ex+0x263/0x280 [ 65.873688][ T4905] should_failslab+0x8c/0xb0 [ 65.873782][ T4905] __kmalloc_cache_node_noprof+0x6b/0x470 [ 65.873815][ T4905] ? __get_vm_area_node+0x106/0x1d0 [ 65.873841][ T4905] __get_vm_area_node+0x106/0x1d0 [ 65.873934][ T4905] __vmalloc_node_range_noprof+0x291/0x12b0 [ 65.873954][ T4905] ? sel_write_load+0x156/0x380 [ 65.873974][ T4905] ? __rcu_read_unlock+0x4e/0x70 [ 65.873992][ T4905] ? avc_has_perm_noaudit+0xab/0x130 [ 65.874028][ T4905] ? sel_write_load+0x156/0x380 [ 65.874071][ T4905] vmalloc_noprof+0x82/0xb0 [ 65.874093][ T4905] ? sel_write_load+0x156/0x380 [ 65.874113][ T4905] sel_write_load+0x156/0x380 [ 65.874134][ T4905] ? __pfx_sel_write_load+0x10/0x10 [ 65.874155][ T4905] vfs_write+0x269/0x9f0 [ 65.874187][ T4905] ? __rcu_read_unlock+0x4e/0x70 [ 65.874209][ T4905] ? __fget_files+0x184/0x1c0 [ 65.874230][ T4905] ? mutex_lock+0x57/0x90 [ 65.874254][ T4905] ksys_write+0xdc/0x1a0 [ 65.874368][ T4905] __x64_sys_write+0x40/0x50 [ 65.874399][ T4905] x64_sys_call+0x27e1/0x3020 [ 65.874428][ T4905] do_syscall_64+0x12c/0x370 [ 65.874462][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.874518][ T4905] RIP: 0033:0x7f9dc4a5bf79 [ 65.874535][ T4905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.874550][ T4905] RSP: 002b:00007f9dc34af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 65.874566][ T4905] RAX: ffffffffffffffda RBX: 00007f9dc4cd5fa0 RCX: 00007f9dc4a5bf79 [ 65.874624][ T4905] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000004 [ 65.874638][ T4905] RBP: 00007f9dc34af090 R08: 0000000000000000 R09: 0000000000000000 [ 65.874653][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.874727][ T4905] R13: 00007f9dc4cd6038 R14: 00007f9dc4cd5fa0 R15: 00007ffca48ecb38 [ 65.874751][ T4905] [ 65.877359][ T4905] syz.4.523: vmalloc error: size 16, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 66.118817][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: syz.4.523 Not tainted syzkaller #0 PREEMPT(full) [ 66.118843][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 66.118855][ T4905] Call Trace: [ 66.118860][ T4905] [ 66.118867][ T4905] __dump_stack+0x1d/0x30 [ 66.118906][ T4905] dump_stack_lvl+0x95/0xd0 [ 66.118927][ T4905] dump_stack+0x15/0x1b [ 66.118956][ T4905] warn_alloc+0x145/0x1c0 [ 66.118978][ T4905] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 66.119008][ T4905] ? __rcu_read_unlock+0x4e/0x70 [ 66.119025][ T4905] ? avc_has_perm_noaudit+0xab/0x130 [ 66.119122][ T4905] ? sel_write_load+0x156/0x380 [ 66.119140][ T4905] vmalloc_noprof+0x82/0xb0 [ 66.119157][ T4905] ? sel_write_load+0x156/0x380 [ 66.119226][ T4905] sel_write_load+0x156/0x380 [ 66.119248][ T4905] ? __pfx_sel_write_load+0x10/0x10 [ 66.119267][ T4905] vfs_write+0x269/0x9f0 [ 66.119291][ T4905] ? __rcu_read_unlock+0x4e/0x70 [ 66.119307][ T4905] ? __fget_files+0x184/0x1c0 [ 66.119360][ T4905] ? mutex_lock+0x57/0x90 [ 66.119412][ T4905] ksys_write+0xdc/0x1a0 [ 66.119438][ T4905] __x64_sys_write+0x40/0x50 [ 66.119462][ T4905] x64_sys_call+0x27e1/0x3020 [ 66.119565][ T4905] do_syscall_64+0x12c/0x370 [ 66.119590][ T4905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.119609][ T4905] RIP: 0033:0x7f9dc4a5bf79 [ 66.119623][ T4905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.119701][ T4905] RSP: 002b:00007f9dc34af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 66.119718][ T4905] RAX: ffffffffffffffda RBX: 00007f9dc4cd5fa0 RCX: 00007f9dc4a5bf79 [ 66.119790][ T4905] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000004 [ 66.119819][ T4905] RBP: 00007f9dc34af090 R08: 0000000000000000 R09: 0000000000000000 [ 66.119830][ T4905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.119841][ T4905] R13: 00007f9dc4cd6038 R14: 00007f9dc4cd5fa0 R15: 00007ffca48ecb38 [ 66.119860][ T4905] [ 66.119906][ T4905] Mem-Info: [ 66.317769][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 66.317830][ T28] audit: type=1400 audit(1771015814.525:1074): avc: denied { read } for pid=4915 comm="syz.3.526" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.320543][ T4905] active_anon:8085 inactive_anon:0 isolated_anon:0 [ 66.320543][ T4905] active_file:24202 inactive_file:2612 isolated_file:0 [ 66.320543][ T4905] unevictable:1 dirty:311 writeback:0 [ 66.320543][ T4905] slab_reclaimable:3288 slab_unreclaimable:16408 [ 66.320543][ T4905] mapped:29239 shmem:1212 pagetables:3255 [ 66.320543][ T4905] sec_pagetables:0 bounce:0 [ 66.320543][ T4905] kernel_misc_reclaimable:0 [ 66.320543][ T4905] free:1872541 free_pcp:13461 free_cma:0 [ 66.358522][ T28] audit: type=1400 audit(1771015814.565:1075): avc: denied { open } for pid=4915 comm="syz.3.526" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 66.404080][ T4905] Node 0 active_anon:32340kB inactive_anon:0kB active_file:96808kB inactive_file:10448kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:116956kB dirty:1244kB writeback:0kB shmem:4848kB kernel_stack:3488kB pagetables:12904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 66.457710][ T4905] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.488387][ T4905] lowmem_reserve[]: 0 2879 7858 7858 [ 66.494506][ T4905] Node 0 DMA32 free:2945092kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948616kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 66.538118][ T4905] lowmem_reserve[]: 0 0 4978 4978 [ 66.545674][ T4905] Node 0 Normal free:4529968kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32340kB inactive_anon:0kB active_file:96808kB inactive_file:10448kB unevictable:4kB writepending:1244kB zspages:0kB present:5242880kB managed:5098240kB mlocked:4kB bounce:0kB free_pcp:51260kB local_pcp:11272kB free_cma:0kB [ 66.584377][ T4905] lowmem_reserve[]: 0 0 0 0 [ 66.600815][ T4922] program syz.1.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.618702][ T4924] netlink: 52 bytes leftover after parsing attributes in process `syz.0.529'. [ 66.644288][ T4905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.657388][ T4905] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 6*16kB (M) 4*32kB (M) 3*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 2*1024kB (M) 4*2048kB (M) 716*4096kB (M) = 2945092kB [ 66.689739][ T4905] Node 0 Normal: 1584*4kB (UM) 1187*8kB (UM) 446*16kB (UM) 324*32kB (UM) 105*64kB (UME) 77*128kB (UM) 39*256kB (UME) 14*512kB (UM) 9*1024kB (U) 6*2048kB (UE) 1085*4096kB (UM) = 4532728kB [ 66.720899][ T4905] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 66.744893][ T4905] 27991 total pagecache pages [ 66.751559][ T4905] 2 pages in swap cache [ 66.755808][ T4905] Free swap = 124988kB [ 66.810926][ T4905] Total swap = 124996kB [ 66.825283][ T4905] 2097051 pages RAM [ 66.829233][ T4905] 0 pages HighMem/MovableOnly [ 66.863587][ T4905] 81497 pages reserved [ 66.926431][ T4943] tipc: Enabled bearer , priority 0 [ 66.933598][ T4943] syzkaller0: entered promiscuous mode [ 66.939191][ T4943] syzkaller0: entered allmulticast mode [ 66.949779][ T4943] tipc: Resetting bearer [ 66.965770][ T4942] tipc: Resetting bearer [ 66.976823][ T4942] tipc: Disabling bearer [ 67.267213][ T4964] program syz.4.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 67.402504][ T4966] loop4: detected capacity change from 0 to 128 [ 67.411388][ T4966] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 67.630338][ T4974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.647339][ T28] audit: type=1326 audit(1771015815.825:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 67.690721][ T28] audit: type=1326 audit(1771015815.825:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 67.714869][ T4977] FAULT_INJECTION: forcing a failure. [ 67.714869][ T4977] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 67.728248][ T4977] CPU: 1 UID: 0 PID: 4977 Comm: syz.2.547 Not tainted syzkaller #0 PREEMPT(full) [ 67.728277][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 67.728291][ T4977] Call Trace: [ 67.728366][ T4977] [ 67.728373][ T4977] __dump_stack+0x1d/0x30 [ 67.728397][ T4977] dump_stack_lvl+0x95/0xd0 [ 67.728424][ T4977] dump_stack+0x15/0x1b [ 67.728444][ T4977] should_fail_ex+0x263/0x280 [ 67.728490][ T4977] should_fail+0xb/0x20 [ 67.728507][ T4977] should_fail_usercopy+0x1a/0x20 [ 67.728536][ T4977] _copy_to_user+0x20/0xa0 [ 67.728568][ T4977] simple_read_from_buffer+0xb5/0x130 [ 67.728612][ T4977] proc_fail_nth_read+0x10e/0x150 [ 67.728634][ T4977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 67.728730][ T4977] vfs_read+0x1ab/0x7f0 [ 67.728761][ T4977] ? __rcu_read_unlock+0x4e/0x70 [ 67.728784][ T4977] ? __fget_files+0x184/0x1c0 [ 67.728855][ T4977] ? mutex_lock+0x57/0x90 [ 67.728878][ T4977] ksys_read+0xdc/0x1a0 [ 67.728905][ T4977] __x64_sys_read+0x40/0x50 [ 67.728931][ T4977] x64_sys_call+0x2886/0x3020 [ 67.729024][ T4977] do_syscall_64+0x12c/0x370 [ 67.729148][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.729169][ T4977] RIP: 0033:0x7f19286ac84e [ 67.729182][ T4977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 67.729198][ T4977] RSP: 002b:00007f1927125fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 67.729215][ T4977] RAX: ffffffffffffffda RBX: 00007f19271266c0 RCX: 00007f19286ac84e [ 67.729227][ T4977] RDX: 000000000000000f RSI: 00007f19271260a0 RDI: 0000000000000003 [ 67.729286][ T4977] RBP: 00007f1927126090 R08: 0000000000000000 R09: 0000000000000000 [ 67.729297][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.729308][ T4977] R13: 00007f1928966128 R14: 00007f1928966090 R15: 00007fff6fda1c28 [ 67.729326][ T4977] [ 67.920890][ T28] audit: type=1326 audit(1771015815.825:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 67.952260][ T4978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.962035][ T4978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.970683][ T28] audit: type=1326 audit(1771015815.825:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 68.012977][ T28] audit: type=1326 audit(1771015815.835:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 68.037402][ T4980] tipc: Started in network mode [ 68.044516][ T28] audit: type=1326 audit(1771015815.835:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 68.046659][ T4980] tipc: Node identity fa6010895b29, cluster identity 4711 [ 68.068635][ T28] audit: type=1326 audit(1771015815.835:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 68.091040][ T4980] tipc: Enabled bearer , priority 0 [ 68.102249][ T28] audit: type=1326 audit(1771015815.835:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4973 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 68.109590][ T4982] syzkaller0: entered promiscuous mode [ 68.134369][ T4982] syzkaller0: entered allmulticast mode [ 68.148897][ T4980] tipc: Resetting bearer [ 68.177606][ T4979] tipc: Resetting bearer [ 68.185318][ T4979] tipc: Disabling bearer [ 68.267473][ T4994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.276232][ T4994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.308596][ T4999] loop3: detected capacity change from 0 to 128 [ 68.355151][ T4999] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.407879][ T5005] loop2: detected capacity change from 0 to 128 [ 68.417454][ T5005] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 68.429482][ T5006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.557'. [ 68.442154][ T5006] syz_tun: entered allmulticast mode [ 68.450227][ T5005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 68.458123][ T5005] FAT-fs (loop2): Filesystem has been set read-only [ 68.464962][ T5005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 68.472908][ T5005] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 68.635003][ T5000] syz_tun: left allmulticast mode [ 68.810660][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'. [ 68.824111][ T5014] program syz.0.562 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.910129][ T5017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.981693][ T5010] loop4: detected capacity change from 0 to 164 [ 69.000623][ T5010] iso9660: Unknown parameter '18446744073709551615' [ 69.159897][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 69.185187][ T5031] loop0: detected capacity change from 0 to 128 [ 69.203720][ T5031] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.311006][ T5038] ext4: Unknown parameter 'dont_appraise' [ 69.351149][ T5038] Set syz1 is full, maxelem 2 reached [ 69.375358][ T5038] EXT4-fs: Ignoring removed nobh option [ 69.386693][ T5038] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.399963][ T5040] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.423185][ T5038] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.439214][ T5040] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.449977][ T5040] FAT-fs (loop4): Filesystem has been set read-only [ 69.457167][ T5040] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.476858][ T5040] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 69.487445][ T5045] set_capacity_and_notify: 3 callbacks suppressed [ 69.487461][ T5045] loop2: detected capacity change from 0 to 128 [ 69.510435][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.523046][ T5045] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 69.534969][ T5045] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.546839][ T5045] FAT-fs (loop2): Filesystem has been set read-only [ 69.560506][ T5045] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.568611][ T5045] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 69.628526][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.733478][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.782401][ T5061] loop3: detected capacity change from 0 to 512 [ 69.887423][ T5061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.913890][ T5061] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.981807][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.990999][ T5040] bio_check_eod: 48132 callbacks suppressed [ 69.991010][ T5040] syz.4.573: attempt to access beyond end of device [ 69.991010][ T5040] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.010907][ T5045] syz.2.574: attempt to access beyond end of device [ 70.010907][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.025785][ T5045] syz.2.574: attempt to access beyond end of device [ 70.025785][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.036615][ T5040] syz.4.573: attempt to access beyond end of device [ 70.036615][ T5040] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.050174][ T5045] syz.2.574: attempt to access beyond end of device [ 70.050174][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.067362][ T5045] syz.2.574: attempt to access beyond end of device [ 70.067362][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.072737][ T5040] syz.4.573: attempt to access beyond end of device [ 70.072737][ T5040] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.081488][ T5045] syz.2.574: attempt to access beyond end of device [ 70.081488][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.100569][ T5055] loop1: detected capacity change from 0 to 164 [ 70.108657][ T5045] syz.2.574: attempt to access beyond end of device [ 70.108657][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.108704][ T5045] syz.2.574: attempt to access beyond end of device [ 70.108704][ T5045] loop2: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 70.172021][ T5055] iso9660: Unknown parameter '18446744073709551615' [ 70.259273][ T5070] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 70.369111][ T5081] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 70.392004][ T5076] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.394068][ T5070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.580'. [ 70.424740][ T5076] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 70.486553][ T5089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'. [ 70.488604][ T5070] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 70.504440][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 70.518568][ T5081] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.529571][ T5091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.583'. [ 70.531002][ T5081] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 70.554297][ T5091] bond1: (slave bridge0): Enslaving as an active interface with a down link [ 70.587392][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.586'. [ 70.604914][ T5081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.583'. [ 70.688954][ T5104] loop4: detected capacity change from 0 to 128 [ 70.699443][ T5104] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 70.716398][ T5104] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 70.724603][ T5104] FAT-fs (loop4): Filesystem has been set read-only [ 70.731410][ T5104] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 70.739310][ T5104] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 71.393057][ T5114] loop2: detected capacity change from 0 to 512 [ 71.401872][ T5114] msdos: Unknown parameter '"GÂR¿£oܶz Q&ñë@PÐ{CÂ5—ùÌù¢õ¼ßrbÁ „è®K+t' [ 71.574900][ T5110] loop1: detected capacity change from 0 to 164 [ 71.585459][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 71.585475][ T28] audit: type=1400 audit(1771015819.795:1217): avc: denied { create } for pid=5111 comm="syz.2.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 71.593494][ T5110] iso9660: Unknown parameter '18446744073709551615' [ 71.677727][ T5123] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 71.703240][ T5123] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 71.714743][ T5123] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 71.731390][ T5127] program syz.1.597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.750969][ T5128] netlink: 20 bytes leftover after parsing attributes in process `syz.4.596'. [ 71.783695][ T5128] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 71.814278][ T5123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.596'. [ 71.830992][ T5117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.841904][ T5117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.902743][ T5140] netem: change failed [ 71.920749][ T28] audit: type=1400 audit(1771015820.125:1218): avc: denied { create } for pid=5139 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.940984][ T5145] loop4: detected capacity change from 0 to 512 [ 71.953912][ T5145] EXT4-fs: Ignoring removed bh option [ 71.961221][ T28] audit: type=1400 audit(1771015820.125:1219): avc: denied { connect } for pid=5139 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.988072][ T28] audit: type=1400 audit(1771015820.125:1220): avc: denied { write } for pid=5139 comm="syz.1.604" path="socket:[10683]" dev="sockfs" ino=10683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 71.998810][ T5145] EXT4-fs: Ignoring removed oldalloc option [ 72.012466][ T28] audit: type=1400 audit(1771015820.195:1221): avc: denied { ioctl } for pid=5139 comm="syz.1.604" path="socket:[10683]" dev="sockfs" ino=10683 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.042793][ T28] audit: type=1400 audit(1771015820.195:1222): avc: denied { connect } for pid=5139 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.063356][ T5145] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.074098][ T28] audit: type=1400 audit(1771015820.195:1223): avc: denied { write } for pid=5139 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.095622][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 72.110068][ T5145] EXT4-fs (loop4): 1 truncate cleaned up [ 72.110159][ T28] audit: type=1400 audit(1771015820.295:1224): avc: denied { read } for pid=5139 comm="syz.1.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 72.117344][ T5145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.199449][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.227934][ T5154] loop4: detected capacity change from 0 to 128 [ 72.249699][ T5154] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 72.322498][ T5164] program syz.2.610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.581953][ T5182] loop0: detected capacity change from 0 to 512 [ 72.588733][ T5182] EXT4-fs: Ignoring removed bh option [ 72.606635][ T5182] EXT4-fs: Ignoring removed oldalloc option [ 72.614940][ T5182] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 72.638572][ T5185] FAULT_INJECTION: forcing a failure. [ 72.638572][ T5185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.655326][ T5182] EXT4-fs (loop0): 1 truncate cleaned up [ 72.665382][ T5182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.673095][ T5165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.677764][ T5185] CPU: 0 UID: 0 PID: 5185 Comm: syz.2.617 Not tainted syzkaller #0 PREEMPT(full) [ 72.677896][ T5185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 72.678017][ T5185] Call Trace: [ 72.678037][ T5185] [ 72.678058][ T5185] __dump_stack+0x1d/0x30 [ 72.678137][ T5185] dump_stack_lvl+0x95/0xd0 [ 72.678238][ T5185] dump_stack+0x15/0x1b [ 72.678310][ T5185] should_fail_ex+0x263/0x280 [ 72.678388][ T5185] should_fail+0xb/0x20 [ 72.678461][ T5185] should_fail_usercopy+0x1a/0x20 [ 72.678561][ T5185] _copy_from_user+0x1c/0xb0 [ 72.678646][ T5185] ___sys_sendmsg+0xc1/0x1e0 [ 72.678754][ T5185] __x64_sys_sendmsg+0xd4/0x160 [ 72.678829][ T5185] x64_sys_call+0x194c/0x3020 [ 72.678902][ T5185] do_syscall_64+0x12c/0x370 [ 72.678994][ T5185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.679130][ T5185] RIP: 0033:0x7f19286ebf79 [ 72.679182][ T5185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.679249][ T5185] RSP: 002b:00007f1927147028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.679387][ T5185] RAX: ffffffffffffffda RBX: 00007f1928965fa0 RCX: 00007f19286ebf79 [ 72.679429][ T5185] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 72.679469][ T5185] RBP: 00007f1927147090 R08: 0000000000000000 R09: 0000000000000000 [ 72.679508][ T5185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.679546][ T5185] R13: 00007f1928966038 R14: 00007f1928965fa0 R15: 00007fff6fda1c28 [ 72.679629][ T5185] [ 72.862758][ T5165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.957132][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.988882][ T5192] loop3: detected capacity change from 0 to 128 [ 73.011127][ T5192] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 73.053356][ T5196] program syz.1.622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.136025][ T28] audit: type=1400 audit(1771015821.345:1225): avc: denied { view } for pid=5199 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.202134][ T5214] tipc: Started in network mode [ 73.212467][ T5214] tipc: Node identity aed2d00a4f53, cluster identity 4711 [ 73.219742][ T5214] tipc: Enabled bearer , priority 0 [ 73.229062][ T5214] tipc: Resetting bearer [ 73.259614][ T5219] EXT4-fs: Ignoring removed bh option [ 73.268151][ T5219] EXT4-fs: Ignoring removed oldalloc option [ 73.277646][ T5219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.292123][ T5219] EXT4-fs (loop2): 1 truncate cleaned up [ 73.300832][ T5219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.641712][ T5226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 73.831663][ T50] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.847193][ T50] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.857703][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.867301][ T50] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.884924][ T28] audit: type=1326 audit(1771015822.095:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5229 comm="syz.1.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489720bf79 code=0x7ffc0000 [ 73.890671][ T50] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.928923][ T5233] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 73.942601][ T5230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.964493][ T5234] syzkaller0: entered promiscuous mode [ 73.972433][ T5234] syzkaller0: entered allmulticast mode [ 74.005692][ T5237] tipc: Enabling of bearer rejected, already enabled [ 74.045595][ T5240] program syz.0.636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.103572][ T5244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.173981][ T5247] syzkaller0: entered promiscuous mode [ 74.179529][ T5247] syzkaller0: entered allmulticast mode [ 74.211841][ T5254] EXT4-fs: Ignoring removed bh option [ 74.217282][ T5254] EXT4-fs: Ignoring removed oldalloc option [ 74.231936][ T5254] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.243155][ T990] tipc: Node number set to 3783381002 [ 74.255556][ T5254] EXT4-fs (loop2): 1 truncate cleaned up [ 74.261797][ T5254] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.340860][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.397338][ T5272] syz.2.648 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.440254][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 74.449376][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 74.462711][ T5272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 74.471604][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 74.522891][ T5277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.633582][ T5282] program syz.2.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 74.639791][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.664958][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.735227][ T5288] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 74.983252][ T5295] set_capacity_and_notify: 3 callbacks suppressed [ 74.983345][ T5295] loop2: detected capacity change from 0 to 512 [ 74.996899][ T5295] EXT4-fs: Ignoring removed bh option [ 75.002696][ T5295] EXT4-fs: Ignoring removed oldalloc option [ 75.009347][ T5295] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.022908][ T5295] EXT4-fs (loop2): 1 truncate cleaned up [ 75.030670][ T5295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.061019][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.126141][ T5300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 75.178121][ T5304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.217468][ T5308] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 75.253389][ T5308] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.264639][ T5308] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 75.311474][ T5308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.663'. [ 75.331818][ T5308] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 75.345019][ T5317] netlink: 'syz.1.665': attribute type 1 has an invalid length. [ 75.396917][ T5317] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 75.414236][ T5317] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 75.452440][ T5327] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 75.454197][ T5329] loop3: detected capacity change from 0 to 128 [ 75.476801][ T5329] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 75.488937][ T5329] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 75.496995][ T5329] FAT-fs (loop3): Filesystem has been set read-only [ 75.503755][ T5329] bio_check_eod: 32450 callbacks suppressed [ 75.503769][ T5329] syz.3.669: attempt to access beyond end of device [ 75.503769][ T5329] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 75.525263][ T5329] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 75.533783][ T5329] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 75.542943][ T5329] syz.3.669: attempt to access beyond end of device [ 75.542943][ T5329] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.572073][ T5333] syz.3.669: attempt to access beyond end of device [ 75.572073][ T5333] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.586126][ T5329] syz.3.669: attempt to access beyond end of device [ 75.586126][ T5329] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.600192][ T5333] syz.3.669: attempt to access beyond end of device [ 75.600192][ T5333] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.614381][ T5333] syz.3.669: attempt to access beyond end of device [ 75.614381][ T5333] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.628632][ T5329] syz.3.669: attempt to access beyond end of device [ 75.628632][ T5329] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.644434][ T5333] syz.3.669: attempt to access beyond end of device [ 75.644434][ T5333] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.659039][ T5329] syz.3.669: attempt to access beyond end of device [ 75.659039][ T5329] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 75.673833][ T5328] syz.3.669: attempt to access beyond end of device [ 75.673833][ T5328] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 76.129274][ T5351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 76.409356][ T5381] FAULT_INJECTION: forcing a failure. [ 76.409356][ T5381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.440333][ T5381] CPU: 0 UID: 0 PID: 5381 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(full) [ 76.440358][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 76.440371][ T5381] Call Trace: [ 76.440379][ T5381] [ 76.440388][ T5381] __dump_stack+0x1d/0x30 [ 76.440416][ T5381] dump_stack_lvl+0x95/0xd0 [ 76.440501][ T5381] dump_stack+0x15/0x1b [ 76.440523][ T5381] should_fail_ex+0x263/0x280 [ 76.440548][ T5381] should_fail+0xb/0x20 [ 76.440569][ T5381] should_fail_usercopy+0x1a/0x20 [ 76.440619][ T5381] _copy_to_user+0x20/0xa0 [ 76.440649][ T5381] simple_read_from_buffer+0xb5/0x130 [ 76.440683][ T5381] proc_fail_nth_read+0x10e/0x150 [ 76.440708][ T5381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.440789][ T5381] vfs_read+0x1ab/0x7f0 [ 76.440828][ T5381] ? __rcu_read_unlock+0x4e/0x70 [ 76.440851][ T5381] ? __fget_files+0x184/0x1c0 [ 76.440869][ T5381] ? mutex_lock+0x57/0x90 [ 76.440888][ T5381] ksys_read+0xdc/0x1a0 [ 76.440919][ T5381] __x64_sys_read+0x40/0x50 [ 76.441029][ T5381] x64_sys_call+0x2886/0x3020 [ 76.441053][ T5381] do_syscall_64+0x12c/0x370 [ 76.441078][ T5381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.441097][ T5381] RIP: 0033:0x7fb93fabc84e [ 76.441160][ T5381] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 76.441176][ T5381] RSP: 002b:00007fb93e556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.441193][ T5381] RAX: ffffffffffffffda RBX: 00007fb93e5576c0 RCX: 00007fb93fabc84e [ 76.441205][ T5381] RDX: 000000000000000f RSI: 00007fb93e5570a0 RDI: 0000000000000005 [ 76.441294][ T5381] RBP: 00007fb93e557090 R08: 0000000000000000 R09: 0000000000000000 [ 76.441305][ T5381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.441316][ T5381] R13: 00007fb93fd76038 R14: 00007fb93fd75fa0 R15: 00007ffecbf057c8 [ 76.441333][ T5381] [ 76.444346][ T5386] loop3: detected capacity change from 0 to 128 [ 76.479874][ T5374] syzkaller0: entered promiscuous mode [ 76.487196][ T5386] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.491939][ T5374] syzkaller0: entered allmulticast mode [ 76.512629][ T5386] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.600501][ T5387] tipc: Enabled bearer , priority 0 [ 76.682497][ T5390] syzkaller0: entered promiscuous mode [ 76.688062][ T5390] syzkaller0: entered allmulticast mode [ 76.702812][ T28] kauditd_printk_skb: 443 callbacks suppressed [ 76.702827][ T28] audit: type=1326 audit(1771015824.916:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.735424][ T3543] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.750585][ T28] audit: type=1326 audit(1771015824.916:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.774364][ T28] audit: type=1326 audit(1771015824.936:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.809583][ T28] audit: type=1326 audit(1771015824.936:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.833109][ T28] audit: type=1326 audit(1771015824.936:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.836550][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 76.860930][ T28] audit: type=1326 audit(1771015824.936:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.887493][ T28] audit: type=1326 audit(1771015824.936:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.889501][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 76.914355][ T28] audit: type=1326 audit(1771015824.936:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.941408][ T28] audit: type=1326 audit(1771015824.936:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 76.969057][ T28] audit: type=1326 audit(1771015824.936:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5392 comm="syz.0.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93fafbf79 code=0x7ffc0000 [ 77.003440][ T5393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.024428][ T5379] tipc: Resetting bearer [ 77.035023][ T5378] tipc: Resetting bearer [ 77.043732][ T5378] tipc: Disabling bearer [ 77.111087][ T5410] loop3: detected capacity change from 0 to 128 [ 77.128746][ T5410] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 77.163288][ T5410] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 77.174966][ T5410] FAT-fs (loop3): Filesystem has been set read-only [ 77.202056][ T5410] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 77.213911][ T5410] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 77.364576][ T5428] loop4: detected capacity change from 0 to 1764 [ 77.383539][ T5428] iso9660: Bad value for 'uid' [ 77.396952][ T5428] iso9660: Bad value for 'uid' [ 77.775366][ T5431] loop2: detected capacity change from 0 to 164 [ 77.817204][ T5431] iso9660: Unknown parameter '18446744073709551615' [ 77.878246][ T5443] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 77.913164][ T5443] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.945788][ T5448] loop4: detected capacity change from 0 to 1024 [ 78.006260][ T5448] EXT4-fs: inline encryption not supported [ 78.025572][ T5443] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.042362][ T5443] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.084864][ T5448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.121457][ T5443] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.133746][ T5443] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.151468][ T5461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.160296][ T5461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.169286][ T5461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.179443][ T5461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.225830][ T5468] loop1: detected capacity change from 0 to 512 [ 78.232477][ T5468] EXT4-fs: inline encryption not supported [ 78.239508][ T5443] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.256703][ T5443] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.269723][ T5468] EXT4-fs (loop1): 1 orphan inode deleted [ 78.275927][ T5468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.288885][ T5468] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.303891][ T5471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.350779][ T36] EXT4-fs error (device loop1): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 1 [ 78.385198][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.393671][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.414039][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.426846][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.429570][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.444217][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.453044][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.464539][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.472879][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.511527][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.540469][ T5478] process 'syz.1.711' launched '/dev/fd/6' with NULL argv: empty string added [ 78.557802][ T5480] tipc: Started in network mode [ 78.562875][ T5480] tipc: Node identity 921769bea29b, cluster identity 4711 [ 78.571718][ T5480] tipc: Enabled bearer , priority 0 [ 78.581337][ T5480] tipc: Resetting bearer [ 78.626762][ T5486] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 78.626780][ T5488] loop0: detected capacity change from 0 to 128 [ 78.641561][ T5488] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 78.653977][ T5488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 78.662125][ T5488] FAT-fs (loop0): Filesystem has been set read-only [ 78.668868][ T5488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 78.688682][ T5490] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 78.698965][ T5488] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 78.710913][ T5490] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 78.740619][ T5486] __nla_validate_parse: 4 callbacks suppressed [ 78.740638][ T5486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.716'. [ 78.775682][ T5486] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 80.470459][ T990] tipc: Node number set to 814508478 [ 80.563046][ T5488] bio_check_eod: 48396 callbacks suppressed [ 80.563060][ T5488] syz.0.715: attempt to access beyond end of device [ 80.563060][ T5488] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 81.353349][ T5488] syz.0.715: attempt to access beyond end of device [ 81.353349][ T5488] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 82.415833][ T5488] syz.0.715: attempt to access beyond end of device [ 82.415833][ T5488] loop0: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 82.649885][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 82.649903][ T28] audit: type=1400 audit(1771015830.836:1848): avc: denied { read } for pid=5521 comm="syz.4.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 82.816482][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.827956][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.837828][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.847569][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.192394][ T5545] loop0: detected capacity change from 0 to 164 [ 83.212514][ T5545] iso9660: Unknown parameter '18446744073709551615' [ 83.258099][ T5550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.275403][ T5550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.482516][ T5559] loop1: detected capacity change from 0 to 512 [ 83.509874][ T5559] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.526656][ T5559] Quota error (device loop1): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 83.549504][ T5559] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.564679][ T5559] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 83.572153][ T5559] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.736: bad orphan inode 14 [ 83.582393][ T5559] loop1: lost filesystem error report for type 5 error -117 [ 83.583442][ T5559] ext4_test_bit(bit=13, block=18) = 1 [ 83.590794][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 83.590815][ C1] EXT4-fs (loop1): last error at time 1771015831: ext4_orphan_get:1417 [ 83.611981][ T5559] is_bad_inode(inode)=0 [ 83.616173][ T5559] NEXT_ORPHAN(inode)=0 [ 83.620505][ T5559] max_ino=32 [ 83.623865][ T5559] i_nlink=1 [ 83.627072][ T5559] EXT4-fs (loop1): 1 truncate cleaned up [ 83.633229][ T5559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.680565][ T28] audit: type=1400 audit(1771015831.896:1849): avc: denied { read } for pid=5558 comm="syz.1.736" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.716115][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.721121][ T28] audit: type=1400 audit(1771015831.896:1850): avc: denied { open } for pid=5558 comm="syz.1.736" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.749125][ T28] audit: type=1400 audit(1771015831.916:1851): avc: denied { map } for pid=5558 comm="syz.1.736" path="socket:[11549]" dev="sockfs" ino=11549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 83.772576][ T28] audit: type=1400 audit(1771015831.916:1852): avc: denied { ioctl } for pid=5558 comm="syz.1.736" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 83.797855][ T28] audit: type=1400 audit(1771015831.916:1853): avc: denied { bind } for pid=5562 comm="syz.3.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.817954][ T28] audit: type=1400 audit(1771015831.916:1854): avc: denied { read } for pid=5562 comm="syz.3.737" path="socket:[12576]" dev="sockfs" ino=12576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 83.844700][ T28] audit: type=1400 audit(1771015831.926:1855): avc: denied { recv } for pid=3296 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.184 dest=33782 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 83.884408][ T28] audit: type=1400 audit(1771015832.096:1856): avc: denied { create } for pid=5566 comm="syz.1.738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 83.885151][ T5567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.738'. [ 83.945100][ T5557] loop0: detected capacity change from 0 to 164 [ 83.965992][ T5557] iso9660: Unknown parameter '18446744073709551615' [ 84.054863][ T5575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.234682][ T5590] loop1: detected capacity change from 0 to 512 [ 84.241626][ T5590] ext4: Unknown parameter 'dont_appraise' [ 84.254962][ T5590] Set syz1 is full, maxelem 2 reached [ 84.274619][ T5590] loop1: detected capacity change from 0 to 128 [ 84.281200][ T5590] EXT4-fs: Ignoring removed nobh option [ 84.320486][ T5590] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.360041][ T5590] ext4 filesystem being mounted at /158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.416984][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.483218][ T5599] loop1: detected capacity change from 0 to 1024 [ 84.512671][ T5599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 84.525930][ T5599] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.540968][ T5599] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.750: bg 0: block 112: padding at end of block bitmap is not set [ 84.584521][ T5599] netlink: 64 bytes leftover after parsing attributes in process `syz.1.750'. [ 84.605481][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.616054][ T5603] loop3: detected capacity change from 0 to 512 [ 84.644929][ T5603] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.667967][ T5603] FAT-fs (loop3): FAT read failed (blocknr 1568) [ 84.675344][ T5603] netlink: 'syz.3.751': attribute type 12 has an invalid length. [ 84.690506][ T5607] program syz.1.753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.733273][ T5609] netlink: 'syz.3.754': attribute type 3 has an invalid length. [ 84.755243][ T5609] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.754'. [ 84.840853][ T5617] syzkaller0: entered promiscuous mode [ 84.846388][ T5617] syzkaller0: entered allmulticast mode [ 85.133786][ T5635] program syz.2.765 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.741933][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.984541][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.029520][ T5643] loop3: detected capacity change from 0 to 8192 [ 86.216502][ T5655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.234131][ T5657] loop0: detected capacity change from 0 to 512 [ 86.250367][ T5657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.341167][ T5657] EXT4-fs (loop0): 1 truncate cleaned up [ 86.347376][ T5657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.434834][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.446972][ T5662] loop3: detected capacity change from 0 to 128 [ 86.472386][ T5662] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 86.530433][ T5662] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.552878][ T5662] FAT-fs (loop3): Filesystem has been set read-only [ 86.579719][ T5662] syz.3.776: attempt to access beyond end of device [ 86.579719][ T5662] loop3: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 86.645679][ T5662] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.686212][ T5662] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 86.706012][ T5667] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.728207][ T5662] syz.3.776: attempt to access beyond end of device [ 86.728207][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.754714][ T5667] EXT4-fs: inline encryption not supported [ 86.792940][ T5667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.804715][ T5668] syz.3.776: attempt to access beyond end of device [ 86.804715][ T5668] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.845502][ T5670] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 86.859750][ T5662] syz.3.776: attempt to access beyond end of device [ 86.859750][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.871457][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.899808][ T5662] syz.3.776: attempt to access beyond end of device [ 86.899808][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.914022][ T5670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 86.933503][ T5667] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.778: corrupted inode contents [ 86.945470][ T5662] syz.3.776: attempt to access beyond end of device [ 86.945470][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 86.961196][ T5670] FAT-fs (loop1): Filesystem has been set read-only [ 86.979934][ T5667] EXT4-fs (loop2): Remounting filesystem read-only [ 86.986752][ T5670] syz.1.779: attempt to access beyond end of device [ 86.986752][ T5670] loop1: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 87.000901][ T5662] syz.3.776: attempt to access beyond end of device [ 87.000901][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 87.019774][ T5670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 87.027739][ T5662] syz.3.776: attempt to access beyond end of device [ 87.027739][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 87.031886][ T5667] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 87.046155][ T5670] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 87.061235][ T5662] syz.3.776: attempt to access beyond end of device [ 87.061235][ T5662] loop3: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 87.189356][ T5665] iso9660: Unknown parameter '18446744073709551615' [ 87.232217][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.245941][ T50] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 87.313256][ T5686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.783'. [ 87.353472][ T5684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5684 comm=syz.4.783 [ 87.365431][ T5691] ext4: Unknown parameter 'dont_appraise' [ 87.387411][ T5691] Set syz1 is full, maxelem 2 reached [ 87.404577][ T5691] EXT4-fs: Ignoring removed nobh option [ 87.428769][ T5691] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.456221][ T5691] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.535606][ T3308] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.548756][ T5696] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 87.662553][ T28] kauditd_printk_skb: 207 callbacks suppressed [ 87.662569][ T28] audit: type=1326 audit(1771015835.876:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 87.721290][ T28] audit: type=1326 audit(1771015835.936:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 87.744876][ T28] audit: type=1326 audit(1771015835.936:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 87.768376][ T28] audit: type=1326 audit(1771015835.936:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 87.791743][ T28] audit: type=1326 audit(1771015835.936:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 87.820408][ T5705] 9p: Bad value for 'wfdno' [ 88.016897][ T5701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.403897][ T5714] set_capacity_and_notify: 5 callbacks suppressed [ 88.404442][ T5714] loop1: detected capacity change from 0 to 512 [ 88.597423][ T5692] loop3: detected capacity change from 0 to 164 [ 88.614389][ T5714] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 88.654325][ T5692] iso9660: Unknown parameter '18446744073709551615' [ 88.666047][ T5714] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.739930][ T5714] EXT4-fs (loop1): mount failed [ 88.744921][ T28] audit: type=1326 audit(1771015835.936:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 88.771666][ T28] audit: type=1326 audit(1771015835.936:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 89.803200][ T28] audit: type=1326 audit(1771015835.946:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 89.938794][ T28] audit: type=1326 audit(1771015835.946:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5700 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9dc4a5bf79 code=0x7ffc0000 [ 90.327907][ T5744] loop4: detected capacity change from 0 to 1024 [ 90.391286][ T5738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.478082][ T5744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 90.547299][ T5744] System zones: 0-1, 3-36 [ 90.587881][ T5744] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.804: bad orphan inode 134217728 [ 90.655181][ T5738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.705332][ T5744] loop4: lost filesystem error report for type 5 error -117 [ 90.706552][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.232177][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.461257][ T5776] loop0: detected capacity change from 0 to 1024 [ 91.478177][ T5776] EXT4-fs: Ignoring removed orlov option [ 91.580981][ T5776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.606273][ T5776] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.807: Allocating blocks 401-513 which overlap fs metadata [ 91.623045][ T5783] loop4: detected capacity change from 0 to 128 [ 91.640076][ T5783] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 91.676371][ T5776] EXT4-fs (loop0): pa ffff88810768d460: logic 0, phys. 113, len 25 [ 91.685496][ T5776] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5467: group 0, free 2, pa_free 9 [ 91.699651][ T5783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.717775][ T5783] FAT-fs (loop4): Filesystem has been set read-only [ 91.737947][ T5783] bio_check_eod: 11102 callbacks suppressed [ 91.737961][ T5783] syz.4.808: attempt to access beyond end of device [ 91.737961][ T5783] loop4: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 91.761547][ T5776] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 91.807627][ T5783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.817693][ T5783] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 91.839003][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.850111][ T5787] syz.4.808: attempt to access beyond end of device [ 91.850111][ T5787] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 91.882857][ T5783] syz.4.808: attempt to access beyond end of device [ 91.882857][ T5783] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 91.898350][ T5777] loop1: detected capacity change from 0 to 164 [ 91.915550][ T5777] iso9660: Unknown parameter '18446744073709551615' [ 91.936410][ T5781] syz.4.808: attempt to access beyond end of device [ 91.936410][ T5781] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 91.981643][ T5787] syz.4.808: attempt to access beyond end of device [ 91.981643][ T5787] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.015427][ T5783] syz.4.808: attempt to access beyond end of device [ 92.015427][ T5783] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.046125][ T5783] syz.4.808: attempt to access beyond end of device [ 92.046125][ T5783] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.059899][ T5787] syz.4.808: attempt to access beyond end of device [ 92.059899][ T5787] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.073682][ T5781] syz.4.808: attempt to access beyond end of device [ 92.073682][ T5781] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.087728][ T5783] syz.4.808: attempt to access beyond end of device [ 92.087728][ T5783] loop4: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 92.274415][ T5799] loop2: detected capacity change from 0 to 512 [ 92.284062][ T5799] ext4: Unknown parameter 'dont_appraise' [ 92.291700][ T5799] Set syz1 is full, maxelem 2 reached [ 92.591741][ T5817] loop2: detected capacity change from 0 to 512 [ 92.609160][ T5817] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 92.644957][ T5818] hub 2-0:1.0: USB hub found [ 92.649953][ T5818] hub 2-0:1.0: 8 ports detected [ 92.661816][ T5817] EXT4-fs (loop2): 1 truncate cleaned up [ 92.668175][ T5817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.820702][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.226924][ T5845] syzkaller0: entered promiscuous mode [ 93.235902][ T5845] syzkaller0: entered allmulticast mode [ 93.336742][ T5835] loop3: detected capacity change from 0 to 1024 [ 93.346660][ T5835] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.373140][ T5835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.397408][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 93.397480][ T28] audit: type=1400 audit(1771015841.606:2161): avc: denied { setattr } for pid=5833 comm="syz.3.822" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.484112][ T5850] loop4: detected capacity change from 0 to 1024 [ 93.498264][ T28] audit: type=1400 audit(1771015841.706:2162): avc: denied { remove_name } for pid=3309 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.523707][ T28] audit: type=1400 audit(1771015841.706:2163): avc: denied { rmdir } for pid=3309 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.534611][ T3309] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 93.568679][ T5850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.620589][ T3309] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 257, max 0(0), depth 0(0) [ 93.696168][ T5853] netlink: 'syz.4.823': attribute type 58 has an invalid length. [ 93.721841][ T5855] loop2: detected capacity change from 0 to 128 [ 93.728246][ T5853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.823'. [ 93.737997][ T5855] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 93.823029][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.163844][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 94.163954][ T28] audit: type=1400 audit(1771015842.367:2164): avc: denied { mount } for pid=5871 comm="syz.2.829" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 94.220720][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.227984][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.236417][ T5860] bridge_slave_0: entered allmulticast mode [ 94.244097][ T5860] bridge_slave_0: entered promiscuous mode [ 94.252170][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.260399][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.267719][ T5860] bridge_slave_1: entered allmulticast mode [ 94.275429][ T5860] bridge_slave_1: entered promiscuous mode [ 94.294705][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.306324][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.328701][ T5860] team0: Port device team_slave_0 added [ 94.336318][ T5860] team0: Port device team_slave_1 added [ 94.353788][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.361834][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.388745][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.400991][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.407969][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.434175][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.462190][ T5860] hsr_slave_0: entered promiscuous mode [ 94.468339][ T5860] hsr_slave_1: entered promiscuous mode [ 94.475271][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 94.482602][ T5860] Cannot create hsr debugfs directory [ 95.953819][ T5826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.965742][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 95.978638][ T5860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.004429][ T5882] loop1: detected capacity change from 0 to 256 [ 96.015945][ T5860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.024973][ T5882] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.037622][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.051644][ T5860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.068406][ T5882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'. [ 96.078107][ T5860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.087541][ T28] audit: type=1400 audit(1771015844.287:2165): avc: denied { map } for pid=5884 comm="syz.2.833" path="socket:[13139]" dev="sockfs" ino=13139 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 96.190710][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.830'. [ 96.222241][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 96.296160][ T28] audit: type=1400 audit(1771015844.497:2166): avc: denied { accept } for pid=5905 comm="syz.0.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.361992][ T28] audit: type=1400 audit(1771015844.547:2167): avc: denied { read } for pid=5905 comm="syz.0.835" name="file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 96.408111][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.425360][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.428503][ T3433] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.428565][ T3433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.436998][ T3543] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.437038][ T3543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.441191][ T5913] FAULT_INJECTION: forcing a failure. [ 96.441191][ T5913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.441269][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz.1.836 Not tainted syzkaller #0 PREEMPT(full) [ 96.441297][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.441310][ T5913] Call Trace: [ 96.441316][ T5913] [ 96.441341][ T5913] __dump_stack+0x1d/0x30 [ 96.441371][ T5913] dump_stack_lvl+0x95/0xd0 [ 96.441397][ T5913] dump_stack+0x15/0x1b [ 96.441475][ T5913] should_fail_ex+0x263/0x280 [ 96.441503][ T5913] should_fail+0xb/0x20 [ 96.441525][ T5913] should_fail_usercopy+0x1a/0x20 [ 96.441552][ T5913] _copy_to_user+0x20/0xa0 [ 96.441597][ T5913] simple_read_from_buffer+0xb5/0x130 [ 96.441637][ T5913] proc_fail_nth_read+0x10e/0x150 [ 96.441666][ T5913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.441693][ T5913] vfs_read+0x1ab/0x7f0 [ 96.441731][ T5913] ? __rcu_read_unlock+0x4e/0x70 [ 96.441747][ T5913] ? __fget_files+0x184/0x1c0 [ 96.441828][ T5913] ? mutex_lock+0x57/0x90 [ 96.441870][ T5913] ksys_read+0xdc/0x1a0 [ 96.441953][ T5913] __x64_sys_read+0x40/0x50 [ 96.442021][ T5913] x64_sys_call+0x2886/0x3020 [ 96.442047][ T5913] do_syscall_64+0x12c/0x370 [ 96.442073][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.442104][ T5913] RIP: 0033:0x7f48971cc84e [ 96.442123][ T5913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.442146][ T5913] RSP: 002b:00007f4895c3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.442215][ T5913] RAX: ffffffffffffffda RBX: 00007f4895c3e6c0 RCX: 00007f48971cc84e [ 96.442231][ T5913] RDX: 000000000000000f RSI: 00007f4895c3e0a0 RDI: 0000000000000004 [ 96.442247][ T5913] RBP: 00007f4895c3e090 R08: 0000000000000000 R09: 0000000000000000 [ 96.442311][ T5913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.442324][ T5913] R13: 00007f4897486128 R14: 00007f4897486090 R15: 00007fff606a2888 [ 96.442389][ T5913] [ 96.531617][ T5920] tipc: Enabling of bearer rejected, already enabled [ 96.600911][ T5923] FAULT_INJECTION: forcing a failure. [ 96.600911][ T5923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.600938][ T5923] CPU: 1 UID: 0 PID: 5923 Comm: syz.0.841 Not tainted syzkaller #0 PREEMPT(full) [ 96.601046][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.601060][ T5923] Call Trace: [ 96.601068][ T5923] [ 96.601077][ T5923] __dump_stack+0x1d/0x30 [ 96.601106][ T5923] dump_stack_lvl+0x95/0xd0 [ 96.601132][ T5923] dump_stack+0x15/0x1b [ 96.601220][ T5923] should_fail_ex+0x263/0x280 [ 96.601248][ T5923] should_fail+0xb/0x20 [ 96.601271][ T5923] should_fail_usercopy+0x1a/0x20 [ 96.601299][ T5923] _copy_to_user+0x20/0xa0 [ 96.601345][ T5923] simple_read_from_buffer+0xb5/0x130 [ 96.601376][ T5923] proc_fail_nth_read+0x10e/0x150 [ 96.601401][ T5923] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.601505][ T5923] vfs_read+0x1ab/0x7f0 [ 96.601537][ T5923] ? __rcu_read_unlock+0x4e/0x70 [ 96.601586][ T5923] ? __fget_files+0x184/0x1c0 [ 96.601609][ T5923] ? mutex_lock+0x57/0x90 [ 96.601633][ T5923] ksys_read+0xdc/0x1a0 [ 96.601715][ T5923] __x64_sys_read+0x40/0x50 [ 96.601780][ T5923] x64_sys_call+0x2886/0x3020 [ 96.601808][ T5923] do_syscall_64+0x12c/0x370 [ 96.601838][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.601862][ T5923] RIP: 0033:0x7fb93fabc84e [ 96.601905][ T5923] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.601925][ T5923] RSP: 002b:00007fb93e556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.601946][ T5923] RAX: ffffffffffffffda RBX: 00007fb93e5576c0 RCX: 00007fb93fabc84e [ 96.601960][ T5923] RDX: 000000000000000f RSI: 00007fb93e5570a0 RDI: 0000000000000004 [ 96.601974][ T5923] RBP: 00007fb93e557090 R08: 0000000000000000 R09: 0000000000000000 [ 96.601986][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.602032][ T5923] R13: 00007fb93fd76038 R14: 00007fb93fd75fa0 R15: 00007ffecbf057c8 [ 96.602053][ T5923] [ 96.623559][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.069817][ T5934] loop1: detected capacity change from 0 to 128 [ 97.090892][ T5934] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 97.229123][ T5946] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 97.260418][ T5954] SELinux: policydb string length -134217720 does not match expected length 8 [ 97.296475][ T5954] SELinux: failed to load policy [ 97.414251][ T5860] veth0_vlan: entered promiscuous mode [ 97.450719][ T5972] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 97.491961][ T28] audit: type=1400 audit(1771015845.697:2168): avc: denied { create } for pid=5968 comm="syz.4.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 97.718522][ T5990] netlink: 'syz.4.859': attribute type 1 has an invalid length. [ 97.854980][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 98.237766][ T5963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.273843][ T5963] tipc: Resetting bearer [ 98.302391][ T5991] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.313705][ T5991] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 98.376682][ T5992] 8021q: adding VLAN 0 to HW filter on device bond4 [ 98.395474][ T3433] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.410161][ T3433] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.455009][ T3433] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.485827][ T3433] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.520520][ T5860] veth1_vlan: entered promiscuous mode [ 98.526233][ T28] audit: type=1400 audit(1771015846.727:2169): avc: denied { write } for pid=6005 comm="syz.0.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 98.557484][ T3433] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.569866][ T28] audit: type=1400 audit(1771015846.727:2170): avc: denied { setopt } for pid=6005 comm="syz.0.863" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.588282][ T3433] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.622662][ T3433] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.648450][ T3433] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.732123][ T5856] ================================================================== [ 98.740255][ T5856] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 98.747225][ T5856] [ 98.749561][ T5856] write to 0xffff88810391e0ec of 4 bytes by task 5520 on cpu 0: [ 98.757205][ T5856] shmem_mknod+0x143/0x170 [ 98.761649][ T5856] shmem_create+0x34/0x50 [ 98.766005][ T5856] path_openat+0xd75/0x2050 [ 98.770523][ T5856] do_file_open+0x16c/0x290 [ 98.775031][ T5856] do_sys_openat2+0x94/0x130 [ 98.779651][ T5856] __x64_sys_openat+0xf2/0x120 [ 98.784420][ T5856] x64_sys_call+0x1e39/0x3020 [ 98.789106][ T5856] do_syscall_64+0x12c/0x370 [ 98.791663][ T5860] veth0_macvtap: entered promiscuous mode [ 98.793747][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.793769][ T5856] [ 98.793774][ T5856] read to 0xffff88810391e0ec of 4 bytes by task 5856 on cpu 1: [ 98.793787][ T5856] fill_mg_cmtime+0x5b/0x260 [ 98.818691][ T5860] veth1_macvtap: entered promiscuous mode [ 98.819864][ T5856] generic_fillattr+0x24a/0x340 [ 98.830462][ T5856] shmem_getattr+0x181/0x200 [ 98.835077][ T5856] vfs_getattr_nosec+0x146/0x1e0 [ 98.840186][ T5856] vfs_getattr+0x48/0x60 [ 98.844445][ T5856] vfs_statx_path+0x28/0x140 [ 98.849047][ T5856] vfs_statx+0xc4/0x170 [ 98.853226][ T5856] vfs_fstatat+0x118/0x170 [ 98.857674][ T5856] __se_sys_newfstatat+0x55/0x3e0 [ 98.862719][ T5856] __x64_sys_newfstatat+0x55/0x70 [ 98.867759][ T5856] x64_sys_call+0x2c64/0x3020 [ 98.870377][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.872470][ T5856] do_syscall_64+0x12c/0x370 [ 98.884363][ T5856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.890282][ T5856] [ 98.892614][ T5856] value changed: 0x2f5d13a0 -> 0x38768019 [ 98.898421][ T5856] [ 98.899919][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.900750][ T5856] Reported by Kernel Concurrency Sanitizer on: [ 98.900763][ T5856] CPU: 1 UID: 0 PID: 5856 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 98.900784][ T5856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 98.900795][ T5856] ================================================================== [ 98.977493][ T28] audit: type=1400 audit(1771015847.177:2171): avc: denied { recv } for pid=3304 comm="syz-executor" saddr=10.128.0.163 src=49202 daddr=10.128.0.184 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 99.706966][ T28] audit: type=1400 audit(1771015847.917:2172): avc: denied { read } for pid=3037 comm="dhcpcd" name="n25" dev="tmpfs" ino=5694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.732938][ T28] audit: type=1400 audit(1771015847.917:2173): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.756276][ T28] audit: type=1400 audit(1771015847.917:2174): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=5694 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.787057][ T50] tipc: Disabling bearer [ 99.835080][ T28] audit: type=1400 audit(1771015848.047:2175): avc: denied { create } for pid=6023 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.857807][ T28] audit: type=1400 audit(1771015848.047:2176): avc: denied { write } for pid=6023 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=5702 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.884378][ T28] audit: type=1400 audit(1771015848.047:2177): avc: denied { append } for pid=6023 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=5702 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.909624][ T28] audit: type=1400 audit(1771015848.067:2178): avc: denied { unlink } for pid=6034 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=5702 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 99.933125][ T50] bond1 (unregistering): (slave bridge0): Releasing active interface [ 100.000453][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.009905][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.018835][ T50] bond0 (unregistering): Released all slaves [ 100.026186][ T50] bond1 (unregistering): Released all slaves [ 100.092421][ T50] tipc: Left network mode [ 100.099883][ T50] hsr_slave_0: left promiscuous mode [ 100.105561][ T50] hsr_slave_1: left promiscuous mode [ 100.112495][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.698017][ T50] bridge_slave_1: left allmulticast mode [ 100.704908][ T50] bridge_slave_1: left promiscuous mode [ 100.711674][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.720835][ T50] bridge_slave_0: left allmulticast mode [ 100.726575][ T50] bridge_slave_0: left promiscuous mode [ 100.733195][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.831650][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.841838][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.851839][ T50] bond0 (unregistering): Released all slaves [ 100.895385][ T50] hsr_slave_0: left promiscuous mode [ 100.901594][ T50] hsr_slave_1: left promiscuous mode [ 100.907347][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.915003][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.922589][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.930097][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.942714][ T50] veth1_macvtap: left promiscuous mode [ 100.948233][ T50] veth0_macvtap: left promiscuous mode [ 100.955106][ T50] veth1_vlan: left promiscuous mode [ 100.961619][ T50] veth0_vlan: left promiscuous mode [ 101.032277][ T50] team0 (unregistering): Port device team_slave_1 removed [ 101.043716][ T50] team0 (unregistering): Port device team_slave_0 removed