last executing test programs: 2.572378904s ago: executing program 3 (id=1903): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 2.526367369s ago: executing program 2 (id=1904): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') openat(r0, 0x0, 0x8042, 0xb) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x3000)=nil) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2a5c0, 0x1c1}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000002a80)='user\x00', &(0x7f0000002ac0)={'syz', 0x3}, &(0x7f0000002b00)="f4", 0x1, r4) keyctl$search(0xa, r4, &(0x7f0000002c80)='keyring\x00', &(0x7f0000002cc0)={'syz', 0x1}, r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000000c0)={'pimreg\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ffe100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1.750671172s ago: executing program 2 (id=1910): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1.743147103s ago: executing program 2 (id=1912): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) socket(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372", 0x34}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r8], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.709066916s ago: executing program 4 (id=1914): r0 = socket$isdn(0x22, 0x3, 0x23) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r1}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x288, 0x288, 0x440, 0x1b8, 0x358, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff, 0x7fffffff], 'hsr0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x29, 0x7, 0x2, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000009c0)=[{&(0x7f0000003840)=""/4103, 0x1007}, {&(0x7f0000000ac0)=""/110, 0x6e}, {&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000000780)=""/182, 0xb6}], 0x4, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0x0, 0x0, 0x0, 0x80000001, 0x1000, &(0x7f0000002840)=""/4096, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x31, r4, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x3, 0xffff4d5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r4, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/97, 0x61}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x8, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r7, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000023039500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) 1.660562181s ago: executing program 0 (id=1915): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) inotify_add_watch(0xffffffffffffffff, 0x0, 0x850003d1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/241) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb0c9fa2cdd4cf720}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) pwrite64(r5, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) 1.657447041s ago: executing program 3 (id=1916): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 1.656872361s ago: executing program 4 (id=1917): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) socket$inet(0x2, 0x2, 0x1) pipe(&(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") 1.625866454s ago: executing program 3 (id=1920): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe4, &(0x7f0000000500)={0x3, 0x6, 0x7, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0xfffffffe, 0x101, 0x0}) 1.585919338s ago: executing program 0 (id=1923): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x1, 0xbfdffffc}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) fchmod(0xffffffffffffffff, 0xa8e5dc8dce8b9fea) 1.520780535s ago: executing program 0 (id=1925): getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000080)=""/73, 0x49) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x6e7a, 0x9, 0x8, 0x3}, {0x4, 0x0, 0xe, 0x7f}, {0xf87, 0x80, 0x3}, {0x5, 0x44, 0xf9}]}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_load(r0, &(0x7f00000001c0)={0xf97cff8c, 0x8, 'SE Linux', "9d1973a59676d76911c6e31b2fd242ec579fadd23c8a4b5bfc8a7548a552fdceaa34320036e484986e687b82f8160bb31b7e26d34508da7994770b57028bc5ff8bace5e7df3a4c2230fef01200d3ee31b416a672612dd13c05141483dda52dab335594243f70f338580507ce23f6290ecdae365f1fbf71cdbaa1aa6f7c3eb0ca395f867a17c5953a90299215596b508e73332e2018de7945e4e8fb2a2937cd2f92441e8602cd6d4bfa97d6bb5772f7064250a6d1f334bb11ccfcee2b5c6b70381b7f9c88d1b4818858"}, 0xd9) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r1, &(0x7f00000002c0)="e64b4857c8a95a18dff1adca4702998b39b8ad41e965643b18546e0daf49a2d430da9ea37ebe982a90af2e302eb86e08df958d4a7e64aace602fec2f3a357da6cf41892ab93694f425c9faa74960cc3cf9e21ff5972810607cd2cd757c5ab638638d191a793a24f3e1eb10b1230cded4ef47606dcb4776d3a9026ef11a8c46dfea51a8918179cab52712384384a570b7ed43ef79d68612bf779fb6c7dc76c17f3675c365fee71398ffb20126a0addd76bcecec354b83cf63c83bfe1d6b40e9ccfaec9e07063a1de71901de3f4dd247a22905e3abfb8252a0dd05", 0xda, 0x8004, &(0x7f00000003c0)={0xa, 0x4e24, 0x40, @ipv4={'\x00', '\xff\xff', @remote}, 0xd}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x28, 0x6, 0x0, 0x80}]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={0x0, "255e8971a318b41879f54c970eb13986"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001480)={r2, 0x8, 0x1, [0x7166ba99, 0xffff, 0x7, 0x4, 0xffffffffffffffff], [0x9, 0x1, 0xf, 0xe4, 0x8, 0x8000000000000000, 0x6, 0xffffffff80000000, 0x2, 0x8, 0x320, 0x0, 0x910, 0x9, 0x62ca, 0x86b49e1, 0x0, 0x375f, 0x101, 0xffffffffffffffff, 0x51, 0x6, 0xcc, 0x4, 0x5, 0x3, 0x8001, 0x6, 0x2, 0x1, 0x100000000, 0x80000000, 0x1, 0x8, 0x2, 0x1ff, 0x0, 0x5, 0xfffffffffffffb8f, 0xb8, 0x2, 0x240000000000000, 0x6, 0x3, 0x6, 0xd, 0x80000001, 0x2, 0x8000000000000001, 0xf, 0xe73, 0xd673, 0xcf45, 0x9, 0x2, 0x0, 0x7, 0x7, 0x101, 0x3, 0x1, 0x200, 0xfffffffffffffff9, 0x6, 0x9, 0x3, 0xc, 0x4, 0x200, 0x6, 0x4, 0x9, 0x80000000, 0x8, 0x5, 0x4, 0x9, 0x893, 0x4, 0x6, 0x401, 0x6404, 0x3, 0x89, 0xca3, 0x2fd857bc, 0xa112, 0x101, 0x1, 0xfffffffffffff800, 0x4, 0x0, 0x80000001, 0x8, 0x7, 0xd, 0x6, 0x9, 0x5d92, 0xfb6, 0x80000001, 0x52a2dda4, 0xe3a, 0x2, 0x7fffffffffffffff, 0x9, 0x5, 0x200, 0xe37, 0x0, 0xdd7, 0x84, 0x7fffffff, 0x5, 0x8, 0x40, 0x1, 0x5, 0x800, 0x8, 0x3]}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000018c0)=@gcm_128={{0x303}, "9f4b81e9430b04f6", "285cddffc30cfebc1cf7da1b9b8b787b", "b90bf79c", "268a5cf7fa54d510"}, 0x28) r4 = open(&(0x7f0000001900)='\x00', 0x2e0401, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001a80)='blkio.bfq.sectors\x00', 0x0, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x20, 0x13, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x0, 0x8, 0x2, 0xb, 0x20, 0x10}, @call={0x85, 0x0, 0x0, 0xb1}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a00)='syzkaller\x00', 0x2, 0x25, &(0x7f0000001a40)=""/37, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2c, r5, 0x8, &(0x7f0000001ac0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001b00)={0x5, 0x8, 0x8, 0x81}, 0x10, 0xffffffffffffffff, r6, 0x0, &(0x7f0000001b80)=[0x1], 0xffffffffffffffff, 0x10, 0x401}, 0x94) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000001c80)=0xb) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r7, &(0x7f0000001cc0)={0x24, @none={0x0, 0x3}}, 0x14) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000001d00)={@empty, 0x401, 0x1, 0xff, 0x4, 0x4a, 0xff81}, &(0x7f0000001d40)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001d80)={0x0, 0x0, 0x2, 0x7e, 0x0}, &(0x7f0000001dc0)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000001e00)={r8, @in6={{0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}}, 0x84) r9 = memfd_secret(0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000001ec0)=""/10) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) nanosleep(&(0x7f0000001f80), &(0x7f0000001fc0)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x110, r1, 0x9a5d7000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000002000)='scalable', 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f00000020c0)={'tunl0\x00', &(0x7f0000002040)={'sit0\x00', 0x0, 0x7800, 0x80, 0x3, 0x100, {{0xd, 0x4, 0x2, 0x0, 0x34, 0x68, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop, @lsrr={0x83, 0x13, 0x1f, [@loopback, @empty, @empty, @empty]}, @lsrr={0x83, 0xb, 0x3d, [@multicast2, @rand_addr=0x64010101]}, @end]}}}}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002100)={@dev={0xfe, 0x80, '\x00', 0x3d}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfffffffa, 0x4eb8, 0x3, 0x0, 0xfff, 0x40d80250, r10}) socket$can_bcm(0x1d, 0x2, 0x2) 1.520397484s ago: executing program 1 (id=1926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) (fail_nth: 1) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.519728985s ago: executing program 3 (id=1927): r0 = socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.084999046s ago: executing program 4 (id=1928): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x154444, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0xeffffffffffff6f6, 0x7}, 0x100410, 0xffffffffffffffff, 0x40000002, 0x4, 0x9, 0xd, 0xfffd, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x5e12, &(0x7f0000000400)={0x0, 0xc458, 0x2, 0x1, 0xb8}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x209, 0x1, 0x8000, 0x1ff, 0x3, 0x3}, 0x20) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x9, 0x0) r3 = dup(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000340), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 887.774875ms ago: executing program 2 (id=1929): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000800)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 718.998231ms ago: executing program 4 (id=1930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x400, 0x100008, 0x29b}, &(0x7f0000010080), &(0x7f0000000300)) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) 716.833792ms ago: executing program 2 (id=1931): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 706.809902ms ago: executing program 2 (id=1932): r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000009c0)=ANY=[@ANYRESDEC=r1], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(r1, r3) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r5) r7 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 664.558346ms ago: executing program 0 (id=1933): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) unlink(&(0x7f0000000100)='./file0/file1\x00') 664.081976ms ago: executing program 1 (id=1934): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd73, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x2}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3, 0x0, 0x1000000000000}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) 663.063416ms ago: executing program 3 (id=1935): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x1, 0xbfdffffc}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000040)}) fchmod(0xffffffffffffffff, 0xa8e5dc8dce8b9fea) 662.506426ms ago: executing program 0 (id=1936): unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x4f}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x20051a9, 0x1c080, 0x4000a, 0x2ea}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 646.560198ms ago: executing program 4 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 609.213132ms ago: executing program 3 (id=1938): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 608.358712ms ago: executing program 4 (id=1939): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETLED(r1, 0x4b32, 0x91) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="200000001114010028bd7000fcdbdf2508000300012000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x40040) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) socket$kcm(0x1e, 0x8, 0x0) socket(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184", 0x4e}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r10, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000480)=ANY=[@ANYRES16=r8], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 606.975912ms ago: executing program 1 (id=1940): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) syz_io_uring_setup(0x42ca, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) unlinkat(0xffffffffffffffff, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 570.634855ms ago: executing program 0 (id=1941): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x4c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x24001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x10001, 0x0, 0x9, r0, 0x0, '\x00', 0x0, r8, 0x1, 0x4, 0x4, 0x5}, 0x50) 321.574979ms ago: executing program 1 (id=1942): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 287.292622ms ago: executing program 1 (id=1943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9) (fail_nth: 4) 0s ago: executing program 1 (id=1944): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000014c0)=ANY=[@ANYBLOB="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", @ANYBLOB="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", @ANYRES16=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) (async) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xffe}, 0x18) (async) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x5) fcntl$notify(r7, 0x402, 0x300) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r8, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, &(0x7f0000000340)={0x40, 0x5, 0xdf, {0xdf, 0x31, "2d9adf277f2f4d60467633d92a6ea8f95263106ace10334f9d61640f3617ecfd4a1a7a827f1eed4a7d80b88c80022961cf8314efc025f4ed97dfa354095349fba717a944d85fffec30200575219a4199eef338a433186328e564825ddadb345d093f59e383a2ba671b034cda0df9b4cecd4cea06ac3eefe54fde8a1499188f1a1a4d1f887fafb857d1414b5aba9b572f57b303ec265646dca4693ac27adee410176daaa197fecadfe85bb60421997ef0ab95d365c2fc512c072788c44c9c057e0fba597123920b78ce6c293436bc223f679c2224586e425dc963561552"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x421}}}, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x40, 0x14, 0x74, "afb14d91602a5deb3eaa15c8ec13cadaa4fe73261ae266ff29665410287da64175e7da83bcfde4ec45fe562b7e7b0230e90ba15949247e6434a09b10b00d9edcd04cc0211e907c2e0dc5b672e5b42df77d8774e4b8fe32b844f606f49cd40a16f64cac1d5bd3bad59d13d7a7bf7f952619013392"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000440)={0x20, 0x81, 0x1, "1a"}, &(0x7f0000000480)={0x20, 0x82, 0x1, '9'}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "30b4"}, &(0x7f0000000500)={0x20, 0x84, 0x2, "9dd8"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "7029c4"}}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) (rerun: 32) bind$packet(r9, &(0x7f0000000080)={0x11, 0x1a, r10, 0x1, 0x8, 0x6, @broadcast}, 0x14) (async) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): process `+}[@'. [ 148.196247][ T8271] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1538'. [ 148.217348][ T8269] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 148.405442][ T8292] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1548'. [ 148.439960][ T8296] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1550'. [ 148.520197][ T8301] loop3: detected capacity change from 0 to 512 [ 148.526895][ T8301] EXT4-fs: Ignoring removed i_version option [ 148.532982][ T8301] EXT4-fs: Ignoring removed bh option [ 148.542633][ T8301] ext4 filesystem being mounted at /295/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.616766][ T8306] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 148.683608][ T8312] FAULT_INJECTION: forcing a failure. [ 148.683608][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 148.696295][ T8312] CPU: 1 UID: 0 PID: 8312 Comm: syz.4.1554 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.696328][ T8312] Tainted: [W]=WARN [ 148.696336][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.696349][ T8312] Call Trace: [ 148.696357][ T8312] [ 148.696364][ T8312] __dump_stack+0x1d/0x30 [ 148.696503][ T8312] dump_stack_lvl+0x95/0xd0 [ 148.696526][ T8312] dump_stack+0x15/0x1b [ 148.696543][ T8312] should_fail_ex+0x265/0x280 [ 148.696562][ T8312] should_failslab+0x8c/0xb0 [ 148.696632][ T8312] kmem_cache_alloc_noprof+0x69/0x4b0 [ 148.696653][ T8312] ? audit_log_start+0x342/0x720 [ 148.696762][ T8312] audit_log_start+0x342/0x720 [ 148.696779][ T8312] ? kstrtouint+0x76/0xc0 [ 148.696795][ T8312] audit_seccomp+0x48/0x100 [ 148.696818][ T8312] ? __seccomp_filter+0x832/0x1260 [ 148.696851][ T8312] __seccomp_filter+0x843/0x1260 [ 148.696879][ T8312] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 148.696977][ T8312] ? vfs_write+0x7e8/0x960 [ 148.697029][ T8312] __secure_computing+0x82/0x150 [ 148.697166][ T8312] syscall_trace_enter+0xcf/0x1e0 [ 148.697236][ T8312] do_syscall_64+0xa4/0x2b0 [ 148.697336][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.697353][ T8312] RIP: 0033:0x7f5f77c2f749 [ 148.697366][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.697427][ T8312] RSP: 002b:00007f5f7668f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 148.697443][ T8312] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2f749 [ 148.697523][ T8312] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000001 [ 148.697544][ T8312] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.697554][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.697630][ T8312] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 148.697644][ T8312] [ 148.907985][ T8316] FAULT_INJECTION: forcing a failure. [ 148.907985][ T8316] name failslab, interval 1, probability 0, space 0, times 0 [ 148.920671][ T8316] CPU: 0 UID: 0 PID: 8316 Comm: syz.4.1556 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.920729][ T8316] Tainted: [W]=WARN [ 148.920736][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.920750][ T8316] Call Trace: [ 148.920757][ T8316] [ 148.920766][ T8316] __dump_stack+0x1d/0x30 [ 148.920789][ T8316] dump_stack_lvl+0x95/0xd0 [ 148.920807][ T8316] dump_stack+0x15/0x1b [ 148.920823][ T8316] should_fail_ex+0x265/0x280 [ 148.920867][ T8316] should_failslab+0x8c/0xb0 [ 148.920890][ T8316] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 148.920918][ T8316] ? kernfs_node_dentry+0x1c5/0x350 [ 148.920942][ T8316] ? __pfx_kernfs_test_super+0x10/0x10 [ 148.920964][ T8316] kstrdup+0x3e/0xd0 [ 148.921032][ T8316] kernfs_node_dentry+0x1c5/0x350 [ 148.921057][ T8316] cgroup_do_get_tree+0x1f4/0x340 [ 148.921124][ T8316] cgroup_get_tree+0xd2/0x1f0 [ 148.921151][ T8316] vfs_get_tree+0x57/0x1d0 [ 148.921168][ T8316] vfs_cmd_create+0x8a/0x140 [ 148.921221][ T8316] vfs_fsconfig_locked+0x6f/0x210 [ 148.921244][ T8316] __se_sys_fsconfig+0x648/0x770 [ 148.921286][ T8316] __x64_sys_fsconfig+0x67/0x80 [ 148.921313][ T8316] x64_sys_call+0x2aa4/0x3000 [ 148.921333][ T8316] do_syscall_64+0xca/0x2b0 [ 148.921438][ T8316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.921461][ T8316] RIP: 0033:0x7f5f77c2f749 [ 148.921477][ T8316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.921495][ T8316] RSP: 002b:00007f5f7668f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 148.921588][ T8316] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2f749 [ 148.921602][ T8316] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 148.921636][ T8316] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.921647][ T8316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.921657][ T8316] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 148.921673][ T8316] [ 149.133963][ T8313] netlink: 'syz.2.1555': attribute type 1 has an invalid length. [ 149.165162][ T8314] loop2: detected capacity change from 0 to 512 [ 149.302009][ T8332] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1561'. [ 149.322263][ T8334] loop3: detected capacity change from 0 to 512 [ 149.333821][ T9] hid_parser_main: 36 callbacks suppressed [ 149.333838][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x7 [ 149.347374][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.354800][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.362228][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.369649][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.377084][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.384548][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.392136][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.399777][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.407172][ T9] hid-generic 0003:0004:0000.0046: unknown main item tag 0x0 [ 149.430682][ T8334] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1563: error while reading EA inode 32 err=-116 [ 149.445084][ T8334] EXT4-fs (loop3): Remounting filesystem read-only [ 149.466779][ T8334] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 149.486695][ T8334] EXT4-fs (loop3): 1 orphan inode deleted [ 149.492854][ T9] hid-generic 0003:0004:0000.0046: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 149.614710][ T8344] loop3: detected capacity change from 0 to 8192 [ 149.621330][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 149.621342][ T29] audit: type=1326 audit(1766387968.878:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1edf1e3aa code=0x7ffc0000 [ 149.685519][ T29] audit: type=1326 audit(1766387968.878:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa1edf1e3aa code=0x7ffc0000 [ 149.709022][ T29] audit: type=1326 audit(1766387968.878:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa1edf1de97 code=0x7ffc0000 [ 149.732532][ T29] audit: type=1326 audit(1766387968.878:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa1edf20eea code=0x7ffc0000 [ 149.756391][ T29] audit: type=1326 audit(1766387968.878:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1edf1df90 code=0x7ffc0000 [ 149.779968][ T29] audit: type=1326 audit(1766387968.878:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa1edf1e497 code=0x7ffc0000 [ 149.803392][ T29] audit: type=1326 audit(1766387968.878:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1edf1df90 code=0x7ffc0000 [ 149.826932][ T29] audit: type=1326 audit(1766387968.878:13522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1edf1f749 code=0x7ffc0000 [ 149.850403][ T29] audit: type=1326 audit(1766387968.878:13523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa1edf1f749 code=0x7ffc0000 [ 149.873922][ T29] audit: type=1326 audit(1766387968.878:13524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8343 comm="syz.3.1565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1edf1f749 code=0x7ffc0000 [ 149.932057][ T8347] loop1: detected capacity change from 0 to 512 [ 149.941190][ T8347] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1568: error while reading EA inode 32 err=-116 [ 149.957445][ T8347] EXT4-fs (loop1): Remounting filesystem read-only [ 149.964309][ T8351] loop3: detected capacity change from 0 to 512 [ 149.971933][ T8347] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 149.982538][ T8351] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1566: error while reading EA inode 32 err=-116 [ 149.988977][ T8349] loop2: detected capacity change from 0 to 2048 [ 149.996518][ T8353] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 150.012527][ T8353] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 150.021181][ T8347] EXT4-fs (loop1): 1 orphan inode deleted [ 150.029199][ T8351] EXT4-fs (loop3): Remounting filesystem read-only [ 150.036107][ T8351] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 150.046395][ T8351] EXT4-fs (loop3): 1 orphan inode deleted [ 150.076943][ T8358] FAULT_INJECTION: forcing a failure. [ 150.076943][ T8358] name failslab, interval 1, probability 0, space 0, times 0 [ 150.089749][ T8358] CPU: 1 UID: 0 PID: 8358 Comm: syz.0.1570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.089800][ T8358] Tainted: [W]=WARN [ 150.089806][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.089831][ T8358] Call Trace: [ 150.089837][ T8358] [ 150.089844][ T8358] __dump_stack+0x1d/0x30 [ 150.089865][ T8358] dump_stack_lvl+0x95/0xd0 [ 150.089883][ T8358] dump_stack+0x15/0x1b [ 150.089902][ T8358] should_fail_ex+0x265/0x280 [ 150.089930][ T8358] should_failslab+0x8c/0xb0 [ 150.089990][ T8358] __kmalloc_noprof+0xb9/0x5a0 [ 150.090009][ T8358] ? iter_file_splice_write+0xf7/0xa20 [ 150.090084][ T8358] iter_file_splice_write+0xf7/0xa20 [ 150.090106][ T8358] ? copy_splice_read+0x623/0x660 [ 150.090147][ T8358] ? copy_splice_read+0x623/0x660 [ 150.090173][ T8358] ? __pfx_iter_file_splice_write+0x10/0x10 [ 150.090246][ T8358] direct_splice_actor+0x156/0x2a0 [ 150.090266][ T8358] ? splice_shrink_spd+0x61/0x70 [ 150.090282][ T8358] splice_direct_to_actor+0x312/0x680 [ 150.090315][ T8358] ? __pfx_direct_splice_actor+0x10/0x10 [ 150.090339][ T8358] do_splice_direct+0xda/0x150 [ 150.090360][ T8358] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 150.090385][ T8358] do_sendfile+0x380/0x650 [ 150.090414][ T8358] __x64_sys_sendfile64+0x105/0x150 [ 150.090449][ T8358] x64_sys_call+0x2db1/0x3000 [ 150.090478][ T8358] do_syscall_64+0xca/0x2b0 [ 150.090581][ T8358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.090600][ T8358] RIP: 0033:0x7f056523f749 [ 150.090615][ T8358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.090632][ T8358] RSP: 002b:00007f0563c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 150.090653][ T8358] RAX: ffffffffffffffda RBX: 00007f0565495fa0 RCX: 00007f056523f749 [ 150.090739][ T8358] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 150.090760][ T8358] RBP: 00007f0563c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.090773][ T8358] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 150.090786][ T8358] R13: 00007f0565496038 R14: 00007f0565495fa0 R15: 00007ffc7cd3c738 [ 150.090803][ T8358] [ 150.338742][ T8349] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 150.388289][ T8349] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 150.400734][ T8349] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.400734][ T8349] [ 150.410476][ T8349] EXT4-fs (loop2): Total free blocks count 0 [ 150.416557][ T8349] EXT4-fs (loop2): Free/Dirty block details [ 150.422595][ T8349] EXT4-fs (loop2): free_blocks=2415919104 [ 150.428351][ T8349] EXT4-fs (loop2): dirty_blocks=832 [ 150.433600][ T8349] EXT4-fs (loop2): Block reservation details [ 150.439631][ T8349] EXT4-fs (loop2): i_reserved_data_blocks=52 [ 150.457221][ T8373] loop3: detected capacity change from 0 to 1024 [ 150.464156][ T8373] EXT4-fs: Ignoring removed nobh option [ 150.469803][ T8373] EXT4-fs: Ignoring removed bh option [ 150.495677][ T8371] loop4: detected capacity change from 0 to 512 [ 150.507956][ T8363] lo speed is unknown, defaulting to 1000 [ 150.515150][ T8371] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1576: error while reading EA inode 32 err=-116 [ 150.528257][ T8371] EXT4-fs (loop4): Remounting filesystem read-only [ 150.534891][ T8371] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 150.545309][ T8371] EXT4-fs (loop4): 1 orphan inode deleted [ 150.545330][ T9] hid-generic 0003:0004:0000.0047: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 150.586582][ T2066] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 150.598845][ T2066] EXT4-fs (loop2): This should not happen!! Data will be lost [ 150.598845][ T2066] [ 150.702621][ T8391] loop1: detected capacity change from 0 to 512 [ 150.712984][ T8397] xt_policy: output policy not valid in PREROUTING and INPUT [ 150.731774][ T8391] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1582: error while reading EA inode 32 err=-116 [ 150.810010][ T8403] loop4: detected capacity change from 0 to 512 [ 150.818343][ T8403] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1585: error while reading EA inode 32 err=-116 [ 150.831067][ T8403] EXT4-fs (loop4): Remounting filesystem read-only [ 150.837595][ T8403] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 150.847830][ T8403] EXT4-fs (loop4): 1 orphan inode deleted [ 150.855104][ T8391] EXT4-fs (loop1): Remounting filesystem read-only [ 150.861762][ T8391] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 150.871936][ T8391] EXT4-fs (loop1): 1 orphan inode deleted [ 150.945613][ T8408] FAULT_INJECTION: forcing a failure. [ 150.945613][ T8408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.958852][ T8408] CPU: 0 UID: 0 PID: 8408 Comm: syz.4.1587 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 150.958965][ T8408] Tainted: [W]=WARN [ 150.958971][ T8408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.958981][ T8408] Call Trace: [ 150.958987][ T8408] [ 150.958994][ T8408] __dump_stack+0x1d/0x30 [ 150.959016][ T8408] dump_stack_lvl+0x95/0xd0 [ 150.959039][ T8408] dump_stack+0x15/0x1b [ 150.959057][ T8408] should_fail_ex+0x265/0x280 [ 150.959157][ T8408] should_fail+0xb/0x20 [ 150.959178][ T8408] should_fail_usercopy+0x1a/0x20 [ 150.959199][ T8408] _copy_to_user+0x20/0xa0 [ 150.959285][ T8408] simple_read_from_buffer+0xb5/0x130 [ 150.959309][ T8408] proc_fail_nth_read+0x10e/0x150 [ 150.959339][ T8408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.959436][ T8408] vfs_read+0x1a8/0x770 [ 150.959451][ T8408] ? __rcu_read_unlock+0x4f/0x70 [ 150.959472][ T8408] ? __fget_files+0x184/0x1c0 [ 150.959492][ T8408] ? mutex_lock+0x58/0x90 [ 150.959572][ T8408] ksys_read+0xda/0x1a0 [ 150.959591][ T8408] __x64_sys_read+0x40/0x50 [ 150.959607][ T8408] x64_sys_call+0x2889/0x3000 [ 150.959628][ T8408] do_syscall_64+0xca/0x2b0 [ 150.959713][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.959742][ T8408] RIP: 0033:0x7f5f77c2e15c [ 150.959759][ T8408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.959843][ T8408] RSP: 002b:00007f5f7668f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.959863][ T8408] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2e15c [ 150.959941][ T8408] RDX: 000000000000000f RSI: 00007f5f7668f0a0 RDI: 0000000000000004 [ 150.959954][ T8408] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.959967][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.960042][ T8408] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 150.960061][ T8408] [ 151.254338][ T8415] loop1: detected capacity change from 0 to 2048 [ 151.399557][ T8415] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 151.458930][ T8415] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1106 with error 28 [ 151.471520][ T8415] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.471520][ T8415] [ 151.481189][ T8415] EXT4-fs (loop1): Total free blocks count 0 [ 151.487204][ T8415] EXT4-fs (loop1): Free/Dirty block details [ 151.493115][ T8415] EXT4-fs (loop1): free_blocks=2415919104 [ 151.498833][ T8415] EXT4-fs (loop1): dirty_blocks=1120 [ 151.504153][ T8415] EXT4-fs (loop1): Block reservation details [ 151.510203][ T8415] EXT4-fs (loop1): i_reserved_data_blocks=70 [ 151.547317][ T8432] loop3: detected capacity change from 0 to 1024 [ 151.554078][ T8432] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.635929][ T8441] loop2: detected capacity change from 0 to 512 [ 151.661172][ T8441] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1597: error while reading EA inode 32 err=-116 [ 151.686453][ T8441] EXT4-fs (loop2): Remounting filesystem read-only [ 151.693131][ T8441] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 151.704326][ T8441] EXT4-fs (loop2): 1 orphan inode deleted [ 151.704541][ T1653] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 151.722527][ T1653] EXT4-fs (loop1): This should not happen!! Data will be lost [ 151.722527][ T1653] [ 151.734691][ T8448] netlink: 'syz.0.1599': attribute type 13 has an invalid length. [ 151.773995][ T9] hid-generic 0003:0004:0000.0048: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 152.065310][ T8460] loop4: detected capacity change from 0 to 512 [ 152.087739][ T8463] tmpfs: Too few inodes for current use [ 152.096075][ T8460] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.118231][ T8463] loop2: detected capacity change from 0 to 128 [ 152.158721][ T8463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8463 comm=syz.2.1605 [ 152.302600][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.302600][ T8507] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 152.318344][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.318344][ T8507] loop2: rw=1, sector=161, nr_sectors = 16 limit=128 [ 152.333593][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.333593][ T8507] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 152.347569][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.347569][ T8507] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 152.361668][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.361668][ T8507] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 152.376298][ T8507] kworker/u8:52: attempt to access beyond end of device [ 152.376298][ T8507] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 152.452120][ T8432] syz.3.1594 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 152.466378][ T8432] CPU: 0 UID: 0 PID: 8432 Comm: syz.3.1594 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 152.466437][ T8432] Tainted: [W]=WARN [ 152.466443][ T8432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.466455][ T8432] Call Trace: [ 152.466463][ T8432] [ 152.466473][ T8432] __dump_stack+0x1d/0x30 [ 152.466503][ T8432] dump_stack_lvl+0x95/0xd0 [ 152.466550][ T8432] dump_stack+0x15/0x1b [ 152.466566][ T8432] dump_header+0x81/0x240 [ 152.466592][ T8432] oom_kill_process+0x295/0x350 [ 152.466615][ T8432] out_of_memory+0x97b/0xb80 [ 152.466639][ T8432] try_charge_memcg+0x610/0xa10 [ 152.466711][ T8432] obj_cgroup_charge_pages+0xa6/0x150 [ 152.466803][ T8432] __memcg_kmem_charge_page+0x9f/0x170 [ 152.466834][ T8432] __alloc_frozen_pages_noprof+0x18f/0x360 [ 152.466934][ T8432] alloc_pages_mpol+0xb3/0x260 [ 152.466967][ T8432] alloc_pages_noprof+0x90/0x130 [ 152.467034][ T8432] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 152.467070][ T8432] __kvmalloc_node_noprof+0x492/0x6b0 [ 152.467172][ T8432] ? ip_set_alloc+0x24/0x30 [ 152.467236][ T8432] ? ip_set_alloc+0x24/0x30 [ 152.467341][ T8432] ip_set_alloc+0x24/0x30 [ 152.467450][ T8432] hash_netiface_create+0x282/0x740 [ 152.467484][ T8432] ? __pfx_hash_netiface_create+0x10/0x10 [ 152.467518][ T8432] ip_set_create+0x3cc/0x970 [ 152.467554][ T8432] ? __nla_parse+0x40/0x60 [ 152.467625][ T8432] nfnetlink_rcv_msg+0x4c6/0x590 [ 152.467672][ T8432] netlink_rcv_skb+0x123/0x220 [ 152.467698][ T8432] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 152.467814][ T8432] nfnetlink_rcv+0x167/0x16c0 [ 152.467842][ T8432] ? __list_del_entry_valid_or_report+0x65/0x130 [ 152.467870][ T8432] ? __rmqueue_pcplist+0x9c2/0xb90 [ 152.467948][ T8432] ? prep_new_page+0x4f/0x1f0 [ 152.467969][ T8432] ? get_page_from_freelist+0x13bd/0x1420 [ 152.467992][ T8432] ? check_xattrs+0x27f/0x7f0 [ 152.468054][ T8432] ? __ext4_sb_bread_gfp+0xd9/0x170 [ 152.468145][ T8432] ? should_fail_ex+0x30/0x280 [ 152.468170][ T8432] ? selinux_nlmsg_lookup+0x99/0x890 [ 152.468197][ T8432] ? __rcu_read_unlock+0x34/0x70 [ 152.468215][ T8432] ? __netlink_lookup+0x266/0x2a0 [ 152.468259][ T8432] netlink_unicast+0x5c0/0x690 [ 152.468344][ T8432] netlink_sendmsg+0x58b/0x6b0 [ 152.468379][ T8432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.468465][ T8432] __sock_sendmsg+0x145/0x180 [ 152.468488][ T8432] ____sys_sendmsg+0x31e/0x4a0 [ 152.468569][ T8432] ___sys_sendmsg+0x17b/0x1d0 [ 152.468612][ T8432] __x64_sys_sendmsg+0xd4/0x160 [ 152.468645][ T8432] x64_sys_call+0x17ba/0x3000 [ 152.468679][ T8432] do_syscall_64+0xca/0x2b0 [ 152.468716][ T8432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.468740][ T8432] RIP: 0033:0x7fa1edf1f749 [ 152.468756][ T8432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.468787][ T8432] RSP: 002b:00007fa1ec987038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.468809][ T8432] RAX: ffffffffffffffda RBX: 00007fa1ee175fa0 RCX: 00007fa1edf1f749 [ 152.468872][ T8432] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 152.468884][ T8432] RBP: 00007fa1edfa3f91 R08: 0000000000000000 R09: 0000000000000000 [ 152.468895][ T8432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.468905][ T8432] R13: 00007fa1ee176038 R14: 00007fa1ee175fa0 R15: 00007ffd687dd568 [ 152.468966][ T8432] [ 152.468974][ T8432] memory: usage 307200kB, limit 307200kB, failcnt 5588 [ 152.497962][ T8525] lo speed is unknown, defaulting to 1000 [ 152.500391][ T8432] memory+swap: usage 307920kB, limit 9007199254740988kB, failcnt 0 [ 152.500407][ T8432] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 152.500420][ T8432] Memory cgroup stats for [ 152.715475][ T8531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8531 comm=syz.2.1609 [ 152.718551][ T8432] /syz3: [ 152.724855][ T8432] cache 8192 [ 152.728910][ T8531] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8531 comm=syz.2.1609 [ 152.748535][ T8432] rss 0 [ 152.844624][ T8531] loop2: detected capacity change from 0 to 1024 [ 152.847253][ T8432] shmem 0 [ 152.847275][ T8432] mapped_file 0 [ 152.851692][ T8531] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 152.863112][ T8432] dirty 0 [ 152.877557][ T8531] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1609: missing EA_INODE flag [ 152.878582][ T8432] writeback 0 [ 152.878592][ T8432] workingset_refault_anon 752 [ 152.878601][ T8432] workingset_refault_file 2633 [ 152.888815][ T8531] EXT4-fs (loop2): Remounting filesystem read-only [ 152.891267][ T8432] swap 737280 [ 152.925263][ T8432] swapcached 0 [ 152.925273][ T8432] pgpgin 330831 [ 152.925281][ T8432] pgpgout 330829 [ 152.925289][ T8432] pgfault 290801 [ 152.939146][ T8432] pgmajfault 210 [ 152.942718][ T8432] inactive_anon 0 [ 152.946574][ T8432] active_anon 0 [ 152.950079][ T8432] inactive_file 8192 [ 152.953961][ T8432] active_file 0 [ 152.957845][ T8432] unevictable 0 [ 152.961631][ T8432] hierarchical_memory_limit 314572800 [ 152.967142][ T8432] hierarchical_memsw_limit 9223372036854771712 [ 152.973331][ T8432] total_cache 8192 [ 152.977092][ T8432] total_rss 0 [ 152.980386][ T8432] total_shmem 0 [ 152.983830][ T8432] total_mapped_file 0 [ 152.987797][ T8432] total_dirty 0 [ 152.991260][ T8432] total_writeback 0 [ 152.995060][ T8432] total_workingset_refault_anon 752 [ 153.000278][ T8432] total_workingset_refault_file 2633 [ 153.005982][ T8432] total_swap 737280 [ 153.009893][ T8432] total_swapcached 0 [ 153.013772][ T8432] total_pgpgin 330831 [ 153.017810][ T8432] total_pgpgout 330829 [ 153.021975][ T8432] total_pgfault 290801 [ 153.026159][ T8432] total_pgmajfault 210 [ 153.030309][ T8432] total_inactive_anon 0 [ 153.034475][ T8432] total_active_anon 0 [ 153.038437][ T8432] total_inactive_file 8192 [ 153.042859][ T8432] total_active_file 0 [ 153.046900][ T8432] total_unevictable 0 [ 153.050890][ T8432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1594,pid=8428,uid=0 [ 153.065480][ T8432] Memory cgroup out of memory: Killed process 8428 (syz.3.1594) total-vm:94100kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:128kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 153.223888][ T3376] hid-generic 0003:0004:0000.0049: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 153.417799][ T8558] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1619: error while reading EA inode 32 err=-116 [ 153.449806][ T8555] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 153.466430][ T8555] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1528 with error 28 [ 153.478946][ T8555] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.478946][ T8555] [ 153.479401][ T8558] EXT4-fs (loop3): Remounting filesystem read-only [ 153.488610][ T8555] EXT4-fs (loop2): Total free blocks count 0 [ 153.488627][ T8555] EXT4-fs (loop2): Free/Dirty block details [ 153.488638][ T8555] EXT4-fs (loop2): free_blocks=2415919104 [ 153.512705][ T8555] EXT4-fs (loop2): dirty_blocks=1536 [ 153.518049][ T8555] EXT4-fs (loop2): Block reservation details [ 153.524062][ T8555] EXT4-fs (loop2): i_reserved_data_blocks=96 [ 153.537593][ T8558] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 153.571329][ T8558] EXT4-fs (loop3): 1 orphan inode deleted [ 153.625005][ T8575] __nla_validate_parse: 9 callbacks suppressed [ 153.625066][ T8575] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 153.640404][ T8477] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 153.652684][ T8477] EXT4-fs (loop2): This should not happen!! Data will be lost [ 153.652684][ T8477] [ 153.656242][ T8575] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 153.800155][ T8580] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1623'. [ 153.941777][ T8588] FAULT_INJECTION: forcing a failure. [ 153.941777][ T8588] name failslab, interval 1, probability 0, space 0, times 0 [ 153.954589][ T8588] CPU: 1 UID: 0 PID: 8588 Comm: syz.2.1629 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.954617][ T8588] Tainted: [W]=WARN [ 153.954625][ T8588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.954638][ T8588] Call Trace: [ 153.954645][ T8588] [ 153.954654][ T8588] __dump_stack+0x1d/0x30 [ 153.954701][ T8588] dump_stack_lvl+0x95/0xd0 [ 153.954719][ T8588] dump_stack+0x15/0x1b [ 153.954735][ T8588] should_fail_ex+0x265/0x280 [ 153.954754][ T8588] should_failslab+0x8c/0xb0 [ 153.954797][ T8588] __kmalloc_noprof+0xb9/0x5a0 [ 153.954820][ T8588] ? security_sb_alloc+0x48/0x110 [ 153.954842][ T8588] security_sb_alloc+0x48/0x110 [ 153.954862][ T8588] alloc_super+0x109/0x580 [ 153.954906][ T8588] sget_fc+0x24e/0x6e0 [ 153.954964][ T8588] ? __pfx_set_anon_super_fc+0x10/0x10 [ 153.954994][ T8588] ? __pfx_mqueue_fill_super+0x10/0x10 [ 153.955016][ T8588] get_tree_nodev+0x2a/0x100 [ 153.955060][ T8588] mqueue_get_tree+0x63/0x90 [ 153.955076][ T8588] vfs_get_tree+0x57/0x1d0 [ 153.955091][ T8588] fc_mount_longterm+0x18/0xb0 [ 153.955164][ T8588] mq_init_ns+0x2cb/0x370 [ 153.955220][ T8588] copy_ipcs+0x266/0x450 [ 153.955239][ T8588] create_new_namespaces+0x12a/0x400 [ 153.955265][ T8588] unshare_nsproxy_namespaces+0xe8/0x120 [ 153.955387][ T8588] ksys_unshare+0x3d0/0x6d0 [ 153.955420][ T8588] ? ksys_write+0x192/0x1a0 [ 153.955438][ T8588] __x64_sys_unshare+0x1f/0x30 [ 153.955461][ T8588] x64_sys_call+0x2ae6/0x3000 [ 153.955488][ T8588] do_syscall_64+0xca/0x2b0 [ 153.955516][ T8588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.955555][ T8588] RIP: 0033:0x7f3307adf749 [ 153.955571][ T8588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.955668][ T8588] RSP: 002b:00007f330653f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 153.955687][ T8588] RAX: ffffffffffffffda RBX: 00007f3307d35fa0 RCX: 00007f3307adf749 [ 153.955700][ T8588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 153.955714][ T8588] RBP: 00007f330653f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.955727][ T8588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.955738][ T8588] R13: 00007f3307d36038 R14: 00007f3307d35fa0 R15: 00007fffbe99cef8 [ 153.955820][ T8588] [ 154.386158][ T8601] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1634: error while reading EA inode 32 err=-116 [ 154.432567][ T8601] EXT4-fs (loop1): Remounting filesystem read-only [ 154.449754][ T8601] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 154.469672][ T8601] EXT4-fs (loop1): 1 orphan inode deleted [ 154.552714][ T8605] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 154.602502][ T8583] syz.0.1627 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 154.607076][ T8605] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 768 with error 28 [ 154.616672][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.0.1627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.616735][ T8583] Tainted: [W]=WARN [ 154.616743][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.616755][ T8583] Call Trace: [ 154.616763][ T8583] [ 154.616823][ T8583] __dump_stack+0x1d/0x30 [ 154.616889][ T8583] dump_stack_lvl+0x95/0xd0 [ 154.616912][ T8583] dump_stack+0x15/0x1b [ 154.616931][ T8583] dump_header+0x81/0x240 [ 154.616984][ T8583] oom_kill_process+0x295/0x350 [ 154.617008][ T8583] out_of_memory+0x97b/0xb80 [ 154.617032][ T8583] try_charge_memcg+0x610/0xa10 [ 154.617112][ T8583] obj_cgroup_charge_pages+0xa6/0x150 [ 154.617143][ T8583] __memcg_kmem_charge_page+0x9f/0x170 [ 154.617247][ T8583] __alloc_frozen_pages_noprof+0x18f/0x360 [ 154.617279][ T8583] alloc_pages_mpol+0xb3/0x260 [ 154.617343][ T8583] alloc_pages_noprof+0x90/0x130 [ 154.617396][ T8583] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 154.617441][ T8583] __kvmalloc_node_noprof+0x492/0x6b0 [ 154.617468][ T8583] ? ip_set_alloc+0x24/0x30 [ 154.617562][ T8583] ? ip_set_alloc+0x24/0x30 [ 154.617593][ T8583] ip_set_alloc+0x24/0x30 [ 154.617679][ T8583] hash_netiface_create+0x282/0x740 [ 154.617711][ T8583] ? __pfx_hash_netiface_create+0x10/0x10 [ 154.617743][ T8583] ip_set_create+0x3cc/0x970 [ 154.617763][ T8583] ? __nla_validate_parse+0xa31/0x1d00 [ 154.617812][ T8583] ? __nla_parse+0x40/0x60 [ 154.617838][ T8583] nfnetlink_rcv_msg+0x4c6/0x590 [ 154.617881][ T8583] netlink_rcv_skb+0x123/0x220 [ 154.617911][ T8583] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 154.618013][ T8583] nfnetlink_rcv+0x167/0x16c0 [ 154.618115][ T8583] ? __list_del_entry_valid_or_report+0x65/0x130 [ 154.618148][ T8583] ? __rmqueue_pcplist+0x9c2/0xb90 [ 154.618191][ T8583] ? find_get_entry+0x374/0x380 [ 154.618224][ T8583] ? should_failslab+0x52/0xb0 [ 154.618253][ T8583] ? kcsan_setup_watchpoint+0x406/0x420 [ 154.618284][ T8583] ? should_fail_ex+0x30/0x280 [ 154.618308][ T8583] ? selinux_nlmsg_lookup+0x99/0x890 [ 154.618410][ T8583] ? __rcu_read_unlock+0x34/0x70 [ 154.618436][ T8583] ? __netlink_lookup+0x266/0x2a0 [ 154.618470][ T8583] netlink_unicast+0x5c0/0x690 [ 154.618535][ T8583] netlink_sendmsg+0x58b/0x6b0 [ 154.618568][ T8583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.618599][ T8583] __sock_sendmsg+0x145/0x180 [ 154.618661][ T8583] ____sys_sendmsg+0x31e/0x4a0 [ 154.618690][ T8583] ___sys_sendmsg+0x17b/0x1d0 [ 154.618728][ T8583] __x64_sys_sendmsg+0xd4/0x160 [ 154.618840][ T8583] x64_sys_call+0x17ba/0x3000 [ 154.618935][ T8583] do_syscall_64+0xca/0x2b0 [ 154.618970][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.618992][ T8583] RIP: 0033:0x7f056523f749 [ 154.619036][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.619055][ T8583] RSP: 002b:00007f0563c9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.619075][ T8583] RAX: ffffffffffffffda RBX: 00007f0565495fa0 RCX: 00007f056523f749 [ 154.619089][ T8583] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.619151][ T8583] RBP: 00007f05652c3f91 R08: 0000000000000000 R09: 0000000000000000 [ 154.619172][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.619185][ T8583] R13: 00007f0565496038 R14: 00007f0565495fa0 R15: 00007ffc7cd3c738 [ 154.619204][ T8583] [ 154.619211][ T8583] memory: usage 307048kB, limit 307200kB, failcnt 5599 [ 154.628967][ T8605] EXT4-fs (loop4): This should not happen!! Data will be lost [ 154.628967][ T8605] [ 154.629033][ T8605] EXT4-fs (loop4): Total free blocks count 0 [ 154.640283][ T8583] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 154.640298][ T8583] kmem: usage 306956kB, limit 9007199254740988kB, failcnt 0 [ 154.640309][ T8583] Memory cgroup stats for /syz0: [ 154.641196][ T8583] cache 77824 [ 154.644304][ T8605] EXT4-fs (loop4): Free/Dirty block details [ 154.654384][ T8583] rss 0 [ 154.657658][ T8605] EXT4-fs (loop4): free_blocks=2415919104 [ 154.660575][ T8583] shmem 0 [ 154.660583][ T8583] mapped_file 0 [ 154.660590][ T8583] dirty 0 [ 154.660597][ T8583] writeback 0 [ 154.664897][ T8605] EXT4-fs (loop4): dirty_blocks=784 [ 154.669370][ T8583] workingset_refault_anon 821 [ 154.673518][ T8605] EXT4-fs (loop4): Block reservation details [ 154.673530][ T8605] EXT4-fs (loop4): i_reserved_data_blocks=49 [ 154.692612][ T8618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1640'. [ 154.697696][ T8583] workingset_refault_file 6473 [ 154.711921][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 154.711934][ T29] audit: type=1326 audit(1766387973.938:14041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.713851][ T8583] swap 688128 [ 154.718715][ T29] audit: type=1326 audit(1766387973.938:14042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.724602][ T8583] swapcached 12288 [ 154.724611][ T8583] pgpgin 193148 [ 154.724618][ T8583] pgpgout 193125 [ 154.724625][ T8583] pgfault 208491 [ 154.724632][ T8583] pgmajfault 332 [ 154.724640][ T8583] inactive_anon 4096 [ 154.730101][ T29] audit: type=1326 audit(1766387973.938:14043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.734554][ T8583] active_anon 8192 [ 154.739031][ T29] audit: type=1326 audit(1766387973.938:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.743352][ T8583] inactive_file 73728 [ 154.743361][ T8583] active_file 8192 [ 154.743368][ T8583] unevictable 0 [ 154.743376][ T8583] hierarchical_memory_limit 314572800 [ 154.743384][ T8583] hierarchical_memsw_limit 9223372036854771712 [ 154.743392][ T8583] total_cache 77824 [ 154.743398][ T8583] total_rss 0 [ 154.748577][ T29] audit: type=1326 audit(1766387973.938:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.754289][ T8583] total_shmem 0 [ 154.754298][ T8583] total_mapped_file 0 [ 154.758872][ T29] audit: type=1326 audit(1766387973.938:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.764331][ T8583] total_dirty 0 [ 154.768725][ T29] audit: type=1326 audit(1766387973.938:14047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.773647][ T8583] total_writeback 0 [ 154.778382][ T29] audit: type=1326 audit(1766387973.938:14048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.783834][ T8583] total_workingset_refault_anon 821 [ 154.783845][ T8583] total_workingset_refault_file 6473 [ 154.783854][ T8583] total_swap 688128 [ 154.788505][ T29] audit: type=1326 audit(1766387973.938:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.794854][ T8583] total_swapcached 12288 [ 154.794864][ T8583] total_pgpgin 193148 [ 154.794871][ T8583] total_pgpgout 193125 [ 154.794878][ T8583] total_pgfault 208491 [ 154.794884][ T8583] total_pgmajfault 332 [ 154.794891][ T8583] total_inactive_anon 4096 [ 154.800016][ T29] audit: type=1326 audit(1766387973.938:14050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8604 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f77c2f749 code=0x7ffc0000 [ 154.804823][ T8583] total_active_anon 8192 [ 154.897674][ T9] hid_parser_main: 30 callbacks suppressed [ 154.897693][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x7 [ 154.908699][ T8583] total_inactive_file 73728 [ 154.908710][ T8583] total_active_file 8192 [ 154.908720][ T8583] total_unevictable 0 [ 154.908787][ T8583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0 [ 154.917240][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 154.925184][ T8583] ,oom_memcg=/syz0 [ 154.933163][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 154.941142][ T8583] ,task_memcg=/syz0,task=syz.0.1627,pid=8582,uid=0 [ 154.941184][ T8583] Memory cgroup out of memory: Killed process 8582 (syz.0.1627) total-vm:94100kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 154.949181][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 154.949203][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 154.949226][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 155.140705][ T8620] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.143089][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 155.170873][ T8627] FAULT_INJECTION: forcing a failure. [ 155.170873][ T8627] name failslab, interval 1, probability 0, space 0, times 0 [ 155.174471][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 155.197801][ T8627] CPU: 1 UID: 0 PID: 8627 Comm: syz.2.1642 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.197834][ T8627] Tainted: [W]=WARN [ 155.197840][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.197852][ T8627] Call Trace: [ 155.197859][ T8627] [ 155.197867][ T8627] __dump_stack+0x1d/0x30 [ 155.197890][ T8627] dump_stack_lvl+0x95/0xd0 [ 155.197915][ T8627] dump_stack+0x15/0x1b [ 155.197933][ T8627] should_fail_ex+0x265/0x280 [ 155.197955][ T8627] should_failslab+0x8c/0xb0 [ 155.197977][ T8627] __kmalloc_cache_noprof+0x65/0x4c0 [ 155.198003][ T8627] ? sctp_association_new+0x71/0x1190 [ 155.198090][ T8627] sctp_association_new+0x71/0x1190 [ 155.198137][ T8627] ? sctp_has_association+0x7a/0xa0 [ 155.198157][ T8627] ? sctp_v4_scope+0x140/0x150 [ 155.198183][ T8627] sctp_connect_new_asoc+0x1a8/0x3a0 [ 155.198277][ T8627] sctp_sendmsg+0xf10/0x18d0 [ 155.198306][ T8627] ? selinux_socket_sendmsg+0x101/0x1b0 [ 155.198451][ T8627] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.198477][ T8627] inet_sendmsg+0xc5/0xd0 [ 155.198500][ T8627] __sock_sendmsg+0x102/0x180 [ 155.198521][ T8627] ____sys_sendmsg+0x31e/0x4a0 [ 155.198622][ T8627] ___sys_sendmsg+0x17b/0x1d0 [ 155.198683][ T8627] __x64_sys_sendmsg+0xd4/0x160 [ 155.198713][ T8627] x64_sys_call+0x17ba/0x3000 [ 155.198736][ T8627] do_syscall_64+0xca/0x2b0 [ 155.198768][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.198841][ T8627] RIP: 0033:0x7f3307adf749 [ 155.198857][ T8627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.198875][ T8627] RSP: 002b:00007f330653f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.198895][ T8627] RAX: ffffffffffffffda RBX: 00007f3307d35fa0 RCX: 00007f3307adf749 [ 155.198908][ T8627] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000005 [ 155.198920][ T8627] RBP: 00007f330653f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.198932][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.198963][ T8627] R13: 00007f3307d36038 R14: 00007f3307d35fa0 R15: 00007fffbe99cef8 [ 155.198982][ T8627] [ 155.240428][ T8620] EXT4-fs (loop1): 1 truncate cleaned up [ 155.251543][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 155.316835][ T8632] capability: warning: `syz.2.1644' uses 32-bit capabilities (legacy support in use) [ 155.337638][ T9] hid-generic 0003:0004:0000.004A: unknown main item tag 0x0 [ 155.821632][ T9] hid-generic 0003:0004:0000.004A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 155.899601][ T8507] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 155.912008][ T8507] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.912008][ T8507] [ 155.931408][ T8640] set_capacity_and_notify: 6 callbacks suppressed [ 155.931424][ T8640] loop2: detected capacity change from 0 to 2048 [ 155.957067][ T8645] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1647'. [ 156.007014][ T8653] loop4: detected capacity change from 0 to 512 [ 156.034619][ T8653] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1652: error while reading EA inode 32 err=-116 [ 156.039820][ T8656] loop3: detected capacity change from 0 to 1024 [ 156.047319][ T8653] EXT4-fs (loop4): Remounting filesystem read-only [ 156.053431][ T8640] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 156.060342][ T8653] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 156.075670][ T8656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.085452][ T8653] EXT4-fs (loop4): 1 orphan inode deleted [ 156.091997][ T8640] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1004 with error 28 [ 156.109667][ T8640] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.109667][ T8640] [ 156.119397][ T8640] EXT4-fs (loop2): Total free blocks count 0 [ 156.125419][ T8640] EXT4-fs (loop2): Free/Dirty block details [ 156.131444][ T8640] EXT4-fs (loop2): free_blocks=2415919104 [ 156.137187][ T8640] EXT4-fs (loop2): dirty_blocks=1008 [ 156.142597][ T8640] EXT4-fs (loop2): Block reservation details [ 156.148613][ T8640] EXT4-fs (loop2): i_reserved_data_blocks=63 [ 156.285773][ T8664] FAULT_INJECTION: forcing a failure. [ 156.285773][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.298935][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.4.1654 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.298963][ T8664] Tainted: [W]=WARN [ 156.299030][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.299042][ T8664] Call Trace: [ 156.299049][ T8664] [ 156.299057][ T8664] __dump_stack+0x1d/0x30 [ 156.299163][ T8664] dump_stack_lvl+0x95/0xd0 [ 156.299182][ T8664] dump_stack+0x15/0x1b [ 156.299198][ T8664] should_fail_ex+0x265/0x280 [ 156.299218][ T8664] should_fail+0xb/0x20 [ 156.299234][ T8664] should_fail_usercopy+0x1a/0x20 [ 156.299267][ T8664] _copy_from_user+0x1c/0xb0 [ 156.299289][ T8664] __io_register_rsrc_update+0x268/0xac0 [ 156.299315][ T8664] ? get_pid_task+0x96/0xd0 [ 156.299491][ T8664] ? should_fail_ex+0xdb/0x280 [ 156.299511][ T8664] io_register_rsrc_update+0x10a/0x120 [ 156.299535][ T8664] __se_sys_io_uring_register+0x9bd/0xf20 [ 156.299587][ T8664] ? fput+0x8f/0xc0 [ 156.299609][ T8664] ? ksys_write+0x192/0x1a0 [ 156.299638][ T8664] __x64_sys_io_uring_register+0x55/0x70 [ 156.299659][ T8664] x64_sys_call+0x27ad/0x3000 [ 156.299705][ T8664] do_syscall_64+0xca/0x2b0 [ 156.299732][ T8664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.299751][ T8664] RIP: 0033:0x7f5f77c2f749 [ 156.299764][ T8664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.299851][ T8664] RSP: 002b:00007f5f7668f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 156.299868][ T8664] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2f749 [ 156.299879][ T8664] RDX: 0000200000000600 RSI: 0000000000000010 RDI: 0000000000000003 [ 156.299889][ T8664] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.299900][ T8664] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 156.299980][ T8664] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 156.299996][ T8664] [ 156.524436][ T8492] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 156.536830][ T8492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 156.536830][ T8492] [ 156.587263][ T3315] EXT4-fs unmount: 58 callbacks suppressed [ 156.627600][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'. [ 156.636739][ T8671] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1657'. [ 156.645742][ T8671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1657'. [ 156.903611][ T8675] loop2: detected capacity change from 0 to 512 [ 156.910447][ T8675] EXT4-fs: Ignoring removed i_version option [ 156.916655][ T8675] EXT4-fs: Ignoring removed bh option [ 157.040653][ T8676] loop1: detected capacity change from 0 to 2048 [ 157.345139][ T8675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.358236][ T8675] ext4 filesystem being mounted at /329/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.456528][ T8676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 157.511114][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.545438][ T8676] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.562794][ T8676] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1472 with error 28 [ 157.575409][ T8676] EXT4-fs (loop1): This should not happen!! Data will be lost [ 157.575409][ T8676] [ 157.585202][ T8676] EXT4-fs (loop1): Total free blocks count 0 [ 157.591230][ T8676] EXT4-fs (loop1): Free/Dirty block details [ 157.597131][ T8676] EXT4-fs (loop1): free_blocks=2415919104 [ 157.602966][ T8676] EXT4-fs (loop1): dirty_blocks=1488 [ 157.608295][ T8676] EXT4-fs (loop1): Block reservation details [ 157.614332][ T8676] EXT4-fs (loop1): i_reserved_data_blocks=93 [ 157.641864][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.666483][ T3376] hid-generic 0003:0004:0000.004B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 157.687849][ T8689] loop2: detected capacity change from 0 to 2048 [ 157.771900][ T8689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 157.886319][ T8705] loop4: detected capacity change from 0 to 512 [ 157.894739][ T8689] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.927764][ T8705] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1668: error while reading EA inode 32 err=-116 [ 157.959959][ T8689] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 874 with error 28 [ 157.972437][ T8689] EXT4-fs (loop2): This should not happen!! Data will be lost [ 157.972437][ T8689] [ 157.972455][ T8689] EXT4-fs (loop2): Total free blocks count 0 [ 157.972470][ T8689] EXT4-fs (loop2): Free/Dirty block details [ 157.972483][ T8689] EXT4-fs (loop2): free_blocks=2415919104 [ 157.972497][ T8689] EXT4-fs (loop2): dirty_blocks=880 [ 157.972557][ T8689] EXT4-fs (loop2): Block reservation details [ 157.972582][ T8689] EXT4-fs (loop2): i_reserved_data_blocks=55 [ 157.972890][ T8705] EXT4-fs (loop4): Remounting filesystem read-only [ 157.972908][ T8705] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 157.973032][ T8705] EXT4-fs (loop4): 1 orphan inode deleted [ 157.973465][ T8705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.983630][ T8705] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.054139][ T8477] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 158.110443][ T8721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1675'. [ 158.133989][ T8477] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 158.154413][ T8723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8723 comm=syz.1.1673 [ 158.166918][ T8723] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8723 comm=syz.1.1673 [ 158.191914][ T8723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1673'. [ 158.269277][ T8723] loop1: detected capacity change from 0 to 1024 [ 158.281632][ T8734] netlink: 'syz.4.1680': attribute type 39 has an invalid length. [ 158.294584][ T8723] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 158.308291][ T8740] FAULT_INJECTION: forcing a failure. [ 158.308291][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.321681][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.3.1681 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.321709][ T8740] Tainted: [W]=WARN [ 158.321716][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.321729][ T8740] Call Trace: [ 158.321737][ T8740] [ 158.321746][ T8740] __dump_stack+0x1d/0x30 [ 158.321766][ T8740] dump_stack_lvl+0x95/0xd0 [ 158.321779][ T8740] dump_stack+0x15/0x1b [ 158.321797][ T8740] should_fail_ex+0x265/0x280 [ 158.321811][ T8740] should_fail+0xb/0x20 [ 158.321821][ T8740] should_fail_usercopy+0x1a/0x20 [ 158.321916][ T8740] _copy_to_user+0x20/0xa0 [ 158.321988][ T8740] simple_read_from_buffer+0xb5/0x130 [ 158.322032][ T8740] proc_fail_nth_read+0x10e/0x150 [ 158.322049][ T8740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.322133][ T8740] vfs_read+0x1a8/0x770 [ 158.322143][ T8740] ? __rcu_read_unlock+0x4f/0x70 [ 158.322155][ T8740] ? __fget_files+0x184/0x1c0 [ 158.322167][ T8740] ? mutex_lock+0x58/0x90 [ 158.322182][ T8740] ksys_read+0xda/0x1a0 [ 158.322220][ T8740] __x64_sys_read+0x40/0x50 [ 158.322231][ T8740] x64_sys_call+0x2889/0x3000 [ 158.322245][ T8740] do_syscall_64+0xca/0x2b0 [ 158.322281][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.322293][ T8740] RIP: 0033:0x7fa1edf1e15c [ 158.322310][ T8740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.322320][ T8740] RSP: 002b:00007fa1ec987030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.322332][ T8740] RAX: ffffffffffffffda RBX: 00007fa1ee175fa0 RCX: 00007fa1edf1e15c [ 158.322339][ T8740] RDX: 000000000000000f RSI: 00007fa1ec9870a0 RDI: 0000000000000004 [ 158.322359][ T8740] RBP: 00007fa1ec987090 R08: 0000000000000000 R09: 0000000000000000 [ 158.322366][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.322373][ T8740] R13: 00007fa1ee176038 R14: 00007fa1ee175fa0 R15: 00007ffd687dd568 [ 158.322384][ T8740] [ 158.538872][ T8723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.555064][ T8723] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.1673: missing EA_INODE flag [ 158.572539][ T36] hid-generic 0003:0004:0000.004C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 158.589722][ T8723] EXT4-fs (loop1): Remounting filesystem read-only [ 158.692018][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.991433][ T8775] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 159.009317][ T8775] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 159.020018][ T8773] SELinux: failed to load policy [ 159.034490][ T36] hid-generic 0003:0004:0000.004D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 159.233203][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1693'. [ 159.265598][ T8492] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.478902][ T8805] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 159.494641][ T8805] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 159.496939][ T8803] loop1: detected capacity change from 0 to 512 [ 159.513639][ T8803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1706: error while reading EA inode 32 err=-116 [ 159.528398][ T8803] EXT4-fs (loop1): Remounting filesystem read-only [ 159.534993][ T8803] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 159.545672][ T8803] EXT4-fs (loop1): 1 orphan inode deleted [ 159.552950][ T8803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.555924][ T8810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.574282][ T8803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.637809][ T8820] loop1: detected capacity change from 0 to 1024 [ 159.647635][ T8820] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.659596][ T8820] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 1: comm syz.1.1713: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.673986][ T8820] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1713: Failed to acquire dquot type 0 [ 159.687181][ T8820] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1713: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.701355][ T8820] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1713: Invalid inode bitmap blk 0 in block_group 0 [ 159.712899][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 159.712961][ T29] audit: type=1326 audit(1766387978.968:14679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.715967][ T8820] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 159.721010][ T29] audit: type=1326 audit(1766387978.978:14680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.743767][ T8492] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.753101][ T8820] EXT4-fs (loop1): 1 orphan inode deleted [ 159.798970][ T8492] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 159.799219][ T8820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.807460][ T8492] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 0 [ 159.831996][ T29] audit: type=1326 audit(1766387979.048:14681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 159.855827][ T29] audit: type=1326 audit(1766387979.048:14682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 159.879317][ T29] audit: type=1326 audit(1766387979.048:14683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8826 comm="syz.0.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 159.902803][ T29] audit: type=1326 audit(1766387979.078:14684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.926280][ T29] audit: type=1326 audit(1766387979.078:14685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.949857][ T29] audit: type=1326 audit(1766387979.078:14686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.973497][ T29] audit: type=1326 audit(1766387979.078:14687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.2.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 159.997992][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.073861][ T8840] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1721'. [ 160.168218][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1728'. [ 160.177264][ T8857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1728'. [ 160.186230][ T8857] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1728'. [ 160.200293][ T8858] FAULT_INJECTION: forcing a failure. [ 160.200293][ T8858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.213521][ T8858] CPU: 0 UID: 0 PID: 8858 Comm: syz.4.1725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.213583][ T8858] Tainted: [W]=WARN [ 160.213668][ T8858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.213682][ T8858] Call Trace: [ 160.213689][ T8858] [ 160.213697][ T8858] __dump_stack+0x1d/0x30 [ 160.213721][ T8858] dump_stack_lvl+0x95/0xd0 [ 160.213775][ T8858] dump_stack+0x15/0x1b [ 160.213791][ T8858] should_fail_ex+0x265/0x280 [ 160.213814][ T8858] should_fail+0xb/0x20 [ 160.213834][ T8858] should_fail_usercopy+0x1a/0x20 [ 160.213860][ T8858] _copy_from_user+0x1c/0xb0 [ 160.213950][ T8858] ___sys_sendmsg+0xc1/0x1d0 [ 160.213989][ T8858] __x64_sys_sendmsg+0xd4/0x160 [ 160.214065][ T8858] x64_sys_call+0x17ba/0x3000 [ 160.214085][ T8858] do_syscall_64+0xca/0x2b0 [ 160.214116][ T8858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.214176][ T8858] RIP: 0033:0x7f5f77c2f749 [ 160.214193][ T8858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.214269][ T8858] RSP: 002b:00007f5f7666e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.214289][ T8858] RAX: ffffffffffffffda RBX: 00007f5f77e86090 RCX: 00007f5f77c2f749 [ 160.214300][ T8858] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 160.214311][ T8858] RBP: 00007f5f7666e090 R08: 0000000000000000 R09: 0000000000000000 [ 160.214322][ T8858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.214350][ T8858] R13: 00007f5f77e86128 R14: 00007f5f77e86090 R15: 00007fffdae93978 [ 160.214370][ T8858] [ 160.831850][ T8863] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1729'. [ 160.984047][ T8868] loop4: detected capacity change from 0 to 512 [ 161.051197][ T8870] loop2: detected capacity change from 0 to 512 [ 161.058167][ T8870] EXT4-fs: Ignoring removed i_version option [ 161.064242][ T8870] EXT4-fs: Ignoring removed bh option [ 161.319617][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 161.325645][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.344132][ T8868] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.1731: error while reading EA inode 32 err=-116 [ 161.358929][ T8870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.372277][ T8870] ext4 filesystem being mounted at /338/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.427242][ T8868] EXT4-fs (loop4): Remounting filesystem read-only [ 161.442684][ T8868] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 161.478554][ T8868] EXT4-fs (loop4): 1 orphan inode deleted [ 161.503088][ T8868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.526307][ T8868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.370453][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.573382][ T8906] lo speed is unknown, defaulting to 1000 [ 162.649911][ T8913] loop2: detected capacity change from 0 to 512 [ 162.656564][ T8913] EXT4-fs: Ignoring removed i_version option [ 162.662660][ T8913] EXT4-fs: Ignoring removed bh option [ 162.815013][ T8913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.827983][ T8913] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.282029][ T8939] loop1: detected capacity change from 0 to 1024 [ 163.296047][ T8939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.310406][ T1039] hid_parser_main: 30 callbacks suppressed [ 163.310423][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x7 [ 163.323857][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.331267][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.338780][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.346245][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.353762][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.361167][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.368545][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.376039][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.383446][ T1039] hid-generic 0003:0004:0000.004E: unknown main item tag 0x0 [ 163.434391][ T8939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.531238][ T1039] hid-generic 0003:0004:0000.004E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 164.056980][ T8959] lo speed is unknown, defaulting to 1000 [ 164.169027][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.230828][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.257297][ T8968] netlink: 'syz.3.1763': attribute type 29 has an invalid length. [ 164.348410][ T8978] __nla_validate_parse: 5 callbacks suppressed [ 164.348423][ T8978] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 164.387977][ T8978] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 164.409031][ T8985] loop3: detected capacity change from 0 to 512 [ 164.432642][ T8985] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1770: error while reading EA inode 32 err=-116 [ 164.449346][ T8985] EXT4-fs (loop3): Remounting filesystem read-only [ 164.456192][ T8985] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 164.466523][ T8985] EXT4-fs (loop3): 1 orphan inode deleted [ 164.473484][ T8985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.500395][ T8985] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.585620][ T8997] lo speed is unknown, defaulting to 1000 [ 164.635281][ T9006] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1777'. [ 164.714106][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1778'. [ 164.723212][ T9010] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1778'. [ 164.732268][ T9010] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1778'. [ 164.741546][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 164.741636][ T29] audit: type=1326 audit(1766387983.968:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 164.771322][ T29] audit: type=1326 audit(1766387983.968:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 164.795512][ T29] audit: type=1326 audit(1766387983.978:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 164.819322][ T29] audit: type=1326 audit(1766387983.978:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.2.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3307adf749 code=0x7ffc0000 [ 164.822447][ T9012] loop3: detected capacity change from 0 to 1024 [ 164.851313][ T9012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.976875][ T9012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.992911][ T9019] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 165.064388][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1783'. [ 165.085464][ T9022] loop4: detected capacity change from 0 to 512 [ 165.092601][ T9022] EXT4-fs: Ignoring removed i_version option [ 165.098686][ T9022] EXT4-fs: Ignoring removed bh option [ 165.191751][ T9022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.204491][ T9022] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.489619][ T29] audit: type=1326 audit(1766387984.728:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.513323][ T29] audit: type=1326 audit(1766387984.728:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.536805][ T29] audit: type=1326 audit(1766387984.738:15015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.560330][ T29] audit: type=1326 audit(1766387984.738:15016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.583830][ T29] audit: type=1326 audit(1766387984.738:15017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.756919][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 165.791676][ T9035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 165.903542][ T29] audit: type=1326 audit(1766387984.968:15018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.0.1786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f056523f749 code=0x7ffc0000 [ 165.948198][ T9038] lo speed is unknown, defaulting to 1000 [ 166.633595][ T9019] Can't find ip_set type hash:m [ 166.678925][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.741728][ T9056] loop2: detected capacity change from 0 to 1024 [ 166.753774][ T9058] loop1: detected capacity change from 0 to 128 [ 166.767390][ T9056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.801700][ T9056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.926412][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.020783][ T9080] hsr_slave_0: left promiscuous mode [ 167.026680][ T9080] hsr_slave_1: left promiscuous mode [ 167.111638][ T9083] netlink: 'syz.1.1806': attribute type 13 has an invalid length. [ 167.463995][ T9056] syz.2.1796 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 167.478155][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.2.1796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.478192][ T9056] Tainted: [W]=WARN [ 167.478199][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.478289][ T9056] Call Trace: [ 167.478297][ T9056] [ 167.478306][ T9056] __dump_stack+0x1d/0x30 [ 167.478334][ T9056] dump_stack_lvl+0x95/0xd0 [ 167.478357][ T9056] dump_stack+0x15/0x1b [ 167.478428][ T9056] dump_header+0x81/0x240 [ 167.478452][ T9056] oom_kill_process+0x295/0x350 [ 167.478482][ T9056] out_of_memory+0x97b/0xb80 [ 167.478508][ T9056] try_charge_memcg+0x610/0xa10 [ 167.478613][ T9056] obj_cgroup_charge_pages+0xa6/0x150 [ 167.478643][ T9056] __memcg_kmem_charge_page+0x9f/0x170 [ 167.478707][ T9056] __alloc_frozen_pages_noprof+0x18f/0x360 [ 167.478742][ T9056] alloc_pages_mpol+0xb3/0x260 [ 167.478775][ T9056] alloc_pages_noprof+0x90/0x130 [ 167.478845][ T9056] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 167.478887][ T9056] __kvmalloc_node_noprof+0x492/0x6b0 [ 167.478915][ T9056] ? ip_set_alloc+0x24/0x30 [ 167.478942][ T9056] ? ip_set_alloc+0x24/0x30 [ 167.479021][ T9056] ip_set_alloc+0x24/0x30 [ 167.479051][ T9056] hash_netiface_create+0x282/0x740 [ 167.479084][ T9056] ? __pfx_hash_netiface_create+0x10/0x10 [ 167.479168][ T9056] ip_set_create+0x3cc/0x970 [ 167.479198][ T9056] ? __nla_parse+0x40/0x60 [ 167.479227][ T9056] nfnetlink_rcv_msg+0x4c6/0x590 [ 167.479276][ T9056] netlink_rcv_skb+0x123/0x220 [ 167.479303][ T9056] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.479407][ T9056] nfnetlink_rcv+0x167/0x16c0 [ 167.479433][ T9056] ? __list_del_entry_valid_or_report+0x65/0x130 [ 167.479470][ T9056] ? __rmqueue_pcplist+0x9c2/0xb90 [ 167.479584][ T9056] ? prep_new_page+0x4f/0x1f0 [ 167.479611][ T9056] ? get_page_from_freelist+0x13bd/0x1420 [ 167.479672][ T9056] ? check_xattrs+0x27f/0x7f0 [ 167.479699][ T9056] ? should_fail_ex+0x30/0x280 [ 167.479719][ T9056] ? selinux_nlmsg_lookup+0x99/0x890 [ 167.479783][ T9056] ? __rcu_read_unlock+0x34/0x70 [ 167.479811][ T9056] ? __netlink_lookup+0x266/0x2a0 [ 167.479840][ T9056] netlink_unicast+0x5c0/0x690 [ 167.479952][ T9056] netlink_sendmsg+0x58b/0x6b0 [ 167.479989][ T9056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.480021][ T9056] __sock_sendmsg+0x145/0x180 [ 167.480044][ T9056] ____sys_sendmsg+0x31e/0x4a0 [ 167.480125][ T9056] ___sys_sendmsg+0x17b/0x1d0 [ 167.480190][ T9056] __x64_sys_sendmsg+0xd4/0x160 [ 167.480225][ T9056] x64_sys_call+0x17ba/0x3000 [ 167.480252][ T9056] do_syscall_64+0xca/0x2b0 [ 167.480305][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.480329][ T9056] RIP: 0033:0x7f3307adf749 [ 167.480346][ T9056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.480365][ T9056] RSP: 002b:00007f330653f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.480407][ T9056] RAX: ffffffffffffffda RBX: 00007f3307d35fa0 RCX: 00007f3307adf749 [ 167.480422][ T9056] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 167.480436][ T9056] RBP: 00007f3307b63f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.480451][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.480477][ T9056] R13: 00007f3307d36038 R14: 00007f3307d35fa0 R15: 00007fffbe99cef8 [ 167.480547][ T9056] [ 167.804471][ T9056] memory: usage 307200kB, limit 307200kB, failcnt 8556 [ 167.811392][ T9056] memory+swap: usage 307900kB, limit 9007199254740988kB, failcnt 0 [ 167.819270][ T9056] kmem: usage 307148kB, limit 9007199254740988kB, failcnt 0 [ 167.826565][ T9056] Memory cgroup stats for /syz2: [ 167.826886][ T9056] cache 20480 [ 167.835073][ T9056] rss 8192 [ 167.838146][ T9056] shmem 0 [ 167.841105][ T9056] mapped_file 0 [ 167.844558][ T9056] dirty 0 [ 167.847470][ T9056] writeback 8192 [ 167.851021][ T9056] workingset_refault_anon 998 [ 167.855686][ T9056] workingset_refault_file 5707 [ 167.860457][ T9056] swap 716800 [ 167.863736][ T9056] swapcached 20480 [ 167.867447][ T9056] pgpgin 272186 [ 167.870930][ T9056] pgpgout 272175 [ 167.874471][ T9056] pgfault 272873 [ 167.878010][ T9056] pgmajfault 368 [ 167.881565][ T9056] inactive_anon 8192 [ 167.885453][ T9056] active_anon 12288 [ 167.889275][ T9056] inactive_file 0 [ 167.892920][ T9056] active_file 24576 [ 167.896775][ T9056] unevictable 0 [ 167.900300][ T9056] hierarchical_memory_limit 314572800 [ 167.905717][ T9056] hierarchical_memsw_limit 9223372036854771712 [ 167.911912][ T9056] total_cache 20480 [ 167.915854][ T9056] total_rss 8192 [ 167.919391][ T9056] total_shmem 0 [ 167.922932][ T9056] total_mapped_file 0 [ 167.926894][ T9056] total_dirty 0 [ 167.930367][ T9056] total_writeback 8192 [ 167.934422][ T9056] total_workingset_refault_anon 998 [ 167.939634][ T9056] total_workingset_refault_file 5707 [ 167.944918][ T9056] total_swap 716800 [ 167.944929][ T9056] total_swapcached 20480 [ 167.944937][ T9056] total_pgpgin 272186 [ 167.957041][ T9056] total_pgpgout 272175 [ 167.961121][ T9056] total_pgfault 272873 [ 167.965181][ T9056] total_pgmajfault 368 [ 167.969250][ T9056] total_inactive_anon 8192 [ 167.973730][ T9056] total_active_anon 12288 [ 167.978050][ T9056] total_inactive_file 0 [ 167.982263][ T9056] total_active_file 24576 [ 167.986585][ T9056] total_unevictable 0 [ 167.990588][ T9056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1796,pid=9055,uid=0 [ 168.005202][ T9056] Memory cgroup out of memory: Killed process 9055 (syz.2.1796) total-vm:94100kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 168.023887][ T9066] Can't find ip_set type has [ 168.084127][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.223350][ T9099] loop3: detected capacity change from 0 to 1024 [ 168.237233][ T9099] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.255490][ T9099] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #3: block 1: comm syz.3.1811: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.280682][ T1039] hid-generic 0003:0004:0000.004F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 168.282532][ T9099] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1811: Failed to acquire dquot type 0 [ 168.360340][ T9099] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1811: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.395131][ T9099] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1811: Invalid inode bitmap blk 0 in block_group 0 [ 168.419700][ T9099] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 168.428340][ T42] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 168.451694][ T9099] EXT4-fs (loop3): 1 orphan inode deleted [ 168.462255][ T42] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 0 [ 168.465624][ T9099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.532802][ T9099] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.554590][ T9118] loop2: detected capacity change from 0 to 512 [ 168.561281][ T9118] EXT4-fs: Ignoring removed i_version option [ 168.567270][ T9118] EXT4-fs: Ignoring removed bh option [ 168.642877][ T9118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.655861][ T9118] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.522963][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.881529][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.920502][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 169.920518][ T29] audit: type=1326 audit(1766387989.178:15157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 169.954231][ T9134] __nla_validate_parse: 9 callbacks suppressed [ 169.954245][ T9134] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 169.960879][ T9131] loop3: detected capacity change from 0 to 512 [ 169.975425][ T29] audit: type=1326 audit(1766387989.208:15158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 169.999021][ T29] audit: type=1326 audit(1766387989.208:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.022593][ T29] audit: type=1326 audit(1766387989.208:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.046718][ T29] audit: type=1326 audit(1766387989.208:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.070331][ T29] audit: type=1326 audit(1766387989.208:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.080587][ T9134] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 170.093769][ T29] audit: type=1326 audit(1766387989.208:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.125726][ T29] audit: type=1326 audit(1766387989.208:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.136784][ T9131] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1820: error while reading EA inode 32 err=-116 [ 170.149210][ T29] audit: type=1326 audit(1766387989.208:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.161643][ T9131] EXT4-fs (loop3): Remounting filesystem read-only [ 170.184903][ T29] audit: type=1326 audit(1766387989.208:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9130 comm="syz.1.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 170.191405][ T9131] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 170.225344][ T9131] EXT4-fs (loop3): 1 orphan inode deleted [ 170.245706][ T9131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.258196][ T9141] loop1: detected capacity change from 0 to 512 [ 170.277278][ T9131] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.292495][ T9141] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1824: error while reading EA inode 32 err=-116 [ 170.341495][ T9144] lo speed is unknown, defaulting to 1000 [ 170.349847][ T9141] EXT4-fs (loop1): Remounting filesystem read-only [ 170.359629][ T9141] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 170.369846][ T9141] EXT4-fs (loop1): 1 orphan inode deleted [ 170.376139][ T9141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.383685][ T9152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 170.397249][ T9152] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1829'. [ 170.406263][ T9152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1829'. [ 170.416230][ T9141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.471794][ T9155] loop4: detected capacity change from 0 to 2048 [ 170.512914][ T9156] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1828'. [ 170.540739][ T9155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 170.644035][ T9166] loop2: detected capacity change from 0 to 512 [ 170.650913][ T9166] EXT4-fs: Ignoring removed i_version option [ 170.656923][ T9166] EXT4-fs: Ignoring removed bh option [ 170.667173][ T9168] FAULT_INJECTION: forcing a failure. [ 170.667173][ T9168] name failslab, interval 1, probability 0, space 0, times 0 [ 170.679829][ T9168] CPU: 1 UID: 0 PID: 9168 Comm: syz.1.1831 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.679862][ T9168] Tainted: [W]=WARN [ 170.679915][ T9168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.679928][ T9168] Call Trace: [ 170.679937][ T9168] [ 170.679944][ T9168] __dump_stack+0x1d/0x30 [ 170.679965][ T9168] dump_stack_lvl+0x95/0xd0 [ 170.679983][ T9168] dump_stack+0x15/0x1b [ 170.680004][ T9168] should_fail_ex+0x265/0x280 [ 170.680081][ T9168] should_failslab+0x8c/0xb0 [ 170.680099][ T9168] __kmalloc_noprof+0xb9/0x5a0 [ 170.680165][ T9168] ? io_cache_alloc_new+0x2a/0xb0 [ 170.680194][ T9168] io_cache_alloc_new+0x2a/0xb0 [ 170.680221][ T9168] __io_prep_rw+0xcf/0x6c0 [ 170.680247][ T9168] ? __rcu_read_unlock+0x4f/0x70 [ 170.680339][ T9168] io_prep_rwv+0x33/0x250 [ 170.680365][ T9168] io_prep_readv+0x1f/0x30 [ 170.680438][ T9168] io_submit_sqes+0x70f/0x11b0 [ 170.680506][ T9168] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 170.680611][ T9168] ? 0xffffffff81000000 [ 170.680623][ T9168] ? __rcu_read_unlock+0x4f/0x70 [ 170.680641][ T9168] ? proc_fail_nth_write+0x13b/0x160 [ 170.680670][ T9168] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 170.680776][ T9168] ? vfs_write+0x7e8/0x960 [ 170.680793][ T9168] ? __rcu_read_unlock+0x4f/0x70 [ 170.680814][ T9168] ? __fget_files+0x184/0x1c0 [ 170.680907][ T9168] ? mutex_unlock+0x4f/0x90 [ 170.680927][ T9168] ? fput+0x8f/0xc0 [ 170.680949][ T9168] __x64_sys_io_uring_enter+0x78/0x90 [ 170.680977][ T9168] x64_sys_call+0x27e4/0x3000 [ 170.681078][ T9168] do_syscall_64+0xca/0x2b0 [ 170.681111][ T9168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.681130][ T9168] RIP: 0033:0x7fd17684f749 [ 170.681145][ T9168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.681164][ T9168] RSP: 002b:00007fd17526d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 170.681206][ T9168] RAX: ffffffffffffffda RBX: 00007fd176aa6180 RCX: 00007fd17684f749 [ 170.681218][ T9168] RDX: 0000000000002000 RSI: 00000000000847ba RDI: 0000000000000007 [ 170.681231][ T9168] RBP: 00007fd17526d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.681244][ T9168] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 170.681258][ T9168] R13: 00007fd176aa6218 R14: 00007fd176aa6180 R15: 00007ffc229bad48 [ 170.681314][ T9168] [ 170.941135][ T9155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.966640][ T9166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.980110][ T9166] ext4 filesystem being mounted at /358/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.062150][ T9155] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1044 with error 28 [ 171.074680][ T9155] EXT4-fs (loop4): This should not happen!! Data will be lost [ 171.074680][ T9155] [ 171.084338][ T9155] EXT4-fs (loop4): Total free blocks count 0 [ 171.090393][ T9155] EXT4-fs (loop4): Free/Dirty block details [ 171.096283][ T9155] EXT4-fs (loop4): free_blocks=2415919104 [ 171.102023][ T9155] EXT4-fs (loop4): dirty_blocks=1056 [ 171.107302][ T9155] EXT4-fs (loop4): Block reservation details [ 171.113350][ T9155] EXT4-fs (loop4): i_reserved_data_blocks=66 [ 171.305054][ T9177] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1834'. [ 171.347072][ T9179] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 171.373103][ T9179] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 171.444193][ T9187] loop1: detected capacity change from 0 to 128 [ 171.559946][ T9194] loop1: detected capacity change from 0 to 512 [ 171.590353][ T9194] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.1842: error while reading EA inode 32 err=-116 [ 171.624555][ T8511] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 171.645032][ T9194] EXT4-fs (loop1): Remounting filesystem read-only [ 171.675264][ T9194] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 171.711326][ T9194] EXT4-fs (loop1): 1 orphan inode deleted [ 171.717485][ T9205] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 171.728849][ T9208] FAULT_INJECTION: forcing a failure. [ 171.728849][ T9208] name failslab, interval 1, probability 0, space 0, times 0 [ 171.741501][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.4.1846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.741529][ T9208] Tainted: [W]=WARN [ 171.741535][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.741546][ T9208] Call Trace: [ 171.741554][ T9208] [ 171.741640][ T9208] __dump_stack+0x1d/0x30 [ 171.741666][ T9208] dump_stack_lvl+0x95/0xd0 [ 171.741765][ T9208] dump_stack+0x15/0x1b [ 171.741782][ T9208] should_fail_ex+0x265/0x280 [ 171.741801][ T9208] should_failslab+0x8c/0xb0 [ 171.741820][ T9208] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 171.741887][ T9208] ? __alloc_skb+0x2ff/0x4b0 [ 171.741908][ T9208] __alloc_skb+0x2ff/0x4b0 [ 171.741929][ T9208] ? __alloc_skb+0x228/0x4b0 [ 171.741959][ T9208] netlink_alloc_large_skb+0xbf/0xf0 [ 171.741989][ T9208] netlink_sendmsg+0x3cf/0x6b0 [ 171.742023][ T9208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.742092][ T9208] __sock_sendmsg+0x145/0x180 [ 171.742113][ T9208] ____sys_sendmsg+0x31e/0x4a0 [ 171.742205][ T9208] ___sys_sendmsg+0x17b/0x1d0 [ 171.742287][ T9208] __x64_sys_sendmsg+0xd4/0x160 [ 171.742313][ T9208] x64_sys_call+0x17ba/0x3000 [ 171.742410][ T9208] do_syscall_64+0xca/0x2b0 [ 171.742441][ T9208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.742460][ T9208] RIP: 0033:0x7f5f77c2f749 [ 171.742474][ T9208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.742489][ T9208] RSP: 002b:00007f5f7668f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.742541][ T9208] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2f749 [ 171.742556][ T9208] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 171.742594][ T9208] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.742606][ T9208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.742618][ T9208] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 171.742716][ T9208] [ 171.755663][ T9194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.756664][ T9194] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.811007][ T9214] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 171.874190][ T9224] FAULT_INJECTION: forcing a failure. [ 171.874190][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 171.874224][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.3.1853 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.874297][ T9224] Tainted: [W]=WARN [ 171.874303][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.874366][ T9224] Call Trace: [ 171.874372][ T9224] [ 171.874379][ T9224] __dump_stack+0x1d/0x30 [ 171.874399][ T9224] dump_stack_lvl+0x95/0xd0 [ 171.874420][ T9224] dump_stack+0x15/0x1b [ 171.874496][ T9224] should_fail_ex+0x265/0x280 [ 171.874519][ T9224] should_failslab+0x8c/0xb0 [ 171.874542][ T9224] __kmalloc_noprof+0xb9/0x5a0 [ 171.874597][ T9224] ? security_inode_init_security+0xb4/0x320 [ 171.874622][ T9224] ? __pfx_shmem_initxattrs+0x10/0x10 [ 171.874721][ T9224] security_inode_init_security+0xb4/0x320 [ 171.874745][ T9224] ? simple_acl_create+0x328/0x370 [ 171.874769][ T9224] shmem_mknod+0xaa/0x170 [ 171.874842][ T9224] vfs_mknod+0x3e9/0x430 [ 171.874873][ T9224] do_mknodat+0x271/0x500 [ 171.874905][ T9224] __x64_sys_mknod+0x51/0x60 [ 171.874925][ T9224] x64_sys_call+0x2755/0x3000 [ 171.874951][ T9224] do_syscall_64+0xca/0x2b0 [ 171.875082][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.875246][ T9224] RIP: 0033:0x7fa1edf1f749 [ 171.875262][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.875281][ T9224] RSP: 002b:00007fa1ec987038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 171.875302][ T9224] RAX: ffffffffffffffda RBX: 00007fa1ee175fa0 RCX: 00007fa1edf1f749 [ 171.875320][ T9224] RDX: 0000000000000003 RSI: 000000000000c000 RDI: 0000200000000100 [ 171.875334][ T9224] RBP: 00007fa1ec987090 R08: 0000000000000000 R09: 0000000000000000 [ 171.875354][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.875416][ T9224] R13: 00007fa1ee176038 R14: 00007fa1ee175fa0 R15: 00007ffd687dd568 [ 171.875437][ T9224] [ 171.990068][ T9233] set_capacity_and_notify: 1 callbacks suppressed [ 171.990082][ T9233] loop3: detected capacity change from 0 to 512 [ 171.991997][ T9233] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1857: error while reading EA inode 32 err=-116 [ 171.992149][ T9233] EXT4-fs (loop3): Remounting filesystem read-only [ 171.992166][ T9233] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 171.992229][ T9233] EXT4-fs (loop3): 1 orphan inode deleted [ 171.992956][ T9233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.993512][ T9233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.210264][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.505707][ T9249] FAULT_INJECTION: forcing a failure. [ 172.505707][ T9249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.515888][ T9252] x_tables: duplicate underflow at hook 1 [ 172.518938][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.2.1862 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.519034][ T9249] Tainted: [W]=WARN [ 172.519041][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.519054][ T9249] Call Trace: [ 172.519060][ T9249] [ 172.519069][ T9249] __dump_stack+0x1d/0x30 [ 172.519139][ T9249] dump_stack_lvl+0x95/0xd0 [ 172.519160][ T9249] dump_stack+0x15/0x1b [ 172.519180][ T9249] should_fail_ex+0x265/0x280 [ 172.519203][ T9249] should_fail+0xb/0x20 [ 172.519222][ T9249] should_fail_usercopy+0x1a/0x20 [ 172.519258][ T9249] _copy_to_user+0x20/0xa0 [ 172.519291][ T9249] simple_read_from_buffer+0xb5/0x130 [ 172.519313][ T9249] proc_fail_nth_read+0x10e/0x150 [ 172.519349][ T9249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.519375][ T9249] vfs_read+0x1a8/0x770 [ 172.519393][ T9249] ? __rcu_read_unlock+0x4f/0x70 [ 172.519470][ T9249] ? __fget_files+0x184/0x1c0 [ 172.519492][ T9249] ? mutex_lock+0x58/0x90 [ 172.519517][ T9249] ksys_read+0xda/0x1a0 [ 172.519537][ T9249] __x64_sys_read+0x40/0x50 [ 172.519556][ T9249] x64_sys_call+0x2889/0x3000 [ 172.519586][ T9249] do_syscall_64+0xca/0x2b0 [ 172.519637][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.519658][ T9249] RIP: 0033:0x7f3307ade15c [ 172.519707][ T9249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.519724][ T9249] RSP: 002b:00007f330653f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.519744][ T9249] RAX: ffffffffffffffda RBX: 00007f3307d35fa0 RCX: 00007f3307ade15c [ 172.519756][ T9249] RDX: 000000000000000f RSI: 00007f330653f0a0 RDI: 0000000000000005 [ 172.519769][ T9249] RBP: 00007f330653f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.519830][ T9249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.519843][ T9249] R13: 00007f3307d36038 R14: 00007f3307d35fa0 R15: 00007fffbe99cef8 [ 172.519861][ T9249] [ 172.561986][ T9253] loop1: detected capacity change from 0 to 1024 [ 172.648319][ T9254] lo speed is unknown, defaulting to 1000 [ 172.653755][ T9253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.767163][ T9253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.813906][ T9264] loop4: detected capacity change from 0 to 256 [ 172.853492][ T9267] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 173.011513][ T9276] netlink: 'syz.3.1873': attribute type 13 has an invalid length. [ 173.071941][ T8511] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.112618][ T8511] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.122390][ T3376] hid_parser_main: 10 callbacks suppressed [ 173.122455][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x7 [ 173.135670][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.143124][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.150525][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.157980][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.165537][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.172953][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.180538][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.187953][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.195506][ T3376] hid-generic 0003:0004:0000.0050: unknown main item tag 0x0 [ 173.261889][ T9288] loop2: detected capacity change from 0 to 512 [ 173.268528][ T9288] EXT4-fs: Ignoring removed i_version option [ 173.274632][ T9288] EXT4-fs: Ignoring removed bh option [ 173.282514][ T8511] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.292103][ T8511] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.382621][ T9288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.395716][ T9288] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.109194][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.157432][ T3376] hid-generic 0003:0004:0000.0050: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 174.200074][ T9305] FAULT_INJECTION: forcing a failure. [ 174.200074][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.213164][ T9305] CPU: 0 UID: 0 PID: 9305 Comm: syz.1.1879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.213202][ T9305] Tainted: [W]=WARN [ 174.213210][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.213297][ T9305] Call Trace: [ 174.213305][ T9305] [ 174.213314][ T9305] __dump_stack+0x1d/0x30 [ 174.213340][ T9305] dump_stack_lvl+0x95/0xd0 [ 174.213360][ T9305] dump_stack+0x15/0x1b [ 174.213383][ T9305] should_fail_ex+0x265/0x280 [ 174.213507][ T9305] should_fail+0xb/0x20 [ 174.213527][ T9305] should_fail_usercopy+0x1a/0x20 [ 174.213553][ T9305] _copy_to_user+0x20/0xa0 [ 174.213579][ T9305] simple_read_from_buffer+0xb5/0x130 [ 174.213624][ T9305] proc_fail_nth_read+0x10e/0x150 [ 174.213699][ T9305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.213727][ T9305] vfs_read+0x1a8/0x770 [ 174.213743][ T9305] ? __rcu_read_unlock+0x4f/0x70 [ 174.213765][ T9305] ? __fget_files+0x184/0x1c0 [ 174.213796][ T9305] ? mutex_lock+0x58/0x90 [ 174.213848][ T9305] ksys_read+0xda/0x1a0 [ 174.213865][ T9305] __x64_sys_read+0x40/0x50 [ 174.213917][ T9305] x64_sys_call+0x2889/0x3000 [ 174.213943][ T9305] do_syscall_64+0xca/0x2b0 [ 174.213974][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.213993][ T9305] RIP: 0033:0x7fd17684e15c [ 174.214006][ T9305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 174.214065][ T9305] RSP: 002b:00007fd1752af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.214087][ T9305] RAX: ffffffffffffffda RBX: 00007fd176aa5fa0 RCX: 00007fd17684e15c [ 174.214102][ T9305] RDX: 000000000000000f RSI: 00007fd1752af0a0 RDI: 0000000000000004 [ 174.214116][ T9305] RBP: 00007fd1752af090 R08: 0000000000000000 R09: 0000000000000000 [ 174.214129][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.214206][ T9305] R13: 00007fd176aa6038 R14: 00007fd176aa5fa0 R15: 00007ffc229bad48 [ 174.214221][ T9305] [ 174.561082][ T9313] FAULT_INJECTION: forcing a failure. [ 174.561082][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 174.573991][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.4.1883 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.574019][ T9313] Tainted: [W]=WARN [ 174.574026][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.574038][ T9313] Call Trace: [ 174.574045][ T9313] [ 174.574052][ T9313] __dump_stack+0x1d/0x30 [ 174.574111][ T9313] dump_stack_lvl+0x95/0xd0 [ 174.574131][ T9313] dump_stack+0x15/0x1b [ 174.574152][ T9313] should_fail_ex+0x265/0x280 [ 174.574177][ T9313] should_failslab+0x8c/0xb0 [ 174.574272][ T9313] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 174.574305][ T9313] ? sidtab_sid2str_get+0xa0/0x130 [ 174.574396][ T9313] kmemdup_noprof+0x2b/0x70 [ 174.574485][ T9313] sidtab_sid2str_get+0xa0/0x130 [ 174.574509][ T9313] security_sid_to_context_core+0x1eb/0x2e0 [ 174.574534][ T9313] security_sid_to_context+0x27/0x40 [ 174.574558][ T9313] selinux_lsmprop_to_secctx+0x67/0xf0 [ 174.574611][ T9313] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 174.574631][ T9313] audit_log_subj_ctx+0xa4/0x3e0 [ 174.574651][ T9313] ? skb_put+0xa9/0xf0 [ 174.574673][ T9313] audit_log_task_context+0x48/0x70 [ 174.574693][ T9313] audit_log_task+0xf4/0x250 [ 174.574807][ T9313] ? kstrtouint+0x76/0xc0 [ 174.574823][ T9313] audit_seccomp+0x61/0x100 [ 174.574853][ T9313] ? __seccomp_filter+0x832/0x1260 [ 174.574894][ T9313] __seccomp_filter+0x843/0x1260 [ 174.574918][ T9313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.574948][ T9313] ? vfs_write+0x7e8/0x960 [ 174.575009][ T9313] ? __rcu_read_unlock+0x4f/0x70 [ 174.575026][ T9313] ? __fget_files+0x184/0x1c0 [ 174.575063][ T9313] __secure_computing+0x82/0x150 [ 174.575151][ T9313] syscall_trace_enter+0xcf/0x1e0 [ 174.575171][ T9313] do_syscall_64+0xa4/0x2b0 [ 174.575206][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.575229][ T9313] RIP: 0033:0x7f5f77c2e1ff [ 174.575276][ T9313] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 174.575294][ T9313] RSP: 002b:00007f5f7668f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.575322][ T9313] RAX: ffffffffffffffda RBX: 00007f5f77e85fa0 RCX: 00007f5f77c2e1ff [ 174.575357][ T9313] RDX: 00000000000000be RSI: 0000200000000000 RDI: 00000000000000c8 [ 174.575368][ T9313] RBP: 00007f5f7668f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.575380][ T9313] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 174.575390][ T9313] R13: 00007f5f77e86038 R14: 00007f5f77e85fa0 R15: 00007fffdae93978 [ 174.575408][ T9313] [ 174.849985][ T9315] loop1: detected capacity change from 0 to 1024 [ 174.882321][ T9311] lo speed is unknown, defaulting to 1000 [ 174.905274][ T9318] netlink: 'syz.0.1886': attribute type 13 has an invalid length. [ 174.919026][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.934063][ T9315] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.960222][ T9330] __nla_validate_parse: 6 callbacks suppressed [ 174.960238][ T9330] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 174.976962][ T9315] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.1882: iget: bogus i_mode (1) [ 175.000545][ T9315] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1882: couldn't read orphan inode 11 (err -117) [ 175.020049][ T9315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.062170][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1895'. [ 175.064277][ T9341] loop2: detected capacity change from 0 to 512 [ 175.071326][ T9343] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1895'. [ 175.078297][ T9341] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 175.086456][ T9343] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1895'. [ 175.104745][ T9341] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 175.134477][ T9341] System zones: 1-12 [ 175.140116][ T9311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.149405][ T9341] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.1894: corrupted in-inode xattr: e_value size too large [ 175.166421][ T9341] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1894: couldn't read orphan inode 15 (err -117) [ 175.186208][ T9341] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.227410][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 175.227426][ T29] audit: type=1400 audit(1766387994.478:15486): avc: denied { create } for pid=9340 comm="syz.2.1894" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 175.280415][ T9341] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1894: Unrecognised inode hash code 4 [ 175.291826][ T9341] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1894: Corrupt directory, running e2fsck is recommended [ 175.334817][ T9353] loop4: detected capacity change from 0 to 512 [ 175.341635][ T9353] EXT4-fs: Ignoring removed i_version option [ 175.347665][ T9353] EXT4-fs: Ignoring removed bh option [ 175.365687][ T29] audit: type=1400 audit(1766387994.528:15487): avc: denied { create } for pid=9340 comm="syz.2.1894" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 175.407658][ T29] audit: type=1326 audit(1766387994.568:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.431181][ T29] audit: type=1326 audit(1766387994.568:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.455214][ T29] audit: type=1326 audit(1766387994.568:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.478782][ T29] audit: type=1326 audit(1766387994.568:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.502254][ T29] audit: type=1326 audit(1766387994.568:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.525823][ T29] audit: type=1326 audit(1766387994.568:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.549289][ T29] audit: type=1326 audit(1766387994.568:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.572778][ T29] audit: type=1326 audit(1766387994.568:15495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9351 comm="syz.1.1898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd17684f749 code=0x7ffc0000 [ 175.601879][ T9341] EXT4-fs warning (device loop2): dx_probe:801: inode #2: comm syz.2.1894: Unrecognised inode hash code 4 [ 175.613392][ T9341] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.1894: Corrupt directory, running e2fsck is recommended [ 175.806753][ T9369] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 175.857323][ T9353] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.870077][ T9353] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.908010][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.942516][ T9371] FAULT_INJECTION: forcing a failure. [ 175.942516][ T9371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.955697][ T9371] CPU: 0 UID: 0 PID: 9371 Comm: syz.0.1905 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.955739][ T9371] Tainted: [W]=WARN [ 175.955747][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.955761][ T9371] Call Trace: [ 175.955769][ T9371] [ 175.955778][ T9371] __dump_stack+0x1d/0x30 [ 175.955856][ T9371] dump_stack_lvl+0x95/0xd0 [ 175.955879][ T9371] dump_stack+0x15/0x1b [ 175.955898][ T9371] should_fail_ex+0x265/0x280 [ 175.955923][ T9371] should_fail+0xb/0x20 [ 175.955940][ T9371] should_fail_usercopy+0x1a/0x20 [ 175.956098][ T9371] _copy_to_user+0x20/0xa0 [ 175.956121][ T9371] simple_read_from_buffer+0xb5/0x130 [ 175.956145][ T9371] proc_fail_nth_read+0x10e/0x150 [ 175.956181][ T9371] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.956224][ T9371] vfs_read+0x1a8/0x770 [ 175.956239][ T9371] ? __rcu_read_unlock+0x4f/0x70 [ 175.956256][ T9371] ? __fget_files+0x184/0x1c0 [ 175.956275][ T9371] ? mutex_lock+0x58/0x90 [ 175.956299][ T9371] ksys_read+0xda/0x1a0 [ 175.956351][ T9371] __x64_sys_read+0x40/0x50 [ 175.956371][ T9371] x64_sys_call+0x2889/0x3000 [ 175.956393][ T9371] do_syscall_64+0xca/0x2b0 [ 175.956425][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.956460][ T9371] RIP: 0033:0x7f056523e15c [ 175.956475][ T9371] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.956494][ T9371] RSP: 002b:00007f0563c9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.956558][ T9371] RAX: ffffffffffffffda RBX: 00007f0565495fa0 RCX: 00007f056523e15c [ 175.956578][ T9371] RDX: 000000000000000f RSI: 00007f0563c9f0a0 RDI: 0000000000000006 [ 175.956589][ T9371] RBP: 00007f0563c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.956724][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.956739][ T9371] R13: 00007f0565496038 R14: 00007f0565495fa0 R15: 00007ffc7cd3c738 [ 175.956759][ T9371] [ 176.212873][ T9375] FAULT_INJECTION: forcing a failure. [ 176.212873][ T9375] name failslab, interval 1, probability 0, space 0, times 0 [ 176.225547][ T9375] CPU: 0 UID: 0 PID: 9375 Comm: syz.0.1907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.225622][ T9375] Tainted: [W]=WARN [ 176.225630][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.225643][ T9375] Call Trace: [ 176.225660][ T9375] [ 176.225668][ T9375] __dump_stack+0x1d/0x30 [ 176.225689][ T9375] dump_stack_lvl+0x95/0xd0 [ 176.225780][ T9375] dump_stack+0x15/0x1b [ 176.225810][ T9375] should_fail_ex+0x265/0x280 [ 176.225831][ T9375] should_failslab+0x8c/0xb0 [ 176.225854][ T9375] __kmalloc_noprof+0xb9/0x5a0 [ 176.225873][ T9375] ? bpf_test_init+0x86/0x140 [ 176.225899][ T9375] ? _parse_integer+0x27/0x40 [ 176.225920][ T9375] bpf_test_init+0x86/0x140 [ 176.225994][ T9375] bpf_prog_test_run_nf+0x183/0x4f0 [ 176.226044][ T9375] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 176.226069][ T9375] bpf_prog_test_run+0x204/0x340 [ 176.226089][ T9375] __sys_bpf+0x4c0/0x7c0 [ 176.226115][ T9375] __x64_sys_bpf+0x41/0x50 [ 176.226179][ T9375] x64_sys_call+0x28e1/0x3000 [ 176.226212][ T9375] do_syscall_64+0xca/0x2b0 [ 176.226243][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.226277][ T9375] RIP: 0033:0x7f056523f749 [ 176.226291][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.226306][ T9375] RSP: 002b:00007f0563c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.226328][ T9375] RAX: ffffffffffffffda RBX: 00007f0565495fa0 RCX: 00007f056523f749 [ 176.226342][ T9375] RDX: 0000000000000015 RSI: 0000200000000580 RDI: 000000000000000a [ 176.226371][ T9375] RBP: 00007f0563c9f090 R08: 0000000000000000 R09: 0000000000000000 [ 176.226390][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.226401][ T9375] R13: 00007f0565496038 R14: 00007f0565495fa0 R15: 00007ffc7cd3c738 [ 176.226419][ T9375] [ 176.427837][ T9367] loop3: detected capacity change from 0 to 512 [ 176.446630][ T9367] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1903: error while reading EA inode 32 err=-116 [ 176.484187][ T9367] EXT4-fs (loop3): Remounting filesystem read-only [ 176.519127][ T9367] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 176.569536][ T9367] EXT4-fs (loop3): 1 orphan inode deleted [ 176.584810][ T9367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.618970][ T9389] netlink: 'syz.2.1912': attribute type 13 has an invalid length. [ 176.627548][ T9367] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.638794][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.665142][ T9393] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.722526][ T9396] loop4: detected capacity change from 0 to 2048 [ 176.761171][ T9406] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.768850][ T9406] vhci_hcd vhci_hcd.2: invalid port number 96 [ 176.775081][ T9406] vhci_hcd vhci_hcd.2: default hub control req: 0306 v0007 i0060 l0 [ 176.784047][ T9396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 176.862990][ T9423] SELinux: policydb version -1519183459 does not match my version range 15-35 [ 176.872556][ T9423] SELinux: failed to load policy [ 176.875563][ T9425] FAULT_INJECTION: forcing a failure. [ 176.875563][ T9425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.890451][ T9396] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.890611][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: syz.1.1926 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.890640][ T9425] Tainted: [W]=WARN [ 176.890648][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.890660][ T9425] Call Trace: [ 176.890667][ T9425] [ 176.890675][ T9425] __dump_stack+0x1d/0x30 [ 176.890776][ T9425] dump_stack_lvl+0x95/0xd0 [ 176.890837][ T9425] dump_stack+0x15/0x1b [ 176.890855][ T9425] should_fail_ex+0x265/0x280 [ 176.890937][ T9425] should_fail+0xb/0x20 [ 176.890957][ T9425] should_fail_usercopy+0x1a/0x20 [ 176.891032][ T9425] _copy_from_user+0x1c/0xb0 [ 176.891058][ T9425] ___sys_sendmsg+0xc1/0x1d0 [ 176.891139][ T9425] __x64_sys_sendmsg+0xd4/0x160 [ 176.891238][ T9425] x64_sys_call+0x17ba/0x3000 [ 176.891262][ T9425] do_syscall_64+0xca/0x2b0 [ 176.891369][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.891456][ T9425] RIP: 0033:0x7fd17684f749 [ 176.891472][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.891489][ T9425] RSP: 002b:00007fd17528e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.891509][ T9425] RAX: ffffffffffffffda RBX: 00007fd176aa6090 RCX: 00007fd17684f749 [ 176.891522][ T9425] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 176.891535][ T9425] RBP: 00007fd17528e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.891603][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.891616][ T9425] R13: 00007fd176aa6128 R14: 00007fd176aa6090 R15: 00007ffc229bad48 [ 176.891634][ T9425] [ 177.068222][ T9396] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 177.080810][ T9396] EXT4-fs (loop4): This should not happen!! Data will be lost [ 177.080810][ T9396] [ 177.090546][ T9396] EXT4-fs (loop4): Total free blocks count 0 [ 177.096534][ T9396] EXT4-fs (loop4): Free/Dirty block details [ 177.102434][ T9396] EXT4-fs (loop4): free_blocks=2415919104 [ 177.108183][ T9396] EXT4-fs (loop4): dirty_blocks=2448 [ 177.113463][ T9396] EXT4-fs (loop4): Block reservation details [ 177.119435][ T9396] EXT4-fs (loop4): i_reserved_data_blocks=153 [ 177.262315][ T8472] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 177.491164][ T9437] loop2: detected capacity change from 0 to 512 [ 177.510139][ T9437] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1929: error while reading EA inode 32 err=-116 [ 177.529200][ T9437] EXT4-fs (loop2): Remounting filesystem read-only [ 177.541056][ T9437] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 177.566128][ T9437] EXT4-fs (loop2): 1 orphan inode deleted [ 177.572345][ T9437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.585221][ T9437] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.744741][ T9459] netlink: 'syz.4.1939': attribute type 13 has an invalid length. [ 177.762050][ T9457] loop3: detected capacity change from 0 to 2048 [ 177.934328][ T9457] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.954814][ T9457] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 358 with error 28 [ 177.967212][ T9457] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.967212][ T9457] [ 177.976859][ T9457] EXT4-fs (loop3): Total free blocks count 0 [ 177.982950][ T9457] EXT4-fs (loop3): Free/Dirty block details [ 177.988965][ T9457] EXT4-fs (loop3): free_blocks=2415919104 [ 177.994953][ T9457] EXT4-fs (loop3): dirty_blocks=368 [ 178.000247][ T9457] EXT4-fs (loop3): Block reservation details [ 178.006218][ T9457] EXT4-fs (loop3): i_reserved_data_blocks=23 [ 178.037359][ T8512] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 178.049654][ T8512] EXT4-fs (loop3): This should not happen!! Data will be lost [ 178.049654][ T8512] [ 178.067374][ T9473] FAULT_INJECTION: forcing a failure. [ 178.067374][ T9473] name failslab, interval 1, probability 0, space 0, times 0 [ 178.080159][ T9473] CPU: 0 UID: 0 PID: 9473 Comm: syz.1.1943 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.080210][ T9473] Tainted: [W]=WARN [ 178.080281][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.080293][ T9473] Call Trace: [ 178.080300][ T9473] [ 178.080308][ T9473] __dump_stack+0x1d/0x30 [ 178.080412][ T9473] dump_stack_lvl+0x95/0xd0 [ 178.080433][ T9473] dump_stack+0x15/0x1b [ 178.080450][ T9473] should_fail_ex+0x265/0x280 [ 178.080548][ T9473] should_failslab+0x8c/0xb0 [ 178.080567][ T9473] __kmalloc_noprof+0xb9/0x5a0 [ 178.080590][ T9473] ? sctp_auth_set_key+0x18a/0x4f0 [ 178.080657][ T9473] ? sctp_auth_set_key+0x115/0x4f0 [ 178.080696][ T9473] sctp_auth_set_key+0x18a/0x4f0 [ 178.080801][ T9473] sctp_setsockopt_auth_key+0x2d7/0x3e0 [ 178.080822][ T9473] sctp_setsockopt+0x4ba/0xe30 [ 178.080901][ T9473] sock_common_setsockopt+0x69/0x80 [ 178.080920][ T9473] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 178.080974][ T9473] __sys_setsockopt+0x184/0x200 [ 178.081002][ T9473] __x64_sys_setsockopt+0x64/0x80 [ 178.081029][ T9473] x64_sys_call+0x21d5/0x3000 [ 178.081130][ T9473] do_syscall_64+0xca/0x2b0 [ 178.081158][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.081178][ T9473] RIP: 0033:0x7fd17684f749 [ 178.081193][ T9473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.081223][ T9473] RSP: 002b:00007fd1752af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 178.081243][ T9473] RAX: ffffffffffffffda RBX: 00007fd176aa5fa0 RCX: 00007fd17684f749 [ 178.081256][ T9473] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000005 [ 178.081267][ T9473] RBP: 00007fd1752af090 R08: 0000000000000009 R09: 0000000000000000 [ 178.081304][ T9473] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 178.081316][ T9473] R13: 00007fd176aa6038 R14: 00007fd176aa5fa0 R15: 00007ffc229bad48 [ 178.081375][ T9473] [ 178.309564][ T9463] ================================================================== [ 178.317693][ T9463] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 178.327503][ T9463] [ 178.329808][ T9463] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 178.337855][ T9463] tick_do_update_jiffies64+0x113/0x1c0 [ 178.343394][ T9463] tick_nohz_handler+0x8d/0x3d0 [ 178.348237][ T9463] __hrtimer_run_queues+0x20f/0x5a0 [ 178.353429][ T9463] hrtimer_interrupt+0x21a/0x460 [ 178.358354][ T9463] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 178.364237][ T9463] sysvec_apic_timer_interrupt+0x6f/0x80 [ 178.369862][ T9463] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 178.375827][ T9463] free_swap_cache+0x18/0x140 [ 178.380493][ T9463] do_wp_page+0x1703/0x2510 [ 178.384991][ T9463] handle_mm_fault+0x7b0/0x2c60 [ 178.389842][ T9463] do_user_addr_fault+0x630/0x1080 [ 178.394944][ T9463] exc_page_fault+0x62/0xa0 [ 178.399441][ T9463] asm_exc_page_fault+0x26/0x30 [ 178.404282][ T9463] [ 178.406590][ T9463] read to 0xffffffff86809a00 of 8 bytes by task 9463 on cpu 1: [ 178.414135][ T9463] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 178.420714][ T9463] count_shadow_nodes+0x6a/0x230 [ 178.425652][ T9463] do_shrink_slab+0x63/0x680 [ 178.430225][ T9463] shrink_slab+0x4f5/0x840 [ 178.434707][ T9463] shrink_node+0x6a9/0x2010 [ 178.439203][ T9463] do_try_to_free_pages+0x3f6/0xcd0 [ 178.444398][ T9463] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 178.450285][ T9463] try_charge_memcg+0x383/0xa10 [ 178.455207][ T9463] obj_cgroup_charge_pages+0xa6/0x150 [ 178.460568][ T9463] __memcg_kmem_charge_page+0x9f/0x170 [ 178.466020][ T9463] __alloc_frozen_pages_noprof+0x18f/0x360 [ 178.471821][ T9463] alloc_pages_mpol+0xb3/0x260 [ 178.476576][ T9463] alloc_pages_noprof+0x90/0x130 [ 178.481502][ T9463] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 178.487388][ T9463] __kvmalloc_node_noprof+0x492/0x6b0 [ 178.492760][ T9463] ip_set_alloc+0x24/0x30 [ 178.497084][ T9463] hash_netiface_create+0x282/0x740 [ 178.502275][ T9463] ip_set_create+0x3cc/0x970 [ 178.506849][ T9463] nfnetlink_rcv_msg+0x4c6/0x590 [ 178.511775][ T9463] netlink_rcv_skb+0x123/0x220 [ 178.516532][ T9463] nfnetlink_rcv+0x167/0x16c0 [ 178.521198][ T9463] netlink_unicast+0x5c0/0x690 [ 178.525953][ T9463] netlink_sendmsg+0x58b/0x6b0 [ 178.530721][ T9463] __sock_sendmsg+0x145/0x180 [ 178.535386][ T9463] ____sys_sendmsg+0x31e/0x4a0 [ 178.540143][ T9463] ___sys_sendmsg+0x17b/0x1d0 [ 178.544816][ T9463] __x64_sys_sendmsg+0xd4/0x160 [ 178.549665][ T9463] x64_sys_call+0x17ba/0x3000 [ 178.554335][ T9463] do_syscall_64+0xca/0x2b0 [ 178.558838][ T9463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.564718][ T9463] [ 178.567030][ T9463] value changed: 0x00000000ffffd04b -> 0x00000000ffffd04c [ 178.574113][ T9463] [ 178.576419][ T9463] Reported by Kernel Concurrency Sanitizer on: [ 178.582558][ T9463] CPU: 1 UID: 0 PID: 9463 Comm: syz.0.1941 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.593825][ T9463] Tainted: [W]=WARN [ 178.597609][ T9463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.607741][ T9463] ==================================================================