last executing test programs: 3.516514693s ago: executing program 0 (id=547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3c}}, 0x0) 3.491239553s ago: executing program 0 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='ext4_evict_inode\x00', r0}, 0x18) unlinkat(0xffffffffffffffff, 0x0, 0x200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000002000000fb0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000080), 0x1, 0x769, &(0x7f0000000fc0)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r3, &(0x7f0000000080)=""/237, 0xed, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0', [{0x20, 'kmem_cache_free\x00'}, {}, {0x20, 'syzkaller\x00'}, {0x20, 'ext4\x00'}, {0x20, 'ext4\x00'}, {0x20, '\'*,'}], 0xa, "f063cfde3d99ae522138ee0f59d05d77e373db64727b4388de61a0f00562fdab45952d276ef7c7e005e2c3f58f5792b2eea662c90ced26f2a6d470a4dbfbfb7e62867e6d2fcf80948ea4748f77d89c0f7900997830bb28d573580f335b11404c527ca3"}, 0x9b) 3.132562563s ago: executing program 0 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) 3.020154294s ago: executing program 0 (id=554): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x1, 0x257}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640), 0x0, 0x0, 0x0, 0xffffffc3}, 0x0) io_uring_enter(r0, 0x2000000, 0x2, 0xf, 0x0, 0x0) 2.909639644s ago: executing program 0 (id=556): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r1) close(r2) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0xfffe, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private}}}], 0x20}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x0, 0x10, 0xc, 0x6, {{0x10, 0x4, 0x1, 0x9, 0x40, 0x67, 0x0, 0x4a, 0x2f, 0x0, @rand_addr=0x64010100, @loopback, {[@lsrr={0x83, 0x1b, 0xfd, [@loopback, @remote, @rand_addr=0x64010100, @broadcast, @broadcast, @private=0xa010100]}, @lsrr={0x83, 0x7, 0x7b, [@remote]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) sendmsg$can_bcm(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1d, r7}, 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x2, 0x3, {0x0, 0x2710}, {0x0, 0xea60}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1, 0x1}, 0x1b, 0x2, 0x0, 0x0, "ec2990551081591fa18c179258369d93fb8bbb93d5c70de520f6ae791e7f1cea193583465ac5899a7d37bfac694eb4f1caacdd23b4288d76ff42b8f20f4d51df"}}, 0x80}, 0x1, 0x0, 0x0, 0x44041}, 0x4004000) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000540)={@empty, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x3}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000240)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48008}, 0x20044000) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1a8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x418a70aa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x77}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) 2.866313674s ago: executing program 0 (id=559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800983100f20000010000000000000047f389050000183137ee784de7670fa4a3bc985f8a01f6f892bb4716ef26ceb162c267c14a136653978410ac1121d8e049", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x2b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpgrp(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r7], 0x3c}}, 0x20044014) close(r7) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$SG_GET_REQUEST_TABLE(r9, 0x2275, &(0x7f00000018c0)) r10 = syz_pidfd_open(r3, 0x0) process_madvise(r10, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x14, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x1002f34, &(0x7f0000000400)={0x0, 0x70bb, 0x80, 0x0, 0xffffffff, 0x0, r9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x0, 0x10}) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) io_uring_enter(0xffffffffffffffff, 0x3a21, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x1, 0x0, 0x5a, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.745131804s ago: executing program 2 (id=563): mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c40)={0x1, &(0x7f0000000c00)=[{0x74, 0xd0, 0x9, 0x800}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00'}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x9, @empty}, 0x10) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="b59f6e09c52e83b1e16e0212408539d1bf42a51d"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller1\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x80000000000}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b37000000000000000005000000080003"], 0x38}}, 0x0) syz_clone3(&(0x7f0000000040)={0x4300, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, {r0}}, 0x58) (fail_nth: 36) 2.686156975s ago: executing program 3 (id=564): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/packet\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/253, 0xfd}], 0x1, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='hsr0\x00', 0x10) sendmsg(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000540)="46adc044d93f6a0b8e2ea47a239f1eadda544cc8d15903e6fdc6972589a9faae8f8af78a5a15078d410d7aa6daf32eae57a8f8db6cb54e654beb738aabc6f4625648954a1817d722c557f2576837a027e44d79714b0c70e0692d1d5c29216a3f7ffa7387cb4baf22a9a7b756bc6c74512298b198c9f699208414e38c65d52202716b82820fc94a17db6f6bb42ae9b83ccd49d2339762e0e702725dbb4814247af4e4ad2cccf651718d77b0055c45214e9ffb42e1b9d6d934256866bd10dc3595487d45b1c52789a57f82b5b7174f5f9447f963897a1d3037d1b5444a6ad17d70b96f9ae5f4aa4057bd23d671f4b7c08e8a8330ffecc5004ee15748e311fd91b99c3aee3312f4038ae44538d6eb25ed5da7c926dc23eefd09de2174b23496c53c16205ae5ba790eaa2c9d744b834eaf561020bc348935cbf07ec5305b637eac95aff606df6ee738ed25c04701f20985a072460c2a7c7c5a05a8a75af158223e488f0b71180997e486a8d0247a141401a80cf0ee6ae67d27dd2401fccb7a8aeccfc29d79ee757b6e189c8f1a4526fbdb480e470a849a5fbc212ab269bbe0cab5506f8c8b39d80a22ab433d59fad42175f7e17b132b88caedfeaa0659fc43b7fa6a4804586506874af1d6722a56aa5b8ba493e28b05999d9f3f767a37865d11139af34db6103b3e07572421f927eadecee7abd98986a22bb12a7d481df10712601989680a6d7b6f5f5156422ade4fcb24c8a93dc63d512a8eebc0016e3104cbfea0266506fbd4a7a977d71e9ecd31cf5e623c587690c90c251cb8986d1dc1878e93dae43dbceb71e6ec371af66aad5dd6a1839cd45f41d7fb4a2c256be5f35cb7cc4e328ae66ae787e8334d227d9076d0199cdcd342710d7de24c3ff6ae240ec29133047b487fed0a69eb9ea7d6bea9384378ba79e5a3c3e1b9041019c60c1b5d3190a392239c718281791c09d1f280f1999de9fed64648ea8cd8609a831b3f60f4f15503de7637ed97a6615d1668b7091c02f99d225ba0a7ce05bafe8f2ccd5efc0f15649bcee4b47baee12e6270164ee0e4c6804d731b260aca82dc423b0e59c2cc5805557cf49c3ea22d4d7a3629610015cc4ac34454a385b9bc003abb85616d46efef8b64dbcf0e6e75b885806360459a8aef801904de7a2c1c68099eaf3f17d1d73d6b3b0a64e2408f0a61d5811618160be32a82ecbfc84480fd08683f1772dc72cfe6534462df9065fc570ae1ba5e95750eadd467f0650aa7ff561456b3e639f6c18dbb80b7aa7fc18b79fcd364d3b1ef39047e4bde892e1bfa0a556b3ee8397e99e8ccdcb107794b120ccf92bbcf779dcd0e9ff7772a28d30e62f431c981a50e02086e2ace935cfddaae971de76de4dfbfe95c9d151298a22dd8a15487cbba7ce8129ecab9445e20ff258a08156c441a9afefa8a06df2d189d0e2d2566be6d6f00595796c76a48237db163b0053b3edf848d206af34745fc2a91323194a9046e31514a8e4679f7e313aa964629f54fd1f58929031b4688a5fc159793fd5393509a2abf215c039b264352e86d97ebf15a5de096ed34e12b5e801174359ba08120795f99e13d150a6e5e4dd48d08c1b0a2af2011e22f22e1fe9700220982e0c49c70e2557ddec883a874312572b8ef3eb0878a9ae19c7042ecde4c008b663fb7efac2475643715a32586a7682b0dc2840ededbbfc827dd2ce4310669875e0902028337f526dfaa784b509fd9c44b655d78517415eb0c1bd252abffbc5aae1a7260283fd7670600b14079ec81da98008633618cd67f83bd5578e70b40e839a610d63d37707c0c7ffb37ea908f1ebf04a86b4546a14222a0cae2a699f0c4a4f79041befac50d0299a8a21393493b4e96a2a1908df1f25c4b33f6723f78f542390bb36cc36edd7fc928b7086d2ce674e11a139e0d46e52b268678697f6141306344f7b0dad4332bd70f79d8b73bd535b06ccbe3bdb33d66f7d10ba919d236fa4eb09f2e14fce1f09d9899841763834f", 0x58f}], 0x1}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xf0}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x6}, @TCA_PIE_TUPDATE={0x8, 0x3, 0x3}]}}]}, 0x50}}, 0x44080) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xc182}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0xc, 0x8, 0x2, 0xb, 0x100}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x7}, @jmp={0x5, 0x0, 0xa, 0x7, 0x3, 0x100, 0xfffffffffffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x43d}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}]}, &(0x7f0000000340)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x14, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000440)=[{0x2, 0x1, 0x2, 0xb}, {0x1, 0x4, 0x10, 0x5}, {0x4, 0x4, 0x3, 0xa}, {0x2, 0x4, 0xb, 0x9}, {0x0, 0x3, 0x8, 0x3}, {0x1, 0x2, 0x7, 0x1}, {0x1, 0x3, 0xa, 0x2}, {0x2, 0x4, 0xd}], 0x10, 0x10001, @void, @value}, 0x94) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.029632786s ago: executing program 4 (id=568): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5f) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0xf5}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @multicast1}, {0x12, 0x0, 0x0, @rand_addr=0x64010101}}}}}, 0x0) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 2.027395356s ago: executing program 4 (id=569): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (fail_nth: 12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) 1.944139406s ago: executing program 2 (id=570): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000140)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@prjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@mblk_io_submit}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90fe8b1c551265406c7f30608e2b9e81c86a3bfb00", [0x0, 0x4000000000]}}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000001c0), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r10 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_elf64(r10, &(0x7f0000001a40)=ANY=[], 0xfd14) lseek(r10, 0x0, 0x4) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x13, 0x18, 0xfc01, 0x0, 0x8001, 0x0}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) 1.681013116s ago: executing program 1 (id=571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (fail_nth: 5) 1.189372637s ago: executing program 1 (id=572): socket$netlink(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) dup(r0) (async) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x8, 0x2000001, 0x50000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x8, 0x2000001, 0x50000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r2}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_read_part_table(0x1058, &(0x7f0000001700)="$eJzsz8FNw0AQBdBvg72+UQIdUAlXzlQCcgf0QYMIRDTRxnYLSQ7vHVbav6s/mnBbY/6qqsbjPv/2c8nLEUzJf23ymGoPqbWSDJfXaqf+I8lHfc4Z29eU9+zRc9bhtS29bhvVPf0se/OQt+/rLQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+scAAD//y0HGdI=") 1.189126057s ago: executing program 4 (id=573): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') r3 = socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x14c00) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b10fb4f5fdaf9331c7510e19feecb90ee6bb49fdb1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fde58b"}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x4, 0x75}, @nested={0xa5, 0x6c, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @generic="c6860d4ca7bea123fa1944aaf50e1d2917819da3c4d7723b178e8fa525f83b081e684374026ac4506cb593e5a3f2ea7c6b4bc548f0561438038a36d15ecd9b8b5039cab5e5c47097cde1d8fb0f081f3eba3f60c9a1f717d4fa5b4611b647792d45d7e59394880bcc837c2cf319f51869d5f952ad8a1616e98ebc24e9ead4dcf667714730db10be582c138eb362e3fa059ecd7c99cefab33c62"]}, @typed={0x6d, 0xb4, 0x0, 0x0, @binary="bb46309871fbbc8e33139068644765bf076115fcd30c6a8ca5babf1192c6af5dfc3e2bd63a3f580831d6fd4bb70650af5a71eef9006b4a391d929013ce7bbd6c46834b5a0983f7e5d2e06cfa105fac266268f8ec9952d470ab47c35e73fea25cda0381ec347d18de3e"}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.133596957s ago: executing program 2 (id=574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f400000000000000000000000000000000000000000000000000559e10e50b72d5848fca8e5405542cf2d1a0a0fe59c40dc9934c23c08d0fefd6685f80bbc1120d56a5c9ea20fc9692d9a5c96c05f60353682836c551629d36ef424aa6f8a438f32ea5687786fb49e51b01d426e010548a75523ccad287a543aa3fe049f96b1dc919cd888001ef00e7634d5b2d9f7b81b8ea66e6c486e4a398a6f8404d67f3717ff685bf68b3de6d0ce4b2d1aaa1df5718bda064fa"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00006a2000/0x3000)=nil, 0x3000, 0x2000004, 0x810, 0xffffffffffffffff, 0xd7737000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x0, 0x0, r1, 0x0, 0x0, 0x2, 0x0, 0x2}]) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000100)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x1411, 0xe26, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008040) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x6}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) epoll_wait(r3, &(0x7f000000affb)=[{}], 0x1, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000003}) 871.311588ms ago: executing program 3 (id=577): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3c}}, 0x0) 573.396659ms ago: executing program 2 (id=578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044050) r1 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000079108300000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/5}, 0x20) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x84) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c000100000000000000000007"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 496.344509ms ago: executing program 3 (id=579): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000010340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0xffffffffffffff0d) syz_open_dev$ptys(0xc, 0x3, 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffcdf) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x3, @private0, 0x2}, r1}}, 0x30) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000001500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000400000000b7080000000000007b8af87f00000000bfa20004ff00000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000101c0)=ANY=[@ANYBLOB="0600000004000000fd0f00000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000fcffffff00bf224c0b03e3706df9ff2f69ec0e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000010240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000010000)={@dev, 0x0}, &(0x7f0000010040)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000010100)={{r5, 0xffffffffffffffff}, &(0x7f0000010080), &(0x7f00000100c0)='%ps \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000010180)={r7, r8, 0x25, 0x9, @val=@iter={&(0x7f0000010140)=@map_fd=r9, 0x10}}, 0x20) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r10 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, &(0x7f0000000840)="cb958cd3", 0x4, 0x40000100, 0x1}) io_uring_enter(r1, 0x13c2, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x1a2, 0xeb92, 0x13, &(0x7f00000000c0)={[0x401]}, 0x8) 201.40571ms ago: executing program 3 (id=582): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000001000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000007c0), 0xffffd6c0, r2}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) 167.478959ms ago: executing program 1 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x485e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3c}}, 0x0) 132.904039ms ago: executing program 1 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x4, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 75.47945ms ago: executing program 4 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010009b0000000000000000000000000a20000000000a03000000000f00000000070000000900010073b47a300000000068000000090a010400400000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c000980280002800c00018008000140000000080c00018008000140000000010c0001bb"], 0xe4}}, 0x0) 74.67403ms ago: executing program 3 (id=586): syz_open_dev$evdev(&(0x7f0000000640), 0x2, 0x20002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x508000) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/113) 631.3µs ago: executing program 1 (id=587): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x19, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000011907800000000ffffffff00004e20000c090890780100"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) mlockall(0x1) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000002060300000000000000f7000000000011000300686173683a69702c706f7274000000000900020073797a31000000000c0007800800124004000000050005000a00000005000400010000000500010007000000"], 0x58}}, 0x0) listen(r2, 0xe00000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000009000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRESDEC=r4, @ANYRESHEX=r10, @ANYBLOB="ef9d4771a1b7e11416da2c166d944933ca5cf746deae061cbac0d490dc0df3f0be3a012771a08068fc6ac84d68fe6b313bca8a2c4eee37580211090c33a12d01d289b08d93ba698a0f3f2b54ef35335b04ce8f83d4c340f1ebf3a44e1967c28bf75f4b16d3d6b5ed62fa48d4f0c7094a6dd0a44c3863e2034eee75d7c3ca8f065c612173ab81841b1b62d8d30432937e827455c7d1db93189837cb9b9ae534acce63684bfe842fec77fc3223c5849972c6da019a688d656126b3d9668f97fd9dccb9b477d88c56dae33ae5681849b7", @ANYRES8=r14, @ANYRES32=r8, @ANYRES16=r9, @ANYRES16=r5, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, @void, @value}, 0x94) r15 = gettid() tkill(r15, 0x7) 0s ago: executing program 2 (id=588): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x40, 0x0, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x10911, 0xc8, 0x3, 0x9, 0xffffffffb7664541, 0xc, 0x0, 0x0, 0x0, 0x0, 0x10f}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b5a894b30000100000000000000000000000000009000000000000005f41ae80c4f489cc5d"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)="af077aba47f53b74b5e20851585137db600395b1d14feec84a6614104f7280b9b05cc335898c3e75ad203c614d4f68d8126c35b577773cc69ee367e18d4c158210e690332420d066a5fcac360c8948dd6ac0a85fac3aad89d49188a9b6b29464fe68f83e71b062aeed3549affc69fb14381c4068b31d49caddfe55a31eb6601a2c0ac8ae7a615411eebe4ad3f597a60dce38b41876642ec1c2b077388a60b751065ab1a408ff63f4ed85fafadbeb80c4d490b16cbeff2d77881b1c85d36e27fafc4af3cc2019308c5302a402e15f6ab985daf70031e806d324967c1bab7e081c2e47d5c4a600", 0xe6, 0x0, 0x1}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000f6ffffff000000000095980000180100002020702500000000002020207b1af8ff00000000bfa10000000000006601f617f0ffffffb702000005000000b703007c3e93bb00850000007300000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r8}, 0x10) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000040)={&(0x7f0000000080)=@pppoe={0x18, 0x0, {0x3, @local, 'lo\x00'}}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x10b8}, 0x4000080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0900000100000000615d10e2bd1ffb4e00000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES64=r7, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000940)="c8fcffffffffffffff06002f78cdd1cb5760722de3d424e10511462b50023162fd3b8c59f74726d50d384879994bae47b9ad625643ee3aa3d035e10492aa5065d93e7601044bc1e95f6eb4", &(0x7f0000000740), 0x3, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000740)='svcrdma_small_wrch_err\x00', r5, 0x0, 0x8}, 0x18) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0x604, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r12, 0x0, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r13}, 0x10) syz_io_uring_setup(0xa94, &(0x7f0000000380), &(0x7f0000000040), &(0x7f00000005c0)) kernel console output (not intermixed with test programs): ous mode [ 39.021188][ T3890] syzkaller0: entered allmulticast mode [ 39.035790][ T3889] loop4: detected capacity change from 0 to 128 [ 39.083031][ T3900] loop1: detected capacity change from 0 to 512 [ 39.099623][ T3900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.120613][ T3900] EXT4-fs (loop1): 1 truncate cleaned up [ 39.124663][ T3905] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20000 [ 39.127511][ T3900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.148119][ T3906] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 39.161070][ T3905] IPVS: stopping master sync thread 3906 ... [ 39.169003][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.193296][ T3908] ip6gre1: entered allmulticast mode [ 39.263754][ T3913] netlink: 'syz.4.166': attribute type 3 has an invalid length. [ 39.402928][ T3930] loop4: detected capacity change from 0 to 128 [ 39.421437][ T3932] loop1: detected capacity change from 0 to 512 [ 39.452138][ T3930] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.453159][ T3932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.481195][ T3930] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.485375][ T3932] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.544820][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.669148][ T3948] loop1: detected capacity change from 0 to 512 [ 39.676397][ T3948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.687518][ T3948] EXT4-fs (loop1): 1 truncate cleaned up [ 39.693634][ T3948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.883787][ T3954] netlink: 'syz.0.179': attribute type 1 has an invalid length. [ 39.916969][ T3956] FAULT_INJECTION: forcing a failure. [ 39.916969][ T3956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.930187][ T3956] CPU: 0 UID: 0 PID: 3956 Comm: syz.0.180 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 39.940896][ T3956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.951012][ T3956] Call Trace: [ 39.954301][ T3956] [ 39.957254][ T3956] dump_stack_lvl+0xf2/0x150 [ 39.961870][ T3956] dump_stack+0x15/0x1a [ 39.966138][ T3956] should_fail_ex+0x223/0x230 [ 39.970834][ T3956] should_fail+0xb/0x10 [ 39.975005][ T3956] should_fail_usercopy+0x1a/0x20 [ 39.980103][ T3956] copy_page_from_iter_atomic+0x228/0xf80 [ 39.985850][ T3956] ? shmem_write_begin+0xa2/0x180 [ 39.990879][ T3956] ? shmem_write_begin+0xda/0x180 [ 39.995912][ T3956] generic_perform_write+0x2f1/0x4a0 [ 40.001271][ T3956] shmem_file_write_iter+0xc2/0xe0 [ 40.006458][ T3956] vfs_write+0x77f/0x920 [ 40.010765][ T3956] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 40.016655][ T3956] ksys_write+0xe8/0x1b0 [ 40.020911][ T3956] __x64_sys_write+0x42/0x50 [ 40.025510][ T3956] x64_sys_call+0x287e/0x2dc0 [ 40.030193][ T3956] do_syscall_64+0xc9/0x1c0 [ 40.035144][ T3956] ? clear_bhb_loop+0x55/0xb0 [ 40.039839][ T3956] ? clear_bhb_loop+0x55/0xb0 [ 40.044533][ T3956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.050465][ T3956] RIP: 0033:0x7fd63f8ee98f [ 40.054897][ T3956] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 40.074607][ T3956] RSP: 002b:00007fd63df66e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 40.083136][ T3956] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fd63f8ee98f [ 40.091188][ T3956] RDX: 0000000000080000 RSI: 00007fd635b47000 RDI: 0000000000000009 [ 40.099203][ T3956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000580 [ 40.107177][ T3956] R10: 00000000000003c6 R11: 0000000000000293 R12: 0000000000000009 [ 40.115236][ T3956] R13: 00007fd63df66f10 R14: 00007fd63df66ed0 R15: 00007fd635b47000 [ 40.123268][ T3956] [ 40.129911][ T3956] loop0: detected capacity change from 0 to 1024 [ 40.138801][ T3956] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 40.150530][ T3956] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 40.166433][ T3956] EXT4-fs (loop0): mount failed [ 40.181674][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.225500][ T3962] loop3: detected capacity change from 0 to 512 [ 40.232731][ T3962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.240568][ T3962] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.249690][ T3962] EXT4-fs (loop3): blocks per group (2) and clusters per group (32768) inconsistent [ 40.269214][ T3962] pimreg: entered allmulticast mode [ 40.271967][ T3964] netlink: 'syz.4.181': attribute type 7 has an invalid length. [ 40.282306][ T3964] netlink: 'syz.4.181': attribute type 15 has an invalid length. [ 40.292727][ T3964] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 40.301527][ T3964] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 40.310227][ T3964] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 40.318998][ T3964] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 40.327828][ T3964] vxlan0: entered promiscuous mode [ 40.365901][ T3969] loop2: detected capacity change from 0 to 164 [ 40.372585][ T3964] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 40.385686][ T3969] syz.2.184: attempt to access beyond end of device [ 40.385686][ T3969] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 40.400524][ T3969] syz.2.184: attempt to access beyond end of device [ 40.400524][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.415100][ T3969] syz.2.184: attempt to access beyond end of device [ 40.415100][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.420144][ T3964] batman_adv: batadv0: Adding interface: macvlan0 [ 40.429221][ T3969] syz.2.184: attempt to access beyond end of device [ 40.429221][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.435030][ T3964] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.450137][ T3969] syz.2.184: attempt to access beyond end of device [ 40.450137][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.492143][ T3969] syz.2.184: attempt to access beyond end of device [ 40.492143][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.496005][ T3964] batman_adv: batadv0: Interface activated: macvlan0 [ 40.507392][ T3969] syz.2.184: attempt to access beyond end of device [ 40.507392][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.525877][ T3972] syz.2.184: attempt to access beyond end of device [ 40.525877][ T3972] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.540487][ T3969] syz.2.184: attempt to access beyond end of device [ 40.540487][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.562196][ T3969] syz.2.184: attempt to access beyond end of device [ 40.562196][ T3969] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.586892][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.602932][ T3975] FAULT_INJECTION: forcing a failure. [ 40.602932][ T3975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.616148][ T3975] CPU: 1 UID: 0 PID: 3975 Comm: syz.3.186 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 40.626760][ T3975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.636839][ T3975] Call Trace: [ 40.640141][ T3975] [ 40.643087][ T3975] dump_stack_lvl+0xf2/0x150 [ 40.647741][ T3975] dump_stack+0x15/0x1a [ 40.652006][ T3975] should_fail_ex+0x223/0x230 [ 40.656754][ T3975] should_fail+0xb/0x10 [ 40.660958][ T3975] should_fail_usercopy+0x1a/0x20 [ 40.666011][ T3975] strncpy_from_user+0x25/0x210 [ 40.670945][ T3975] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 40.676682][ T3975] ? getname_flags+0x81/0x3b0 [ 40.681373][ T3975] getname_flags+0xb0/0x3b0 [ 40.685885][ T3975] getname+0x17/0x20 [ 40.689863][ T3975] do_sys_openat2+0x67/0x120 [ 40.694466][ T3975] __x64_sys_openat+0xf3/0x120 [ 40.699311][ T3975] x64_sys_call+0x2b30/0x2dc0 [ 40.704005][ T3975] do_syscall_64+0xc9/0x1c0 [ 40.708546][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 40.713316][ T3975] ? clear_bhb_loop+0x55/0xb0 [ 40.718048][ T3975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.723990][ T3975] RIP: 0033:0x7f990acee840 [ 40.728424][ T3975] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 40.748044][ T3975] RSP: 002b:00007f9909366dc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 40.756586][ T3975] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f990acee840 [ 40.764584][ T3975] RDX: 0000000000000002 RSI: 00007f9909366ed0 RDI: 00000000ffffff9c [ 40.772570][ T3975] RBP: 00007f9909366ed0 R08: 0000000000000000 R09: 0000000000000240 [ 40.780546][ T3975] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 40.788544][ T3975] R13: 00007f9909366f10 R14: 00007f9909366ed0 R15: 00007f9900f47000 [ 40.796531][ T3975] [ 40.851783][ T3977] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 40.858561][ T3977] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 40.866365][ T3977] vhci_hcd vhci_hcd.0: Device attached [ 40.867681][ T3979] loop0: detected capacity change from 0 to 256 [ 40.882668][ T3980] vhci_hcd: connection closed [ 40.883135][ T3331] vhci_hcd: stop threads [ 40.892499][ T3331] vhci_hcd: release socket [ 40.896930][ T3331] vhci_hcd: disconnect device [ 40.935527][ T3979] FAT-fs (loop0): bogus sectors per cluster 0 [ 40.941764][ T3979] FAT-fs (loop0): Can't find a valid FAT filesystem [ 41.095050][ T3995] loop0: detected capacity change from 0 to 4096 [ 41.129446][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.139612][ T4000] loop4: detected capacity change from 0 to 1024 [ 41.218933][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.253286][ T4000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.298341][ T4000] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.349168][ T4016] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 41.400200][ T4000] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 41.412565][ T4000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.412565][ T4000] [ 41.422459][ T4000] EXT4-fs (loop4): Total free blocks count 0 [ 41.428461][ T4000] EXT4-fs (loop4): Free/Dirty block details [ 41.434685][ T4000] EXT4-fs (loop4): free_blocks=0 [ 41.439699][ T4000] EXT4-fs (loop4): dirty_blocks=0 [ 41.444776][ T4000] EXT4-fs (loop4): Block reservation details [ 41.450816][ T4000] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 41.493518][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.507233][ T4029] loop0: detected capacity change from 0 to 512 [ 41.517481][ T4025] loop3: detected capacity change from 0 to 164 [ 41.530692][ T4029] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.547070][ T4030] netlink: 'syz.1.195': attribute type 4 has an invalid length. [ 41.558666][ T4025] Unable to read rock-ridge attributes [ 41.567083][ T4032] loop4: detected capacity change from 0 to 512 [ 41.575183][ T4025] Unable to read rock-ridge attributes [ 41.582444][ T4029] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.599159][ T4025] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 41.607610][ T4029] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.197: invalid indirect mapped block 4294967295 (level 1) [ 41.640496][ T4032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.655250][ T4029] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.197: invalid indirect mapped block 4294967295 (level 1) [ 41.677914][ T4032] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.703005][ T4032] Process accounting resumed [ 41.719621][ T4029] EXT4-fs (loop0): 2 truncates cleaned up [ 41.729970][ T4032] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.732043][ T4029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.771369][ T4028] EXT4-fs error (device loop0): ext4_get_parent:1860: inode #11: comm syz.0.197: bad parent inode number: 3 [ 41.812495][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.923500][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.960227][ T4062] loop4: detected capacity change from 0 to 512 [ 42.015874][ T4062] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.203: bg 0: block 393: padding at end of block bitmap is not set [ 42.033616][ T4072] loop0: detected capacity change from 0 to 512 [ 42.063658][ T4062] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 42.092676][ T4062] EXT4-fs (loop4): 2 truncates cleaned up [ 42.104489][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.125282][ T4062] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #12: block 7: comm syz.4.203: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 42.147358][ T4084] ip6gre1: entered allmulticast mode [ 42.204207][ T4091] loop0: detected capacity change from 0 to 256 [ 42.211507][ T4089] loop1: detected capacity change from 0 to 512 [ 42.245095][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.245206][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.257760][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.258266][ T4062] bond1: entered promiscuous mode [ 42.269415][ T4089] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.281900][ T4062] bond1: entered allmulticast mode [ 42.308031][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.312992][ T4062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.351765][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.351831][ T4062] bond1 (unregistering): Released all slaves [ 42.367217][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.367321][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.378814][ T4097] syz.2.211[4097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.396918][ T4097] pim6reg1: entered promiscuous mode [ 42.413800][ T4097] pim6reg1: entered allmulticast mode [ 42.461689][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.487144][ T4108] loop4: detected capacity change from 0 to 512 [ 42.523012][ T4108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.537356][ T4108] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.553655][ T29] kauditd_printk_skb: 743 callbacks suppressed [ 42.553671][ T29] audit: type=1400 audit(1733685978.169:1396): avc: denied { mounton } for pid=4107 comm="syz.4.215" path="/36/bus/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 42.586542][ T29] audit: type=1400 audit(1733685978.209:1397): avc: denied { read } for pid=4109 comm="syz.3.216" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.586917][ T4114] loop2: detected capacity change from 0 to 512 [ 42.610073][ T29] audit: type=1400 audit(1733685978.209:1398): avc: denied { open } for pid=4109 comm="syz.3.216" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.640345][ T29] audit: type=1400 audit(1733685978.209:1399): avc: denied { ioctl } for pid=4109 comm="syz.3.216" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.659286][ T4114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.682348][ T29] audit: type=1400 audit(1733685978.289:1400): avc: denied { create } for pid=4109 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.687080][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.701898][ T29] audit: type=1400 audit(1733685978.289:1401): avc: denied { setopt } for pid=4109 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.711456][ T4114] EXT4-fs (loop2): 1 truncate cleaned up [ 42.730219][ T29] audit: type=1400 audit(1733685978.289:1402): avc: denied { bind } for pid=4109 comm="syz.3.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.755251][ T29] audit: type=1400 audit(1733685978.289:1403): avc: denied { name_bind } for pid=4109 comm="syz.3.216" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.757037][ T4114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.776974][ T29] audit: type=1400 audit(1733685978.289:1404): avc: denied { node_bind } for pid=4109 comm="syz.3.216" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 42.777016][ T29] audit: type=1326 audit(1733685978.289:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.3.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 42.840655][ T4119] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.861569][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.936089][ T4127] loop0: detected capacity change from 0 to 128 [ 42.957660][ T4127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.983815][ T4127] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.082939][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.310179][ T4147] loop1: detected capacity change from 0 to 164 [ 43.334808][ T4147] ISOFS: unable to read i-node block [ 43.340208][ T4147] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 43.428502][ T4155] loop1: detected capacity change from 0 to 512 [ 43.499568][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.506839][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.518450][ T4155] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.548916][ T4155] EXT4-fs (loop1): 1 truncate cleaned up [ 43.569276][ T4155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.620812][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.759554][ T4186] loop2: detected capacity change from 0 to 256 [ 43.830252][ T4190] FAULT_INJECTION: forcing a failure. [ 43.830252][ T4190] name failslab, interval 1, probability 0, space 0, times 0 [ 43.842992][ T4190] CPU: 1 UID: 0 PID: 4190 Comm: syz.3.243 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 43.853648][ T4190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 43.863734][ T4190] Call Trace: [ 43.867034][ T4190] [ 43.870039][ T4190] dump_stack_lvl+0xf2/0x150 [ 43.874668][ T4190] dump_stack+0x15/0x1a [ 43.878863][ T4190] should_fail_ex+0x223/0x230 [ 43.883631][ T4190] ? p9_client_create+0x57/0xaf0 [ 43.888641][ T4190] should_failslab+0x8f/0xb0 [ 43.893260][ T4190] __kmalloc_cache_noprof+0x4e/0x320 [ 43.898751][ T4190] p9_client_create+0x57/0xaf0 [ 43.903582][ T4190] ? should_failslab+0x8f/0xb0 [ 43.908405][ T4190] ? __kmalloc_node_track_caller_noprof+0x1e4/0x410 [ 43.915008][ T4190] ? v9fs_session_init+0x79/0xda0 [ 43.920109][ T4190] v9fs_session_init+0xf9/0xda0 [ 43.925056][ T4190] ? should_fail_ex+0xd7/0x230 [ 43.929839][ T4190] ? v9fs_mount+0x53/0x570 [ 43.934252][ T4190] ? should_failslab+0x8f/0xb0 [ 43.939067][ T4190] ? __kmalloc_cache_noprof+0x186/0x320 [ 43.944733][ T4190] v9fs_mount+0x69/0x570 [ 43.949027][ T4190] ? __pfx_v9fs_mount+0x10/0x10 [ 43.953883][ T4190] legacy_get_tree+0x77/0xd0 [ 43.958564][ T4190] vfs_get_tree+0x56/0x1e0 [ 43.963036][ T4190] do_new_mount+0x227/0x690 [ 43.967618][ T4190] path_mount+0x49b/0xb30 [ 43.971968][ T4190] __se_sys_mount+0x27c/0x2d0 [ 43.976702][ T4190] __x64_sys_mount+0x67/0x80 [ 43.981313][ T4190] x64_sys_call+0x2c84/0x2dc0 [ 43.986070][ T4190] do_syscall_64+0xc9/0x1c0 [ 43.990581][ T4190] ? clear_bhb_loop+0x55/0xb0 [ 43.995286][ T4190] ? clear_bhb_loop+0x55/0xb0 [ 44.000001][ T4190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.005973][ T4190] RIP: 0033:0x7f990acefed9 [ 44.010396][ T4190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.030022][ T4190] RSP: 002b:00007f9909367058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 44.038541][ T4190] RAX: ffffffffffffffda RBX: 00007f990aeb5fa0 RCX: 00007f990acefed9 [ 44.046518][ T4190] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000 [ 44.054500][ T4190] RBP: 00007f99093670a0 R08: 0000000020000600 R09: 0000000000000000 [ 44.062546][ T4190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.070559][ T4190] R13: 0000000000000000 R14: 00007f990aeb5fa0 R15: 00007ffd879a5238 [ 44.078574][ T4190] [ 44.116407][ T4195] syz.0.244[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.116486][ T4195] syz.0.244[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.132393][ T4193] loop2: detected capacity change from 0 to 512 [ 44.152848][ T4199] loop4: detected capacity change from 0 to 128 [ 44.160714][ T4193] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 3: comm syz.2.242: lblock 0 mapped to illegal pblock 3 (length 1) [ 44.165577][ T4203] FAULT_INJECTION: forcing a failure. [ 44.165577][ T4203] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.174788][ T4193] EXT4-fs (loop2): Remounting filesystem read-only [ 44.187881][ T4203] CPU: 1 UID: 0 PID: 4203 Comm: syz.1.245 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 44.194417][ T4193] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.242: error -117 reading directory block [ 44.205048][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.218753][ T4193] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 44.227524][ T4203] Call Trace: [ 44.227535][ T4203] [ 44.227544][ T4203] dump_stack_lvl+0xf2/0x150 [ 44.236125][ T4193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.239023][ T4203] dump_stack+0x15/0x1a [ 44.245681][ T4193] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 44.246519][ T4203] should_fail_ex+0x223/0x230 [ 44.259332][ T4193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.263108][ T4203] should_fail_alloc_page+0xfd/0x110 [ 44.288620][ T4203] __alloc_pages_noprof+0x109/0x340 [ 44.293849][ T4203] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 44.299297][ T4203] alloc_pages_noprof+0xe1/0x100 [ 44.304261][ T4203] kimage_alloc_page+0x136/0x590 [ 44.309229][ T4203] kimage_load_segment+0x4a9/0x790 [ 44.314370][ T4203] do_kexec_load+0x3cf/0x490 [ 44.319078][ T4203] __se_sys_kexec_load+0x12b/0x160 [ 44.324209][ T4203] __x64_sys_kexec_load+0x55/0x70 [ 44.329292][ T4203] x64_sys_call+0x2cac/0x2dc0 [ 44.333992][ T4203] do_syscall_64+0xc9/0x1c0 [ 44.338501][ T4203] ? clear_bhb_loop+0x55/0xb0 [ 44.343185][ T4203] ? clear_bhb_loop+0x55/0xb0 [ 44.347874][ T4203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.353790][ T4203] RIP: 0033:0x7fdead8ffed9 [ 44.358230][ T4203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.377929][ T4203] RSP: 002b:00007fdeabf56058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 44.386373][ T4203] RAX: ffffffffffffffda RBX: 00007fdeadac6080 RCX: 00007fdead8ffed9 [ 44.394355][ T4203] RDX: 00000000200002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.402577][ T4203] RBP: 00007fdeabf560a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.410568][ T4203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 44.418547][ T4203] R13: 0000000000000000 R14: 00007fdeadac6080 R15: 00007fff99b2a428 [ 44.426530][ T4203] [ 44.438747][ T4195] syz.0.244[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.483965][ T4199] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.503149][ T4199] FAT-fs (loop4): Filesystem has been set read-only [ 44.598502][ T4206] loop3: detected capacity change from 0 to 512 [ 44.609106][ T4199] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.617098][ T4199] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 44.640008][ T4206] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 44.652459][ T4217] loop2: detected capacity change from 0 to 512 [ 44.679645][ T4217] EXT4-fs: Ignoring removed i_version option [ 44.685710][ T4217] EXT4-fs: Ignoring removed nobh option [ 44.701176][ T4206] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 44.712375][ T4206] System zones: 1-12 [ 44.717057][ T4217] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.719831][ T4206] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.248: corrupted in-inode xattr: e_value size too large [ 44.754700][ T4217] EXT4-fs (loop2): 1 truncate cleaned up [ 44.783674][ T4217] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.827104][ T4206] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.248: couldn't read orphan inode 15 (err -117) [ 44.858357][ T4206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.897576][ T4237] loop4: detected capacity change from 0 to 256 [ 44.997751][ T4241] __nla_validate_parse: 12 callbacks suppressed [ 44.997770][ T4241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 45.069267][ T4238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 45.145309][ T4238] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.310566][ T4253] loop4: detected capacity change from 0 to 1024 [ 45.329503][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.379429][ T4249] loop0: detected capacity change from 0 to 512 [ 45.422031][ T4249] EXT4-fs: Ignoring removed i_version option [ 45.428091][ T4249] EXT4-fs: Ignoring removed nobh option [ 45.480500][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.510710][ T4249] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.530537][ T4249] EXT4-fs (loop0): 1 truncate cleaned up [ 45.536576][ T4249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.563031][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.599305][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.611556][ T4263] netlink: 80 bytes leftover after parsing attributes in process `syz.4.258'. [ 45.643783][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.662615][ T4238] syz.1.252 (4238) used greatest stack depth: 10312 bytes left [ 45.663411][ T4267] FAULT_INJECTION: forcing a failure. [ 45.663411][ T4267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.683487][ T4267] CPU: 0 UID: 0 PID: 4267 Comm: syz.0.260 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 45.694160][ T4267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 45.704239][ T4267] Call Trace: [ 45.707535][ T4267] [ 45.710475][ T4267] dump_stack_lvl+0xf2/0x150 [ 45.715136][ T4267] dump_stack+0x15/0x1a [ 45.719309][ T4267] should_fail_ex+0x223/0x230 [ 45.724001][ T4267] should_fail+0xb/0x10 [ 45.728178][ T4267] should_fail_usercopy+0x1a/0x20 [ 45.733292][ T4267] copy_page_from_iter_atomic+0x228/0xf80 [ 45.739035][ T4267] ? shmem_write_begin+0xa2/0x180 [ 45.744158][ T4267] ? shmem_write_begin+0xda/0x180 [ 45.749189][ T4267] generic_perform_write+0x2f1/0x4a0 [ 45.754504][ T4267] shmem_file_write_iter+0xc2/0xe0 [ 45.759647][ T4267] vfs_write+0x77f/0x920 [ 45.764050][ T4267] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 45.769891][ T4267] ksys_write+0xe8/0x1b0 [ 45.774148][ T4267] __x64_sys_write+0x42/0x50 [ 45.778748][ T4267] x64_sys_call+0x287e/0x2dc0 [ 45.783431][ T4267] do_syscall_64+0xc9/0x1c0 [ 45.787974][ T4267] ? clear_bhb_loop+0x55/0xb0 [ 45.792658][ T4267] ? clear_bhb_loop+0x55/0xb0 [ 45.797387][ T4267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.803318][ T4267] RIP: 0033:0x7fd63f8ee98f [ 45.807813][ T4267] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 45.827470][ T4267] RSP: 002b:00007fd63df66d60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 45.835891][ T4267] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007fd63f8ee98f [ 45.843912][ T4267] RDX: 0000000000400000 RSI: 00007fd635b47000 RDI: 0000000000000009 [ 45.851887][ T4267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001052 [ 45.859881][ T4267] R10: 0000000000000072 R11: 0000000000000293 R12: 0000000000000009 [ 45.867860][ T4267] R13: 00007fd63df66e0c R14: 00007fd63df66e10 R15: 00007fd635b47000 [ 45.875842][ T4267] [ 45.907269][ T4267] loop0: detected capacity change from 0 to 8192 [ 45.932911][ T4274] netdevsim netdevsim2 netdevsim2: Unsupported IPsec algorithm [ 45.942288][ T4269] loop3: detected capacity change from 0 to 164 [ 45.964465][ T4269] Unable to read rock-ridge attributes [ 45.973705][ T4269] Unable to read rock-ridge attributes [ 45.979827][ T4269] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 46.012972][ T4267] loop0: p1 p2 < > p3 p4 < p5 > [ 46.018670][ T4267] loop0: p1 size 108986237 extends beyond EOD, truncated [ 46.027691][ T4267] loop0: p3 size 131072 extends beyond EOD, truncated [ 46.028795][ T4282] loop1: detected capacity change from 0 to 256 [ 46.037332][ T4267] loop0: p5 size 108986237 extends beyond EOD, truncated [ 46.058703][ T2998] loop0: p1 p2 < > p3 p4 < p5 > [ 46.065427][ T2998] loop0: p1 size 108986237 extends beyond EOD, truncated [ 46.073803][ T2998] loop0: p3 size 131072 extends beyond EOD, truncated [ 46.088739][ T2998] loop0: p5 size 108986237 extends beyond EOD, truncated [ 46.162998][ T4290] loop1: detected capacity change from 0 to 512 [ 46.173292][ T4290] EXT4-fs: Ignoring removed i_version option [ 46.179603][ T4290] EXT4-fs: Ignoring removed nobh option [ 46.186750][ T3600] udevd[3600]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 46.187749][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.198163][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 46.230235][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 46.240707][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 46.251666][ T4290] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.267051][ T4290] EXT4-fs (loop1): 1 truncate cleaned up [ 46.275493][ T4290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.276039][ T4295] loop3: detected capacity change from 0 to 512 [ 46.305974][ T4293] loop0: detected capacity change from 0 to 164 [ 46.312109][ T4298] loop4: detected capacity change from 0 to 512 [ 46.320835][ T4295] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.332100][ T4298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.342993][ T4295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 46.351405][ T4295] System zones: 1-12 [ 46.351438][ T4293] Unable to read rock-ridge attributes [ 46.354557][ T4293] Unable to read rock-ridge attributes [ 46.356054][ T4295] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.271: corrupted in-inode xattr: e_value size too large [ 46.361796][ T4293] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 46.366876][ T4295] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.271: couldn't read orphan inode 15 (err -117) [ 46.381827][ T4298] EXT4-fs (loop4): 1 truncate cleaned up [ 46.388467][ T4295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.421808][ T4298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.453049][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.485449][ T4303] loop4: detected capacity change from 0 to 512 [ 46.497144][ T4303] EXT4-fs: Ignoring removed orlov option [ 46.508965][ T4303] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.525644][ T4303] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.532909][ T4303] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.273: bg 0: block 248: padding at end of block bitmap is not set [ 46.548514][ T4303] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.273: Failed to acquire dquot type 1 [ 46.564124][ T4303] EXT4-fs (loop4): 1 truncate cleaned up [ 46.571204][ T4303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.586534][ T4303] syz.4.273 (4303) used greatest stack depth: 9304 bytes left [ 46.623060][ T4309] program syz.0.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.642115][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.652781][ T4309] netlink: 'syz.0.274': attribute type 3 has an invalid length. [ 46.840643][ T4321] x_tables: unsorted underflow at hook 3 [ 46.882566][ T4323] loop0: detected capacity change from 0 to 512 [ 46.898754][ T4325] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 46.898754][ T4325] program syz.2.281 not setting count and/or reply_len properly [ 46.916106][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.917211][ T4323] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.953894][ T4323] EXT4-fs (loop0): 1 truncate cleaned up [ 46.960303][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.032171][ T4330] loop2: detected capacity change from 0 to 1024 [ 47.038953][ T4330] EXT4-fs: Ignoring removed nobh option [ 47.044629][ T4330] EXT4-fs: Ignoring removed orlov option [ 47.052730][ T4333] loop3: detected capacity change from 0 to 256 [ 47.063815][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.076301][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.101139][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.131843][ T4343] netlink: 'syz.4.286': attribute type 9 has an invalid length. [ 47.139621][ T4343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 47.150009][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.158774][ T4343] batman_adv: batadv0: Interface deactivated: macvlan0 [ 47.176711][ T4342] loop0: detected capacity change from 0 to 164 [ 47.194020][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.207701][ T4342] Unable to read rock-ridge attributes [ 47.213956][ T4342] Unable to read rock-ridge attributes [ 47.226070][ T4342] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 47.249780][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.290877][ T4354] loop2: detected capacity change from 0 to 256 [ 47.309168][ T4358] loop1: detected capacity change from 0 to 2048 [ 47.311192][ T4356] loop4: detected capacity change from 0 to 512 [ 47.317014][ T4358] EXT4-fs: dax option not supported [ 47.345109][ T4356] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 47.364066][ T4356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 47.372239][ T4356] System zones: 1-12 [ 47.382318][ T4356] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.292: corrupted in-inode xattr: e_value size too large [ 47.413081][ T4356] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.292: couldn't read orphan inode 15 (err -117) [ 47.413536][ T4363] loop0: detected capacity change from 0 to 512 [ 47.443159][ T4363] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.452199][ T4356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.458308][ T4363] EXT4-fs (loop0): 1 truncate cleaned up [ 47.501417][ T4363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.567139][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 47.567178][ T29] audit: type=1400 audit(1733685983.179:1859): avc: denied { ioctl } for pid=4364 comm="syz.2.296" path="socket:[7555]" dev="sockfs" ino=7555 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.648908][ T4373] loop0: detected capacity change from 0 to 512 [ 47.663176][ T4373] EXT4-fs: Ignoring removed i_version option [ 47.669985][ T4373] EXT4-fs: Ignoring removed nobh option [ 47.690039][ T4373] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.704025][ T4373] EXT4-fs (loop0): 1 truncate cleaned up [ 47.894460][ T4382] loop1: detected capacity change from 0 to 256 [ 47.919289][ T4382] FAT-fs (loop1): Directory bread(block 64) failed [ 47.919389][ T4382] FAT-fs (loop1): Directory bread(block 65) failed [ 47.919778][ T4382] FAT-fs (loop1): Directory bread(block 66) failed [ 47.919835][ T4382] FAT-fs (loop1): Directory bread(block 67) failed [ 47.919864][ T4382] FAT-fs (loop1): Directory bread(block 68) failed [ 47.919889][ T4382] FAT-fs (loop1): Directory bread(block 69) failed [ 47.919973][ T4382] FAT-fs (loop1): Directory bread(block 70) failed [ 47.919997][ T4382] FAT-fs (loop1): Directory bread(block 71) failed [ 47.920052][ T4382] FAT-fs (loop1): Directory bread(block 72) failed [ 47.920076][ T4382] FAT-fs (loop1): Directory bread(block 73) failed [ 47.957079][ T29] audit: type=1400 audit(1733685983.579:1860): avc: denied { create } for pid=4381 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.960573][ T29] audit: type=1400 audit(1733685983.579:1861): avc: denied { bind } for pid=4381 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.960603][ T29] audit: type=1400 audit(1733685983.579:1862): avc: denied { setopt } for pid=4381 comm="syz.1.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.007198][ T29] audit: type=1326 audit(1733685983.619:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.008565][ T29] audit: type=1326 audit(1733685983.619:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.008710][ T29] audit: type=1326 audit(1733685983.619:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.008831][ T29] audit: type=1326 audit(1733685983.619:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.009001][ T29] audit: type=1326 audit(1733685983.619:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.009050][ T29] audit: type=1326 audit(1733685983.619:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4387 comm="syz.3.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990acefed9 code=0x7ffc0000 [ 48.086547][ T4390] loop3: detected capacity change from 0 to 256 [ 48.104629][ T4392] loop1: detected capacity change from 0 to 164 [ 48.332952][ T4392] Unable to read rock-ridge attributes [ 48.347643][ T4392] Unable to read rock-ridge attributes [ 48.354814][ T4392] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 48.380846][ T4396] loop2: detected capacity change from 0 to 512 [ 48.393628][ T4396] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.408846][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 48.428730][ T4403] loop4: detected capacity change from 0 to 512 [ 48.440953][ T4403] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.310: bg 0: block 127: padding at end of block bitmap is not set [ 48.471929][ T4403] EXT4-fs (loop4): Remounting filesystem read-only [ 48.484314][ T4403] EXT4-fs (loop4): 1 truncate cleaned up [ 48.490520][ T4403] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 48.516586][ T4405] sg_write: data in/out 525275/547 bytes for SCSI command 0x0-- guessing data in; [ 48.516586][ T4405] program syz.3.311 not setting count and/or reply_len properly [ 48.526899][ T4413] loop2: detected capacity change from 0 to 1024 [ 48.541147][ T4403] loop4: detected capacity change from 0 to 1024 [ 48.542248][ T4413] EXT4-fs: Ignoring removed orlov option [ 48.553500][ T4413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.557440][ T4403] EXT4-fs: Ignoring removed nobh option [ 48.566052][ T4403] EXT4-fs: Ignoring removed orlov option [ 48.581672][ T4405] loop3: detected capacity change from 0 to 512 [ 48.595164][ T4405] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 48.646721][ T4418] loop1: detected capacity change from 0 to 1764 [ 48.667056][ T4423] @ÿ: renamed from bond_slave_0 (while UP) [ 48.671051][ T4425] 9pnet: Unknown protocol version 9€2000.u [ 48.715810][ T4425] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 48.728304][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 48.737325][ T4418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 48.760194][ T4423] process 'syz.3.316' launched '/dev/fd/9' with NULL argv: empty string added [ 48.764919][ T4425] netlink: 'syz.0.317': attribute type 29 has an invalid length. [ 48.780907][ T4425] netlink: 588 bytes leftover after parsing attributes in process `syz.0.317'. [ 48.892997][ T4441] loop0: detected capacity change from 0 to 164 [ 48.915344][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x7 [ 48.922805][ T8] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 48.934810][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 48.960404][ T4441] Unable to read rock-ridge attributes [ 48.972054][ T4441] Unable to read rock-ridge attributes [ 48.981874][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x6 [ 48.989392][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0xd [ 48.998861][ T8] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 49.071802][ T4449] Unable to read rock-ridge attributes [ 49.088816][ T4449] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.092315][ T4452] loop1: detected capacity change from 0 to 512 [ 49.107856][ T4449] Unable to read rock-ridge attributes [ 49.120212][ T4453] loop3: detected capacity change from 0 to 164 [ 49.121330][ T4449] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.130865][ T4452] EXT4-fs: Ignoring removed i_version option [ 49.140133][ T4452] EXT4-fs: Ignoring removed nobh option [ 49.160583][ T4452] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.171299][ T4453] Unable to read rock-ridge attributes [ 49.187324][ T4453] Unable to read rock-ridge attributes [ 49.195412][ T4452] EXT4-fs (loop1): 1 truncate cleaned up [ 49.201716][ T4453] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 49.333048][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.352406][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.414547][ T4461] loop4: detected capacity change from 0 to 2048 [ 49.488073][ T4461] Alternate GPT is invalid, using primary GPT. [ 49.494589][ T4461] loop4: p1 p2 p3 [ 49.631665][ T4461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 49.768666][ T4466] loop0: detected capacity change from 0 to 2048 [ 49.826636][ T4466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.330'. [ 50.069406][ T4482] FAULT_INJECTION: forcing a failure. [ 50.069406][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 50.082133][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.3.335 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 50.092786][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.102857][ T4482] Call Trace: [ 50.106188][ T4482] [ 50.109177][ T4482] dump_stack_lvl+0xf2/0x150 [ 50.113824][ T4482] dump_stack+0x15/0x1a [ 50.118073][ T4482] should_fail_ex+0x223/0x230 [ 50.122783][ T4482] should_failslab+0x8f/0xb0 [ 50.127554][ T4482] kmem_cache_alloc_noprof+0x52/0x320 [ 50.133047][ T4482] ? skb_clone+0x154/0x1f0 [ 50.137604][ T4482] ? __pfx_stp_pdu_rcv+0x10/0x10 [ 50.142575][ T4482] skb_clone+0x154/0x1f0 [ 50.146951][ T4482] ? __pfx_llc_conn_handler+0x10/0x10 [ 50.152533][ T4482] llc_rcv+0x47f/0x750 [ 50.156670][ T4482] ? __pfx_llc_rcv+0x10/0x10 [ 50.161294][ T4482] __netif_receive_skb_list_core+0x493/0x520 [ 50.167331][ T4482] netif_receive_skb_list_internal+0x4e4/0x660 [ 50.173586][ T4482] netif_receive_skb_list+0x31/0x230 [ 50.179012][ T4482] bpf_test_run_xdp_live+0xe0d/0x1040 [ 50.184404][ T4482] ? bpf_dispatcher_xdp_func+0x20/0x30 [ 50.189947][ T4482] ? cpus_read_unlock+0x7b/0xc0 [ 50.194911][ T4482] ? __static_call_update+0x362/0x3a0 [ 50.200378][ T4482] ? bpf_dispatcher_change_prog+0x747/0x840 [ 50.206295][ T4482] ? bpf_test_run_xdp_live+0x2b1/0x1040 [ 50.211913][ T4482] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 50.217241][ T4482] ? __rcu_read_unlock+0x4e/0x70 [ 50.222200][ T4482] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 50.228090][ T4482] bpf_prog_test_run+0x20f/0x3a0 [ 50.233068][ T4482] __sys_bpf+0x400/0x7a0 [ 50.237329][ T4482] __x64_sys_bpf+0x43/0x50 [ 50.241857][ T4482] x64_sys_call+0x2914/0x2dc0 [ 50.246556][ T4482] do_syscall_64+0xc9/0x1c0 [ 50.251081][ T4482] ? clear_bhb_loop+0x55/0xb0 [ 50.255781][ T4482] ? clear_bhb_loop+0x55/0xb0 [ 50.260641][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.266620][ T4482] RIP: 0033:0x7f990acefed9 [ 50.271110][ T4482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.290728][ T4482] RSP: 002b:00007f9909367058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.299183][ T4482] RAX: ffffffffffffffda RBX: 00007f990aeb5fa0 RCX: 00007f990acefed9 [ 50.307162][ T4482] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 50.315169][ T4482] RBP: 00007f99093670a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.323210][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 50.331194][ T4482] R13: 0000000000000000 R14: 00007f990aeb5fa0 R15: 00007ffd879a5238 [ 50.339249][ T4482] [ 50.414308][ T4481] Cannot find add_set index 0 as target [ 50.431616][ T4460] syz.4.328 (4460) used greatest stack depth: 7184 bytes left [ 50.480283][ T4488] loop3: detected capacity change from 0 to 512 [ 50.487558][ T4488] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 50.512376][ T4490] FAULT_INJECTION: forcing a failure. [ 50.512376][ T4490] name failslab, interval 1, probability 0, space 0, times 0 [ 50.525104][ T4490] CPU: 1 UID: 0 PID: 4490 Comm: syz.4.336 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 50.535717][ T4490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.547250][ T4490] Call Trace: [ 50.550547][ T4490] [ 50.553495][ T4490] dump_stack_lvl+0xf2/0x150 [ 50.558129][ T4490] dump_stack+0x15/0x1a [ 50.562322][ T4490] should_fail_ex+0x223/0x230 [ 50.567063][ T4490] should_failslab+0x8f/0xb0 [ 50.571810][ T4490] __kmalloc_noprof+0xab/0x3f0 [ 50.576606][ T4490] ? fib_create_info+0x719/0x1550 [ 50.581673][ T4490] fib_create_info+0x719/0x1550 [ 50.586649][ T4490] fib_table_insert+0x10d/0xf90 [ 50.591532][ T4490] ? rtm_to_fib_config+0x706/0x8a0 [ 50.596754][ T4490] inet_rtm_newroute+0xa3/0x140 [ 50.601703][ T4490] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 50.607259][ T4490] rtnetlink_rcv_msg+0x6aa/0x710 [ 50.612296][ T4490] ? ref_tracker_free+0x3a5/0x410 [ 50.617336][ T4490] ? __dev_queue_xmit+0x186/0x2090 [ 50.622464][ T4490] netlink_rcv_skb+0x12c/0x230 [ 50.627319][ T4490] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 50.632816][ T4490] rtnetlink_rcv+0x1c/0x30 [ 50.637377][ T4490] netlink_unicast+0x599/0x670 [ 50.642164][ T4490] netlink_sendmsg+0x5cc/0x6e0 [ 50.647028][ T4490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.652420][ T4490] __sock_sendmsg+0x140/0x180 [ 50.657199][ T4490] ____sys_sendmsg+0x312/0x410 [ 50.661995][ T4490] __sys_sendmsg+0x19d/0x230 [ 50.666616][ T4490] __x64_sys_sendmsg+0x46/0x50 [ 50.671478][ T4490] x64_sys_call+0x2734/0x2dc0 [ 50.676184][ T4490] do_syscall_64+0xc9/0x1c0 [ 50.680783][ T4490] ? clear_bhb_loop+0x55/0xb0 [ 50.685562][ T4490] ? clear_bhb_loop+0x55/0xb0 [ 50.690258][ T4490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.696253][ T4490] RIP: 0033:0x7f707ea0fed9 [ 50.700723][ T4490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.720363][ T4490] RSP: 002b:00007f707d087058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.728816][ T4490] RAX: ffffffffffffffda RBX: 00007f707ebd5fa0 RCX: 00007f707ea0fed9 [ 50.736795][ T4490] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 50.744846][ T4490] RBP: 00007f707d0870a0 R08: 0000000000000000 R09: 0000000000000000 [ 50.752819][ T4490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.760796][ T4490] R13: 0000000000000000 R14: 00007f707ebd5fa0 R15: 00007ffc8cc85728 [ 50.768785][ T4490] [ 50.814898][ T4492] loop3: detected capacity change from 0 to 164 [ 50.831584][ T4492] Unable to read rock-ridge attributes [ 50.834232][ T4496] loop2: detected capacity change from 0 to 512 [ 50.837758][ T4492] Unable to read rock-ridge attributes [ 50.850609][ T4492] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 50.856963][ T4496] EXT4-fs: Ignoring removed i_version option [ 50.864239][ T4496] EXT4-fs: Ignoring removed nobh option [ 50.872844][ T4496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.900600][ T4496] EXT4-fs (loop2): 1 truncate cleaned up [ 50.983108][ T4508] loop2: detected capacity change from 0 to 512 [ 50.996567][ T4503] loop4: detected capacity change from 0 to 512 [ 51.009066][ T4508] EXT4-fs (loop2): 1 truncate cleaned up [ 51.017040][ T4503] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.136763][ T4522] loop2: detected capacity change from 0 to 512 [ 51.143353][ T4522] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.298764][ T4534] loop2: detected capacity change from 0 to 512 [ 51.305836][ T4534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.316629][ T4534] EXT4-fs (loop2): 1 truncate cleaned up [ 51.448075][ T4539] loop2: detected capacity change from 0 to 164 [ 51.456618][ T4539] Unable to read rock-ridge attributes [ 51.463728][ T4539] Unable to read rock-ridge attributes [ 51.470054][ T4539] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 51.622815][ T35] hid (null): report_id 20430 is invalid [ 51.623964][ T4542] sctp: [Deprecated]: syz.2.356 (pid 4542) Use of int in max_burst socket option. [ 51.623964][ T4542] Use struct sctp_assoc_value instead [ 51.629932][ T35] hid-generic 0006:0000:0009.0003: unexpected long global item [ 51.651080][ T35] hid-generic 0006:0000:0009.0003: probe with driver hid-generic failed with error -22 [ 51.832708][ T4551] loop4: detected capacity change from 0 to 512 [ 51.839585][ T4551] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 51.895423][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.362'. [ 51.904556][ T4555] bridge_slave_1: left allmulticast mode [ 51.910428][ T4555] bridge_slave_1: left promiscuous mode [ 51.916132][ T4555] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.924127][ T4555] bridge_slave_0: left allmulticast mode [ 51.929886][ T4555] bridge_slave_0: left promiscuous mode [ 51.935564][ T4555] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.999245][ T4559] loop0: detected capacity change from 0 to 512 [ 52.006780][ T4559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.018355][ T4559] EXT4-fs (loop0): 1 truncate cleaned up [ 52.063742][ T4564] loop0: detected capacity change from 0 to 164 [ 52.079285][ T4564] Unable to read rock-ridge attributes [ 52.091854][ T4564] Unable to read rock-ridge attributes [ 52.098935][ T4564] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.146674][ T4570] loop3: detected capacity change from 0 to 512 [ 52.154891][ T4570] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.164615][ T4570] journal_path: Lookup failure for './file0' [ 52.170750][ T4570] EXT4-fs: error: could not find journal device path [ 52.264669][ T4579] Zero length message leads to an empty skb [ 52.341521][ T4589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.378'. [ 52.360043][ T4583] tipc: Started in network mode [ 52.365038][ T4583] tipc: Node identity ac14140f, cluster identity 4711 [ 52.378258][ T4583] tipc: New replicast peer: 255.255.255.255 [ 52.384517][ T4583] tipc: Enabled bearer , priority 10 [ 52.400049][ T4594] loop4: detected capacity change from 0 to 128 [ 52.466489][ T4600] loop7: detected capacity change from 0 to 16384 [ 52.478740][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 52.562288][ T4594] netlink: 'syz.4.380': attribute type 4 has an invalid length. [ 52.570055][ T4594] netlink: 17 bytes leftover after parsing attributes in process `syz.4.380'. [ 52.589688][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 52.589704][ T29] audit: type=1400 audit(1733685988.209:2247): avc: denied { append } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.620798][ T4600] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 52.642800][ T29] audit: type=1400 audit(1733685988.259:2248): avc: denied { create } for pid=4593 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.645142][ T4604] loop1: detected capacity change from 0 to 164 [ 52.662963][ T29] audit: type=1400 audit(1733685988.259:2249): avc: denied { create } for pid=4601 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 52.663077][ T29] audit: type=1400 audit(1733685988.259:2250): avc: denied { map_read map_write } for pid=4601 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.689974][ T4600] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 6 prio class 0 [ 52.708466][ T29] audit: type=1400 audit(1733685988.259:2251): avc: denied { prog_run } for pid=4601 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 52.713161][ T29] audit: type=1400 audit(1733685988.329:2252): avc: denied { create } for pid=4603 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.759453][ T4600] I/O error, dev loop7, sector 8960 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 52.764456][ T29] audit: type=1400 audit(1733685988.379:2253): avc: denied { mounton } for pid=4601 comm="syz.1.384" path="/83/file0" dev="tmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.768936][ T4600] Buffer I/O error on dev loop7, logical block 1120, async page read [ 52.804584][ T4604] Unable to read rock-ridge attributes [ 52.812809][ T4604] Unable to read rock-ridge attributes [ 52.819174][ T4604] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 52.819684][ T29] audit: type=1400 audit(1733685988.429:2254): avc: denied { mount } for pid=4601 comm="syz.1.384" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 52.849174][ T29] audit: type=1400 audit(1733685988.439:2255): avc: denied { create } for pid=4601 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.868770][ T29] audit: type=1400 audit(1733685988.439:2256): avc: denied { connect } for pid=4601 comm="syz.1.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 52.900852][ T4599] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 52.910615][ T4599] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 52.918978][ T4599] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 52.923357][ T4611] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 52.927448][ T4599] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 52.941995][ T4599] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 52.950456][ T4599] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 52.958827][ T4599] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 52.967208][ T4599] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 52.975667][ T4599] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 52.984147][ T4599] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 52.996391][ T4599] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.011093][ T4599] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.025673][ T4599] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.039969][ T4599] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.053923][ T4599] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.068324][ T4599] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 53.103398][ T4622] loop1: detected capacity change from 0 to 164 [ 53.141327][ T4617] loop2: detected capacity change from 0 to 512 [ 53.148240][ T4624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.160592][ T4617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.167356][ T4624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.169735][ T4617] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 53.200560][ T4617] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 53.215693][ T4617] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 53.223934][ T4617] System zones: 0-2, 18-18, 34-34 [ 53.230613][ T4617] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.287554][ T4629] loop4: detected capacity change from 0 to 2048 [ 53.299613][ T4617] EXT4-fs (loop2): 1 truncate cleaned up [ 53.362045][ T4629] loop4: p1 < > p4 [ 53.374524][ T4629] loop4: p4 size 8388608 extends beyond EOD, truncated [ 53.414186][ T4640] xt_hashlimit: max too large, truncated to 1048576 [ 53.430713][ T4640] Cannot find set identified by id 0 to match [ 53.441566][ T4642] xt_TPROXY: Can be used only with -p tcp or -p udp [ 53.476319][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 53.481146][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 53.519434][ T3372] tipc: Node number set to 2886997007 [ 53.537033][ T4647] sg_write: data in/out 525275/547 bytes for SCSI command 0x0-- guessing data in; [ 53.537033][ T4647] program syz.4.399 not setting count and/or reply_len properly [ 53.559999][ T4651] loop0: detected capacity change from 0 to 164 [ 53.569972][ T4651] Unable to read rock-ridge attributes [ 53.583495][ T4651] Unable to read rock-ridge attributes [ 53.587748][ T4647] loop4: detected capacity change from 0 to 512 [ 53.590044][ T4651] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 53.615754][ T4647] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 53.631570][ T4655] FAULT_INJECTION: forcing a failure. [ 53.631570][ T4655] name failslab, interval 1, probability 0, space 0, times 0 [ 53.644316][ T4655] CPU: 0 UID: 0 PID: 4655 Comm: syz.2.403 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 53.655061][ T4655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.665212][ T4655] Call Trace: [ 53.668493][ T4655] [ 53.671431][ T4655] dump_stack_lvl+0xf2/0x150 [ 53.676039][ T4655] dump_stack+0x15/0x1a [ 53.680270][ T4655] should_fail_ex+0x223/0x230 [ 53.685036][ T4655] should_failslab+0x8f/0xb0 [ 53.689679][ T4655] kmem_cache_alloc_noprof+0x52/0x320 [ 53.695064][ T4655] ? vm_area_dup+0x2c/0x130 [ 53.699645][ T4655] ? __vm_enough_memory+0xdf/0x2b0 [ 53.704847][ T4655] vm_area_dup+0x2c/0x130 [ 53.709233][ T4655] copy_mm+0x69f/0x11c0 [ 53.713419][ T4655] copy_process+0xd5b/0x1f90 [ 53.718022][ T4655] kernel_clone+0x167/0x5e0 [ 53.722528][ T4655] ? vfs_write+0x596/0x920 [ 53.727013][ T4655] __x64_sys_clone+0xe8/0x120 [ 53.731819][ T4655] x64_sys_call+0x2d7e/0x2dc0 [ 53.736583][ T4655] do_syscall_64+0xc9/0x1c0 [ 53.741091][ T4655] ? clear_bhb_loop+0x55/0xb0 [ 53.745772][ T4655] ? clear_bhb_loop+0x55/0xb0 [ 53.750489][ T4655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.756422][ T4655] RIP: 0033:0x7f404858fed9 [ 53.760837][ T4655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.780554][ T4655] RSP: 002b:00007f4046c07008 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 53.788970][ T4655] RAX: ffffffffffffffda RBX: 00007f4048755fa0 RCX: 00007f404858fed9 [ 53.796944][ T4655] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000240c7013 [ 53.804965][ T4655] RBP: 00007f4046c070a0 R08: 0000000000000000 R09: 0000000000000000 [ 53.812946][ T4655] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 53.820930][ T4655] R13: 0000000000000000 R14: 00007f4048755fa0 R15: 00007ffedef61878 [ 53.828906][ T4655] [ 53.836552][ T4657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 53.846860][ T4657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.891821][ T4661] loop2: detected capacity change from 0 to 512 [ 53.900685][ T4661] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.913174][ T4657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 53.923481][ T4657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.950753][ T4661] EXT4-fs (loop2): 1 truncate cleaned up [ 53.969124][ T4661] FAULT_INJECTION: forcing a failure. [ 53.969124][ T4661] name failslab, interval 1, probability 0, space 0, times 0 [ 53.981847][ T4661] CPU: 1 UID: 0 PID: 4661 Comm: syz.2.405 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 53.992479][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.002556][ T4661] Call Trace: [ 54.005859][ T4661] [ 54.008817][ T4661] dump_stack_lvl+0xf2/0x150 [ 54.013519][ T4661] dump_stack+0x15/0x1a [ 54.017809][ T4661] should_fail_ex+0x223/0x230 [ 54.022559][ T4661] should_failslab+0x8f/0xb0 [ 54.027283][ T4661] kmem_cache_alloc_noprof+0x52/0x320 [ 54.032725][ T4661] ? ext4_mb_new_blocks+0x7ad/0x2020 [ 54.038053][ T4661] ext4_mb_new_blocks+0x7ad/0x2020 [ 54.043255][ T4661] ext4_ind_map_blocks+0xb3e/0x14a0 [ 54.048540][ T4661] ext4_map_blocks+0x555/0xd20 [ 54.053392][ T4661] ? __pfx_workingset_update_node+0x10/0x10 [ 54.059360][ T4661] _ext4_get_block+0x104/0x370 [ 54.064151][ T4661] ext4_get_block+0x39/0x50 [ 54.068690][ T4661] ext4_block_write_begin+0x34f/0x9c0 [ 54.074110][ T4661] ? __pfx_ext4_get_block+0x10/0x10 [ 54.079417][ T4661] ? folio_mapping+0xb8/0x120 [ 54.084145][ T4661] ext4_write_begin+0x426/0xc30 [ 54.089055][ T4661] generic_perform_write+0x1a8/0x4a0 [ 54.094402][ T4661] ext4_buffered_write_iter+0x1ea/0x370 [ 54.100082][ T4661] ext4_file_write_iter+0x383/0xf20 [ 54.105326][ T4661] ? kstrtouint_from_user+0xb0/0xe0 [ 54.110548][ T4661] ? avc_policy_seqno+0x15/0x20 [ 54.115498][ T4661] ? selinux_file_permission+0x22a/0x360 [ 54.121185][ T4661] vfs_write+0x77f/0x920 [ 54.125467][ T4661] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 54.131224][ T4661] ksys_write+0xe8/0x1b0 [ 54.135502][ T4661] __x64_sys_write+0x42/0x50 [ 54.140123][ T4661] x64_sys_call+0x287e/0x2dc0 [ 54.144872][ T4661] do_syscall_64+0xc9/0x1c0 [ 54.149411][ T4661] ? clear_bhb_loop+0x55/0xb0 [ 54.154119][ T4661] ? clear_bhb_loop+0x55/0xb0 [ 54.158836][ T4661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.164785][ T4661] RIP: 0033:0x7f404858fed9 [ 54.169020][ T4666] loop3: detected capacity change from 0 to 512 [ 54.169213][ T4661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.169258][ T4661] RSP: 002b:00007f4046c07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 54.169279][ T4661] RAX: ffffffffffffffda RBX: 00007f4048755fa0 RCX: 00007f404858fed9 [ 54.211511][ T4661] RDX: 000000000208e24b RSI: 0000000020000040 RDI: 0000000000000009 [ 54.219490][ T4661] RBP: 00007f4046c070a0 R08: 0000000000000000 R09: 0000000000000000 [ 54.227568][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.235563][ T4661] R13: 0000000000000000 R14: 00007f4048755fa0 R15: 00007ffedef61878 [ 54.243607][ T4661] [ 54.249764][ T4666] EXT4-fs: Ignoring removed oldalloc option [ 54.284299][ T4657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 54.294640][ T4657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.308593][ T4666] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.406: corrupted in-inode xattr: overlapping e_value [ 54.364141][ T4666] EXT4-fs (loop3): Remounting filesystem read-only [ 54.385589][ T4657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 54.396069][ T4657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.414137][ T4670] loop0: detected capacity change from 0 to 2048 [ 54.435199][ T4666] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 54.519824][ T4666] loop3: detected capacity change from 0 to 512 [ 54.535446][ T4666] ext4: Unknown parameter 'dont_measure' [ 54.547803][ T4657] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 54.550435][ T4670] Alternate GPT is invalid, using primary GPT. [ 54.556078][ T4657] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.562402][ T4670] loop0: p2 p3 p7 [ 54.598287][ T4657] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 54.606614][ T4657] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.668528][ T4657] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 54.676719][ T4657] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.703248][ T4286] udevd[4286]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 54.703271][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 54.725193][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 54.740755][ T4657] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 54.748925][ T4657] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.215185][ T4739] loop2: detected capacity change from 0 to 164 [ 55.259835][ T4739] Unable to read rock-ridge attributes [ 55.269909][ T4739] Unable to read rock-ridge attributes [ 55.279873][ T4739] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 55.340753][ T4761] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 55.368080][ T4761] loop4: detected capacity change from 0 to 128 [ 55.379776][ T4761] vfat: Unknown parameter '0x0000000000000000' [ 55.451727][ T4777] loop1: detected capacity change from 0 to 512 [ 55.478895][ T4777] EXT4-fs: Ignoring removed i_version option [ 55.485076][ T4777] EXT4-fs: Ignoring removed nobh option [ 55.523372][ T4777] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.568296][ T4795] loop2: detected capacity change from 0 to 512 [ 55.577073][ T4795] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 55.591483][ T4777] EXT4-fs (loop1): 1 truncate cleaned up [ 55.608483][ T4795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 55.616540][ T4795] System zones: 1-12 [ 55.620632][ T4795] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.427: corrupted in-inode xattr: e_value size too large [ 55.638187][ T4795] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.427: couldn't read orphan inode 15 (err -117) [ 55.804132][ T4806] syz.1.429[4806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.804273][ T4806] syz.1.429[4806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.819381][ T4806] syz.1.429[4806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.855990][ T4806] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 56.571634][ T4831] loop4: detected capacity change from 0 to 164 [ 56.583174][ T4833] bond0: entered promiscuous mode [ 56.588310][ T4833] @ÿ: entered promiscuous mode [ 56.593422][ T4833] bond_slave_1: entered promiscuous mode [ 56.605452][ T4831] Unable to read rock-ridge attributes [ 56.614163][ T4831] Unable to read rock-ridge attributes [ 56.622810][ T4833] netlink: 10 bytes leftover after parsing attributes in process `syz.3.438'. [ 56.636710][ T4831] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 56.678918][ T4833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.438'. [ 56.701375][ T4833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.708867][ T4833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.739354][ T4833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.746852][ T4833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.792667][ T4838] loop1: detected capacity change from 0 to 512 [ 56.800159][ T4838] EXT4-fs: Ignoring removed i_version option [ 56.806211][ T4838] EXT4-fs: Ignoring removed nobh option [ 56.821440][ T4838] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.832897][ T4838] EXT4-fs (loop1): 1 truncate cleaned up [ 56.841818][ T4841] tipc: Can't bind to reserved service type 0 [ 56.910907][ T4846] xt_hashlimit: max too large, truncated to 1048576 [ 56.922972][ T4848] netlink: 'syz.4.443': attribute type 13 has an invalid length. [ 56.937783][ T4850] loop3: detected capacity change from 0 to 512 [ 56.945723][ T4848] gretap0: refused to change device tx_queue_len [ 56.963714][ T4848] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.045471][ T4850] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.444: bg 0: block 393: padding at end of block bitmap is not set [ 57.073686][ T4850] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 57.101622][ T4850] EXT4-fs (loop3): 2 truncates cleaned up [ 57.117185][ T4863] loop4: detected capacity change from 0 to 512 [ 57.125615][ T4867] netlink: 'syz.0.449': attribute type 21 has an invalid length. [ 57.130716][ T4863] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.133584][ T4867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.449'. [ 57.154312][ T4863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 57.160609][ T4867] netlink: 64 bytes leftover after parsing attributes in process `syz.0.449'. [ 57.163068][ T4863] System zones: 1-12 [ 57.175447][ T4863] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.450: corrupted in-inode xattr: e_value size too large [ 57.189697][ T4863] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.450: couldn't read orphan inode 15 (err -117) [ 57.551313][ T4882] loop4: detected capacity change from 0 to 512 [ 57.557992][ T4882] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 57.604476][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 57.604492][ T29] audit: type=1326 audit(1733685993.219:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.649149][ T29] audit: type=1326 audit(1733685993.249:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.672698][ T29] audit: type=1326 audit(1733685993.249:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.696138][ T29] audit: type=1326 audit(1733685993.249:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.719586][ T29] audit: type=1326 audit(1733685993.249:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.743013][ T29] audit: type=1326 audit(1733685993.259:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.766461][ T29] audit: type=1326 audit(1733685993.259:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.789800][ T29] audit: type=1326 audit(1733685993.259:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.813158][ T29] audit: type=1326 audit(1733685993.259:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.836583][ T29] audit: type=1326 audit(1733685993.259:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4883 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd63f8efed9 code=0x7ffc0000 [ 57.978974][ T4896] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=47 sclass=netlink_xfrm_socket pid=4896 comm=syz.0.462 [ 58.011984][ T4900] loop1: detected capacity change from 0 to 512 [ 58.028727][ T4900] EXT4-fs: Ignoring removed i_version option [ 58.029391][ T4899] Process accounting resumed [ 58.034903][ T4900] EXT4-fs: Ignoring removed nobh option [ 58.058915][ T4904] FAULT_INJECTION: forcing a failure. [ 58.058915][ T4904] name failslab, interval 1, probability 0, space 0, times 0 [ 58.065448][ T4900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.071620][ T4904] CPU: 1 UID: 0 PID: 4904 Comm: syz.3.465 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 58.071656][ T4904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.102196][ T4904] Call Trace: [ 58.105502][ T4904] [ 58.108443][ T4904] dump_stack_lvl+0xf2/0x150 [ 58.113076][ T4904] dump_stack+0x15/0x1a [ 58.117261][ T4904] should_fail_ex+0x223/0x230 [ 58.121956][ T4904] should_failslab+0x8f/0xb0 [ 58.126602][ T4904] kmem_cache_alloc_node_noprof+0x59/0x320 [ 58.132550][ T4904] ? __alloc_skb+0x10b/0x310 [ 58.137200][ T4904] __alloc_skb+0x10b/0x310 [ 58.141721][ T4904] netlink_alloc_large_skb+0xad/0xe0 [ 58.147035][ T4904] netlink_sendmsg+0x3b4/0x6e0 [ 58.151879][ T4904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.157254][ T4904] __sock_sendmsg+0x140/0x180 [ 58.161975][ T4904] ____sys_sendmsg+0x312/0x410 [ 58.166788][ T4904] __sys_sendmsg+0x19d/0x230 [ 58.171452][ T4904] __x64_sys_sendmsg+0x46/0x50 [ 58.176376][ T4904] x64_sys_call+0x2734/0x2dc0 [ 58.181117][ T4904] do_syscall_64+0xc9/0x1c0 [ 58.185664][ T4904] ? clear_bhb_loop+0x55/0xb0 [ 58.190496][ T4904] ? clear_bhb_loop+0x55/0xb0 [ 58.195198][ T4904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.201188][ T4904] RIP: 0033:0x7f990acefed9 [ 58.205637][ T4904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.225461][ T4904] RSP: 002b:00007f9909367058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.233912][ T4904] RAX: ffffffffffffffda RBX: 00007f990aeb5fa0 RCX: 00007f990acefed9 [ 58.241904][ T4904] RDX: 0000000000000800 RSI: 0000000020000380 RDI: 0000000000000003 [ 58.249896][ T4904] RBP: 00007f99093670a0 R08: 0000000000000000 R09: 0000000000000000 [ 58.257891][ T4904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.265876][ T4904] R13: 0000000000000000 R14: 00007f990aeb5fa0 R15: 00007ffd879a5238 [ 58.273882][ T4904] [ 58.296486][ T4900] EXT4-fs (loop1): 1 truncate cleaned up [ 58.321421][ T4899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4899 comm=+}[@ [ 58.376058][ T4914] loop4: detected capacity change from 0 to 256 [ 58.431489][ T4899] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198) [ 58.435449][ T4915] loop3: detected capacity change from 0 to 512 [ 58.439732][ T4899] FAT-fs (loop4): Filesystem has been set read-only [ 58.467844][ T4899] serio: Serial port ptm0 [ 58.473073][ T4915] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 58.528793][ T4924] loop3: detected capacity change from 0 to 128 [ 58.538581][ T4921] FAULT_INJECTION: forcing a failure. [ 58.538581][ T4921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.552248][ T4921] CPU: 1 UID: 0 PID: 4921 Comm: syz.0.470 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 58.562890][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.573062][ T4921] Call Trace: [ 58.576435][ T4921] [ 58.578894][ T4924] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.579370][ T4921] dump_stack_lvl+0xf2/0x150 [ 58.579418][ T4921] dump_stack+0x15/0x1a [ 58.598432][ T4921] should_fail_ex+0x223/0x230 [ 58.603164][ T4921] should_fail+0xb/0x10 [ 58.607438][ T4921] should_fail_usercopy+0x1a/0x20 [ 58.612497][ T4921] copy_page_from_iter_atomic+0x228/0xf80 [ 58.618255][ T4921] ? shmem_write_begin+0xa2/0x180 [ 58.623362][ T4921] ? shmem_write_begin+0xda/0x180 [ 58.628449][ T4921] generic_perform_write+0x2f1/0x4a0 [ 58.633779][ T4921] shmem_file_write_iter+0xc2/0xe0 [ 58.638911][ T4921] vfs_write+0x77f/0x920 [ 58.643231][ T4921] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 58.649129][ T4921] ksys_write+0xe8/0x1b0 [ 58.653394][ T4921] __x64_sys_write+0x42/0x50 [ 58.657993][ T4921] x64_sys_call+0x287e/0x2dc0 [ 58.662853][ T4921] do_syscall_64+0xc9/0x1c0 [ 58.667370][ T4921] ? clear_bhb_loop+0x55/0xb0 [ 58.672131][ T4921] ? clear_bhb_loop+0x55/0xb0 [ 58.676838][ T4921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.682769][ T4921] RIP: 0033:0x7fd63f8ee98f [ 58.687213][ T4921] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 58.706849][ T4921] RSP: 002b:00007fd63df66e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 58.715351][ T4921] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fd63f8ee98f [ 58.723321][ T4921] RDX: 0000000000040000 RSI: 00007fd635b47000 RDI: 0000000000000005 [ 58.731294][ T4921] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000053a [ 58.739272][ T4921] R10: 00000000000007c2 R11: 0000000000000293 R12: 0000000000000005 [ 58.747251][ T4921] R13: 00007fd63df66f10 R14: 00007fd63df66ed0 R15: 00007fd635b47000 [ 58.755321][ T4921] [ 58.771807][ T4927] : renamed from bond0 (while UP) [ 58.814625][ T4939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.853191][ T4939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.903721][ T4939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.923345][ T4949] loop1: detected capacity change from 0 to 512 [ 58.931543][ T4949] EXT4-fs: Ignoring removed i_version option [ 58.937609][ T4949] EXT4-fs: Ignoring removed nobh option [ 58.944091][ T4949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.955802][ T4949] EXT4-fs (loop1): 1 truncate cleaned up [ 58.964000][ T4939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.014878][ T4954] loop1: detected capacity change from 0 to 512 [ 59.021647][ T4939] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.033763][ T4939] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.045457][ T4939] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.051870][ T4954] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.057238][ T4939] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.077580][ T4954] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.480: Failed to acquire dquot type 0 [ 59.119059][ T4958] loop1: detected capacity change from 0 to 512 [ 59.125708][ T4958] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 59.198593][ T4964] xt_policy: neither incoming nor outgoing policy selected [ 59.410740][ T4974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.487'. [ 59.485422][ T4978] loop3: detected capacity change from 0 to 512 [ 59.517207][ T4980] loop4: detected capacity change from 0 to 512 [ 59.531835][ T4980] EXT4-fs: Ignoring removed i_version option [ 59.537904][ T4980] EXT4-fs: Ignoring removed nobh option [ 59.551794][ T4980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.571229][ T4978] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.489: bg 0: block 393: padding at end of block bitmap is not set [ 59.610345][ T4980] EXT4-fs (loop4): 1 truncate cleaned up [ 59.617796][ T4978] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 59.629009][ T4978] EXT4-fs (loop3): 2 truncates cleaned up [ 59.682404][ T4988] loop2: detected capacity change from 0 to 512 [ 59.689025][ T4988] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 59.728170][ T4978] loop3: detected capacity change from 512 to 0 [ 59.735353][ T4990] FAULT_INJECTION: forcing a failure. [ 59.735353][ T4990] name failslab, interval 1, probability 0, space 0, times 0 [ 59.748064][ T4990] CPU: 0 UID: 0 PID: 4990 Comm: syz.0.492 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 59.758738][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.768831][ T4990] Call Trace: [ 59.772126][ T4990] [ 59.775068][ T4990] dump_stack_lvl+0xf2/0x150 [ 59.779739][ T4990] dump_stack+0x15/0x1a [ 59.784052][ T4990] should_fail_ex+0x223/0x230 [ 59.788768][ T4990] should_failslab+0x8f/0xb0 [ 59.793398][ T4990] kmem_cache_alloc_node_noprof+0x59/0x320 [ 59.799276][ T4990] ? __alloc_skb+0x10b/0x310 [ 59.803924][ T4990] __alloc_skb+0x10b/0x310 [ 59.808378][ T4990] netlink_alloc_large_skb+0xad/0xe0 [ 59.813764][ T4990] netlink_sendmsg+0x3b4/0x6e0 [ 59.818560][ T4990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.823925][ T4990] __sock_sendmsg+0x140/0x180 [ 59.828713][ T4990] ____sys_sendmsg+0x312/0x410 [ 59.833512][ T4990] __sys_sendmmsg+0x227/0x4b0 [ 59.838260][ T4990] __x64_sys_sendmmsg+0x57/0x70 [ 59.843210][ T4990] x64_sys_call+0x29aa/0x2dc0 [ 59.847927][ T4990] do_syscall_64+0xc9/0x1c0 [ 59.852456][ T4990] ? clear_bhb_loop+0x55/0xb0 [ 59.857148][ T4990] ? clear_bhb_loop+0x55/0xb0 [ 59.861972][ T4990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.868015][ T4990] RIP: 0033:0x7fd63f8efed9 [ 59.872441][ T4990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.892060][ T4990] RSP: 002b:00007fd63df67058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.900583][ T4990] RAX: ffffffffffffffda RBX: 00007fd63fab5fa0 RCX: 00007fd63f8efed9 [ 59.908596][ T4990] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000009 [ 59.916575][ T4990] RBP: 00007fd63df670a0 R08: 0000000000000000 R09: 0000000000000000 [ 59.924552][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.932667][ T4990] R13: 0000000000000000 R14: 00007fd63fab5fa0 R15: 00007ffefe8b6028 [ 59.940727][ T4990] [ 59.948048][ T4978] bio_check_eod: 11377 callbacks suppressed [ 59.948064][ T4978] syz.3.489: attempt to access beyond end of device [ 59.948064][ T4978] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 59.967318][ T4978] buffer_io_error: 1111 callbacks suppressed [ 59.967331][ T4978] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 59.974837][ T4994] FAULT_INJECTION: forcing a failure. [ 59.974837][ T4994] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.983206][ T4978] EXT4-fs (loop3): I/O error while writing superblock [ 59.994922][ T4994] CPU: 1 UID: 0 PID: 4994 Comm: syz.4.495 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 60.012267][ T4994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.022402][ T4994] Call Trace: [ 60.025683][ T4994] [ 60.028622][ T4994] dump_stack_lvl+0xf2/0x150 [ 60.033268][ T4994] dump_stack+0x15/0x1a [ 60.037445][ T4994] should_fail_ex+0x223/0x230 [ 60.042136][ T4994] should_fail_alloc_page+0xfd/0x110 [ 60.047443][ T4994] __alloc_pages_noprof+0x109/0x340 [ 60.052665][ T4994] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 60.058138][ T4994] folio_alloc_mpol_noprof+0x36/0x70 [ 60.063438][ T4994] shmem_get_folio_gfp+0x3d1/0xd90 [ 60.068673][ T4994] shmem_write_begin+0xa2/0x180 [ 60.073621][ T4994] generic_perform_write+0x1a8/0x4a0 [ 60.078932][ T4994] shmem_file_write_iter+0xc2/0xe0 [ 60.084125][ T4994] vfs_write+0x77f/0x920 [ 60.088385][ T4994] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.094274][ T4994] ksys_write+0xe8/0x1b0 [ 60.098549][ T4994] __x64_sys_write+0x42/0x50 [ 60.103183][ T4994] x64_sys_call+0x287e/0x2dc0 [ 60.107900][ T4994] do_syscall_64+0xc9/0x1c0 [ 60.112494][ T4994] ? clear_bhb_loop+0x55/0xb0 [ 60.117181][ T4994] ? clear_bhb_loop+0x55/0xb0 [ 60.121933][ T4994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.127849][ T4994] RIP: 0033:0x7f707ea0e98f [ 60.132340][ T4994] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 60.151977][ T4994] RSP: 002b:00007f707d086e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.160471][ T4994] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007f707ea0e98f [ 60.168462][ T4994] RDX: 0000000000020000 RSI: 00007f7074c67000 RDI: 0000000000000007 [ 60.176441][ T4994] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000001b9 [ 60.184421][ T4994] R10: 0000000020002b82 R11: 0000000000000293 R12: 0000000000000007 [ 60.192426][ T4994] R13: 00007f707d086f10 R14: 00007f707d086ed0 R15: 00007f7074c67000 [ 60.200424][ T4994] [ 60.228100][ T5001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 60.327121][ T5012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.498'. [ 60.377218][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.503'. [ 60.396765][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.404398][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.433741][ T5014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.441377][ T5014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.456982][ T5014] batman_adv: batadv0: Removing interface: macvlan0 [ 60.478468][ T5022] FAULT_INJECTION: forcing a failure. [ 60.478468][ T5022] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.491847][ T5022] CPU: 1 UID: 0 PID: 5022 Comm: syz.1.507 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 60.502467][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 60.512548][ T5022] Call Trace: [ 60.515875][ T5022] [ 60.518812][ T5022] dump_stack_lvl+0xf2/0x150 [ 60.523491][ T5022] dump_stack+0x15/0x1a [ 60.527675][ T5022] should_fail_ex+0x223/0x230 [ 60.532398][ T5022] should_fail_alloc_page+0xfd/0x110 [ 60.537775][ T5022] __alloc_pages_noprof+0x109/0x340 [ 60.543001][ T5022] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 60.548421][ T5022] folio_alloc_mpol_noprof+0x36/0x70 [ 60.553739][ T5022] shmem_get_folio_gfp+0x3d1/0xd90 [ 60.558949][ T5022] shmem_write_begin+0xa2/0x180 [ 60.563816][ T5022] generic_perform_write+0x1a8/0x4a0 [ 60.569177][ T5022] shmem_file_write_iter+0xc2/0xe0 [ 60.574313][ T5022] vfs_write+0x77f/0x920 [ 60.578671][ T5022] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 60.584575][ T5022] ksys_write+0xe8/0x1b0 [ 60.588839][ T5022] __x64_sys_write+0x42/0x50 [ 60.593445][ T5022] x64_sys_call+0x287e/0x2dc0 [ 60.598131][ T5022] do_syscall_64+0xc9/0x1c0 [ 60.602678][ T5022] ? clear_bhb_loop+0x55/0xb0 [ 60.607368][ T5022] ? clear_bhb_loop+0x55/0xb0 [ 60.612051][ T5022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.618019][ T5022] RIP: 0033:0x7fdead8fe98f [ 60.622506][ T5022] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 60.642189][ T5022] RSP: 002b:00007fdeabf76e10 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 60.650646][ T5022] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007fdead8fe98f [ 60.658623][ T5022] RDX: 0000000000040000 RSI: 00007fdea3b57000 RDI: 0000000000000008 [ 60.666605][ T5022] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000044b [ 60.674587][ T5022] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000008 [ 60.682565][ T5022] R13: 00007fdeabf76f10 R14: 00007fdeabf76ed0 R15: 00007fdea3b57000 [ 60.690602][ T5022] [ 60.700542][ T5026] netlink: 256 bytes leftover after parsing attributes in process `syz.2.506'. [ 60.776168][ T5033] netlink: 'syz.1.510': attribute type 4 has an invalid length. [ 60.826903][ T5036] loop4: detected capacity change from 0 to 512 [ 60.835644][ T5036] EXT4-fs: Ignoring removed orlov option [ 60.852517][ T5036] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 60.860989][ T5036] System zones: 0-2, 18-18, 34-34 [ 60.867050][ T5036] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.511: bg 0: block 248: padding at end of block bitmap is not set [ 60.881712][ T5036] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.511: Failed to acquire dquot type 1 [ 60.894106][ T5036] EXT4-fs (loop4): 1 truncate cleaned up [ 60.911522][ T5036] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.086015][ T5061] loop1: detected capacity change from 0 to 128 [ 61.127336][ T5061] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.172536][ T5066] loop3: detected capacity change from 0 to 1024 [ 61.238954][ T5066] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 61.255597][ T5066] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 61.267941][ T5066] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.267941][ T5066] [ 61.277820][ T5066] EXT4-fs (loop3): Total free blocks count 0 [ 61.283932][ T5066] EXT4-fs (loop3): Free/Dirty block details [ 61.289971][ T5066] EXT4-fs (loop3): free_blocks=68451041280 [ 61.295879][ T5066] EXT4-fs (loop3): dirty_blocks=48 [ 61.301196][ T5066] EXT4-fs (loop3): Block reservation details [ 61.307192][ T5066] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 61.315088][ T5069] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 61.327492][ T5069] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.327492][ T5069] [ 61.759233][ T5100] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5100 comm=syz.1.529 [ 61.811635][ T5095] block device autoloading is deprecated and will be removed. [ 61.829711][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.527'. [ 61.838796][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.527'. [ 61.977343][ T5095] syz.4.528: attempt to access beyond end of device [ 61.977343][ T5095] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.245167][ T5105] loop4: detected capacity change from 0 to 512 [ 62.258395][ T5105] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 62.282416][ T5105] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 62.290724][ T5105] System zones: 1-12 [ 62.294835][ T5105] EXT4-fs (loop4): orphan cleanup on readonly fs [ 62.301442][ T5105] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.528: bg 0: block 361: padding at end of block bitmap is not set [ 62.319525][ T5105] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 62.328653][ T5105] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.528: attempt to clear invalid blocks 33619980 len 1 [ 62.344516][ T5105] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.528: invalid indirect mapped block 1811939328 (level 0) [ 62.380377][ T5105] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.528: invalid indirect mapped block 2 (level 2) [ 62.429806][ T5105] EXT4-fs (loop4): 1 truncate cleaned up [ 62.453871][ T5105] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 62.519755][ T5121] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 62.614952][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 62.614967][ T29] audit: type=1400 audit(1733685998.229:3119): avc: denied { create } for pid=5128 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 62.648003][ T5131] block device autoloading is deprecated and will be removed. [ 62.657405][ T29] audit: type=1400 audit(1733685998.269:3120): avc: denied { bind } for pid=5128 comm="syz.3.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 62.678077][ T5131] +}[@: attempt to access beyond end of device [ 62.678077][ T5131] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 62.707221][ T29] audit: type=1400 audit(1733685998.319:3121): avc: denied { sqpoll } for pid=5132 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.741651][ T5136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5136 comm=syz.2.541 [ 62.759730][ T29] audit: type=1400 audit(1733685998.319:3122): avc: denied { create } for pid=5132 comm="syz.0.540" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.825065][ T29] audit: type=1400 audit(1733685998.439:3123): avc: denied { write } for pid=5143 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.825078][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'. [ 62.875167][ T29] audit: type=1400 audit(1733685998.439:3124): avc: denied { write } for pid=5143 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 62.894206][ T29] audit: type=1400 audit(1733685998.469:3125): avc: denied { create } for pid=5146 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.913755][ T29] audit: type=1400 audit(1733685998.469:3126): avc: denied { bind } for pid=5146 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.933122][ T29] audit: type=1400 audit(1733685998.469:3127): avc: denied { listen } for pid=5146 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.952691][ T29] audit: type=1400 audit(1733685998.469:3128): avc: denied { accept } for pid=5146 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.998613][ T5157] loop4: detected capacity change from 0 to 512 [ 63.014526][ T5159] FAULT_INJECTION: forcing a failure. [ 63.014526][ T5159] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.024581][ T5160] loop2: detected capacity change from 0 to 512 [ 63.027991][ T5159] CPU: 1 UID: 0 PID: 5159 Comm: syz.3.550 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 63.044844][ T5159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.054922][ T5159] Call Trace: [ 63.058208][ T5159] [ 63.061143][ T5159] dump_stack_lvl+0xf2/0x150 [ 63.065806][ T5159] dump_stack+0x15/0x1a [ 63.070081][ T5159] should_fail_ex+0x223/0x230 [ 63.074810][ T5159] should_fail_alloc_page+0xfd/0x110 [ 63.080184][ T5159] __alloc_pages_noprof+0x109/0x340 [ 63.085450][ T5159] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 63.090919][ T5159] alloc_pages_noprof+0xe1/0x100 [ 63.095926][ T5159] kimage_alloc_page+0x136/0x590 [ 63.100884][ T5159] kimage_load_segment+0x4a9/0x790 [ 63.106029][ T5159] do_kexec_load+0x3cf/0x490 [ 63.110682][ T5159] __se_sys_kexec_load+0x12b/0x160 [ 63.115814][ T5159] __x64_sys_kexec_load+0x55/0x70 [ 63.120908][ T5159] x64_sys_call+0x2cac/0x2dc0 [ 63.125631][ T5159] do_syscall_64+0xc9/0x1c0 [ 63.130160][ T5159] ? clear_bhb_loop+0x55/0xb0 [ 63.134922][ T5159] ? clear_bhb_loop+0x55/0xb0 [ 63.139614][ T5159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.145595][ T5159] RIP: 0033:0x7f990acefed9 [ 63.150079][ T5159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.169793][ T5159] RSP: 002b:00007f9909367058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 63.178217][ T5159] RAX: ffffffffffffffda RBX: 00007f990aeb5fa0 RCX: 00007f990acefed9 [ 63.186387][ T5159] RDX: 00000000200002c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 63.194447][ T5159] RBP: 00007f99093670a0 R08: 0000000000000000 R09: 0000000000000000 [ 63.202498][ T5159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.210479][ T5159] R13: 0000000000000000 R14: 00007f990aeb5fa0 R15: 00007ffd879a5238 [ 63.218469][ T5159] [ 63.229533][ T5160] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 63.248440][ T5160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 63.248850][ T5157] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.549: bg 0: block 393: padding at end of block bitmap is not set [ 63.256650][ T5160] System zones: 1-12 [ 63.285462][ T5160] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.299681][ T5160] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 63.350366][ T5157] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.363154][ T5157] EXT4-fs (loop4): 2 truncates cleaned up [ 63.376825][ T5160] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.386564][ T5160] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm +}[@: attempt to clear invalid blocks 33619980 len 1 [ 63.401769][ T5160] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 1811939328 (level 0) [ 63.416620][ T5160] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 2 (level 2) [ 63.448023][ T5160] EXT4-fs (loop2): 1 truncate cleaned up [ 63.479713][ T5157] loop4: detected capacity change from 512 to 0 [ 63.526324][ T5157] syz.4.549: attempt to access beyond end of device [ 63.526324][ T5157] loop4: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 63.539569][ T5157] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 63.555424][ T5177] raw_sendmsg: syz.0.556 forgot to set AF_INET. Fix it! [ 63.561567][ T5157] EXT4-fs (loop4): I/O error while writing superblock [ 63.781052][ T5194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.563'. [ 63.797537][ T5194] FAULT_INJECTION: forcing a failure. [ 63.797537][ T5194] name failslab, interval 1, probability 0, space 0, times 0 [ 63.810514][ T5194] CPU: 0 UID: 0 PID: 5194 Comm: syz.2.563 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 63.821160][ T5194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.831259][ T5194] Call Trace: [ 63.834562][ T5194] [ 63.837510][ T5194] dump_stack_lvl+0xf2/0x150 [ 63.842172][ T5194] dump_stack+0x15/0x1a [ 63.846466][ T5194] should_fail_ex+0x223/0x230 [ 63.851245][ T5194] should_failslab+0x8f/0xb0 [ 63.855868][ T5194] kmem_cache_alloc_noprof+0x52/0x320 [ 63.861350][ T5194] ? vm_area_dup+0x2c/0x130 [ 63.865903][ T5194] vm_area_dup+0x2c/0x130 [ 63.870284][ T5194] copy_mm+0x69f/0x11c0 [ 63.874462][ T5194] copy_process+0xd5b/0x1f90 [ 63.879110][ T5194] kernel_clone+0x167/0x5e0 [ 63.883678][ T5194] __se_sys_clone3+0x1ba/0x200 [ 63.888486][ T5194] __x64_sys_clone3+0x31/0x40 [ 63.893265][ T5194] x64_sys_call+0x2d56/0x2dc0 [ 63.897967][ T5194] do_syscall_64+0xc9/0x1c0 [ 63.902578][ T5194] ? clear_bhb_loop+0x55/0xb0 [ 63.907304][ T5194] ? clear_bhb_loop+0x55/0xb0 [ 63.912081][ T5194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.918097][ T5194] RIP: 0033:0x7f404858fed9 [ 63.922536][ T5194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.942247][ T5194] RSP: 002b:00007f4046c06f28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 63.950701][ T5194] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f404858fed9 [ 63.958726][ T5194] RDX: 00007f4046c06f40 RSI: 0000000000000058 RDI: 00007f4046c06f40 [ 63.966797][ T5194] RBP: 00007f4046c070a0 R08: 0000000000000000 R09: 0000000000000058 [ 63.974836][ T5194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.982829][ T5194] R13: 0000000000000000 R14: 00007f4048755fa0 R15: 00007ffedef61878 [ 63.990890][ T5194] [ 64.049090][ T5202] loop7: detected capacity change from 0 to 16384 [ 64.108888][ T5202] blk_print_req_error: 2 callbacks suppressed [ 64.108910][ T5202] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 64.127301][ T5202] I/O error, dev loop7, sector 9472 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 64.137339][ T5202] I/O error, dev loop7, sector 9216 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 64.146838][ T5202] Buffer I/O error on dev loop7, logical block 1152, async page read [ 64.228750][ T5208] loop4: detected capacity change from 0 to 128 [ 64.237959][ T5208] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.271948][ T5208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.566: bg 0: bad block bitmap checksum [ 64.355967][ T5211] loop4: detected capacity change from 0 to 512 [ 64.365106][ T5211] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 64.437139][ T5215] FAULT_INJECTION: forcing a failure. [ 64.437139][ T5215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 64.450504][ T5215] CPU: 0 UID: 0 PID: 5215 Comm: syz.4.569 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 64.461229][ T5215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.471321][ T5215] Call Trace: [ 64.474631][ T5215] [ 64.477620][ T5215] dump_stack_lvl+0xf2/0x150 [ 64.482248][ T5215] dump_stack+0x15/0x1a [ 64.486461][ T5215] should_fail_ex+0x223/0x230 [ 64.491250][ T5215] should_fail_alloc_page+0xfd/0x110 [ 64.496651][ T5215] __alloc_pages_noprof+0x109/0x340 [ 64.501914][ T5215] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 64.507342][ T5215] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 64.512752][ T5215] handle_mm_fault+0xdd7/0x2ac0 [ 64.517630][ T5215] ? __rcu_read_lock+0x36/0x50 [ 64.522564][ T5215] __get_user_pages+0xf2c/0x2670 [ 64.527545][ T5215] __gup_longterm_locked+0x932/0xf90 [ 64.532890][ T5215] ? down_read_killable+0x172/0x6b0 [ 64.538133][ T5215] ? should_fail_ex+0xd7/0x230 [ 64.542924][ T5215] ? down_read+0x171/0x4b0 [ 64.547404][ T5215] pin_user_pages_remote+0x7f/0xb0 [ 64.552566][ T5215] process_vm_rw+0x4bc/0x890 [ 64.557209][ T5215] ? ksys_write+0x176/0x1b0 [ 64.561744][ T5215] __x64_sys_process_vm_writev+0x7a/0x90 [ 64.567505][ T5215] x64_sys_call+0x2c48/0x2dc0 [ 64.572214][ T5215] do_syscall_64+0xc9/0x1c0 [ 64.576744][ T5215] ? clear_bhb_loop+0x55/0xb0 [ 64.577138][ T5217] loop2: detected capacity change from 0 to 1024 [ 64.581422][ T5215] ? clear_bhb_loop+0x55/0xb0 [ 64.581455][ T5215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.598365][ T5215] RIP: 0033:0x7f707ea0fed9 [ 64.602800][ T5215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.622458][ T5215] RSP: 002b:00007f707d087058 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 64.630893][ T5215] RAX: ffffffffffffffda RBX: 00007f707ebd5fa0 RCX: 00007f707ea0fed9 [ 64.638897][ T5215] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 000000000000011c [ 64.646882][ T5215] RBP: 00007f707d0870a0 R08: 000000000000023a R09: 0000000000000000 [ 64.654867][ T5215] R10: 0000000020121000 R11: 0000000000000246 R12: 0000000000000002 [ 64.662905][ T5215] R13: 0000000000000000 R14: 00007f707ebd5fa0 R15: 00007ffc8cc85728 [ 64.670894][ T5215] [ 64.682350][ T5200] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.692169][ T5200] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 64.700621][ T5200] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 64.708990][ T5200] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 64.717414][ T5200] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 64.720947][ T5217] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.725804][ T5200] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 64.736119][ T5217] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 64.740579][ T5200] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 64.758653][ T5200] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 64.777143][ T5217] loop2: detected capacity change from 0 to 2048 [ 64.789107][ T5220] FAULT_INJECTION: forcing a failure. [ 64.789107][ T5220] name failslab, interval 1, probability 0, space 0, times 0 [ 64.801811][ T5220] CPU: 0 UID: 0 PID: 5220 Comm: syz.1.571 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 64.811514][ T5200] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.812430][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 64.832545][ T5220] Call Trace: [ 64.835853][ T5220] [ 64.838803][ T5220] dump_stack_lvl+0xf2/0x150 [ 64.843445][ T5220] dump_stack+0x15/0x1a [ 64.847625][ T5220] should_fail_ex+0x223/0x230 [ 64.851756][ T5200] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.852317][ T5220] ? bpf_prog_alloc_no_stats+0xc3/0x380 [ 64.867763][ T5220] should_failslab+0x8f/0xb0 [ 64.872464][ T5220] __kmalloc_cache_noprof+0x4e/0x320 [ 64.877797][ T5220] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 64.881799][ T5200] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 64.883346][ T5220] bpf_prog_alloc_no_stats+0xc3/0x380 [ 64.898706][ T5220] bpf_prog_alloc+0x3a/0x150 [ 64.903398][ T5220] bpf_prog_load+0x4d1/0x1070 [ 64.908192][ T5220] ? __rcu_read_unlock+0x4e/0x70 [ 64.913240][ T5220] __sys_bpf+0x463/0x7a0 [ 64.917557][ T5220] __x64_sys_bpf+0x43/0x50 [ 64.922078][ T5220] x64_sys_call+0x2914/0x2dc0 [ 64.926847][ T5220] do_syscall_64+0xc9/0x1c0 [ 64.931364][ T5220] ? clear_bhb_loop+0x55/0xb0 [ 64.936099][ T5220] ? clear_bhb_loop+0x55/0xb0 [ 64.940785][ T5220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.946752][ T5220] RIP: 0033:0x7fdead8ffed9 [ 64.951178][ T5220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.970798][ T5220] RSP: 002b:00007fdeabf77058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.979224][ T5220] RAX: ffffffffffffffda RBX: 00007fdeadac5fa0 RCX: 00007fdead8ffed9 [ 64.987221][ T5220] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005 [ 64.995241][ T5220] RBP: 00007fdeabf770a0 R08: 0000000000000000 R09: 0000000000000000 [ 65.003257][ T5220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.011322][ T5220] R13: 0000000000000000 R14: 00007fdeadac5fa0 R15: 00007fff99b2a428 [ 65.019371][ T5220] [ 65.034469][ T5200] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 65.044546][ T5200] buffer_io_error: 505 callbacks suppressed [ 65.044559][ T5200] Buffer I/O error on dev loop7, logical block 512, lost async page write [ 65.059202][ T5200] Buffer I/O error on dev loop7, logical block 513, lost async page write [ 65.066708][ T5217] vhci_hcd: default hub control req: 2313 v0018 i0001 l0 [ 65.067785][ T5200] Buffer I/O error on dev loop7, logical block 514, lost async page write [ 65.076347][ T5216] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 65.083381][ T5200] Buffer I/O error on dev loop7, logical block 515, lost async page write [ 65.083410][ T5200] Buffer I/O error on dev loop7, logical block 516, lost async page write [ 65.091673][ T5216] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.100210][ T5200] Buffer I/O error on dev loop7, logical block 517, lost async page write [ 65.108830][ T5216] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 65.117504][ T5200] Buffer I/O error on dev loop7, logical block 518, lost async page write [ 65.126076][ T5216] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.126076][ T5216] [ 65.138362][ T5200] Buffer I/O error on dev loop7, logical block 519, lost async page write [ 65.146890][ T5216] EXT4-fs (loop2): Total free blocks count 0 [ 65.156543][ T5200] Buffer I/O error on dev loop7, logical block 520, lost async page write [ 65.165008][ T5216] EXT4-fs (loop2): Free/Dirty block details [ 65.170998][ T5200] Buffer I/O error on dev loop7, logical block 521, lost async page write [ 65.182070][ T5200] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 65.185551][ T5216] EXT4-fs (loop2): free_blocks=2415919104 [ 65.197657][ T5200] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 65.204083][ T5216] EXT4-fs (loop2): dirty_blocks=32 [ 65.225027][ T5216] EXT4-fs (loop2): Block reservation details [ 65.231144][ T5216] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 65.490787][ T5226] loop1: detected capacity change from 0 to 8192 [ 65.544485][ T5226] loop1: p1 p2 < > p3 p4 < p5 > [ 65.559305][ T5226] loop1: p1 size 108986237 extends beyond EOD, truncated [ 65.582384][ T5226] loop1: p3 size 131072 extends beyond EOD, truncated [ 65.612205][ T5226] loop1: p5 size 108986237 extends beyond EOD, truncated [ 65.648380][ T5263] syz.2.578: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 65.663061][ T5263] CPU: 1 UID: 0 PID: 5263 Comm: syz.2.578 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 65.673693][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 65.683834][ T5263] Call Trace: [ 65.687129][ T5263] [ 65.690118][ T5263] dump_stack_lvl+0xf2/0x150 [ 65.694744][ T5263] dump_stack+0x15/0x1a [ 65.698950][ T5263] warn_alloc+0x145/0x1b0 [ 65.703318][ T5263] ? __vmalloc_node_range_noprof+0x88/0xe80 [ 65.709281][ T5263] ? common_lsm_audit+0x920/0x1010 [ 65.714430][ T5263] __vmalloc_node_range_noprof+0xaa/0xe80 [ 65.720194][ T5263] ? __rcu_read_unlock+0x4e/0x70 [ 65.725657][ T5263] ? __perf_event_task_sched_in+0x9ac/0xa10 [ 65.731625][ T5263] ? __dequeue_entity+0x22/0x310 [ 65.736605][ T5263] ? should_fail_ex+0x31/0x230 [ 65.741421][ T5263] ? xskq_create+0x36/0xd0 [ 65.745948][ T5263] ? should_failslab+0x8f/0xb0 [ 65.750751][ T5263] vmalloc_user_noprof+0x59/0x70 [ 65.755799][ T5263] ? xskq_create+0x79/0xd0 [ 65.760311][ T5263] xskq_create+0x79/0xd0 [ 65.764579][ T5263] xsk_init_queue+0x82/0xd0 [ 65.769227][ T5263] xsk_setsockopt+0x409/0x520 [ 65.774021][ T5263] ? __pfx_xsk_setsockopt+0x10/0x10 [ 65.779293][ T5263] __sys_setsockopt+0x187/0x200 [ 65.784233][ T5263] __x64_sys_setsockopt+0x66/0x80 [ 65.789287][ T5263] x64_sys_call+0x282e/0x2dc0 [ 65.794020][ T5263] do_syscall_64+0xc9/0x1c0 [ 65.798606][ T5263] ? clear_bhb_loop+0x55/0xb0 [ 65.803315][ T5263] ? clear_bhb_loop+0x55/0xb0 [ 65.808024][ T5263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.814077][ T5263] RIP: 0033:0x7f404858fed9 [ 65.818514][ T5263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.838257][ T5263] RSP: 002b:00007f4046c07058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.846750][ T5263] RAX: ffffffffffffffda RBX: 00007f4048755fa0 RCX: 00007f404858fed9 [ 65.854769][ T5263] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 65.862908][ T5263] RBP: 00007f4048603cc8 R08: 0000000000000020 R09: 0000000000000000 [ 65.870901][ T5263] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 65.878886][ T5263] R13: 0000000000000000 R14: 00007f4048755fa0 R15: 00007ffedef61878 [ 65.886937][ T5263] [ 65.890148][ T5263] Mem-Info: [ 65.893533][ T5263] active_anon:6953 inactive_anon:0 isolated_anon:0 [ 65.893533][ T5263] active_file:15448 inactive_file:2203 isolated_file:0 [ 65.893533][ T5263] unevictable:0 dirty:336 writeback:0 [ 65.893533][ T5263] slab_reclaimable:2884 slab_unreclaimable:14921 [ 65.893533][ T5263] mapped:28709 shmem:1265 pagetables:898 [ 65.893533][ T5263] sec_pagetables:0 bounce:0 [ 65.893533][ T5263] kernel_misc_reclaimable:0 [ 65.893533][ T5263] free:1897097 free_pcp:4086 free_cma:0 [ 65.938432][ T5263] Node 0 active_anon:28044kB inactive_anon:0kB active_file:61792kB inactive_file:8812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114836kB dirty:1344kB writeback:0kB shmem:5060kB writeback_tmp:0kB kernel_stack:3008kB pagetables:3592kB sec_pagetables:0kB all_unreclaimable? no [ 65.966645][ T5263] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.980596][ T5267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.578'. [ 65.993579][ T5263] lowmem_reserve[]: 0 2866 7844 0 [ 66.007754][ T5263] Node 0 DMA32 free:2950280kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953912kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 66.036465][ T5263] lowmem_reserve[]: 0 0 4978 0 [ 66.041379][ T5263] Node 0 Normal free:4622748kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:28392kB inactive_anon:0kB active_file:61792kB inactive_file:8812kB unevictable:0kB writepending:1344kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:12100kB local_pcp:8256kB free_cma:0kB [ 66.071812][ T5263] lowmem_reserve[]: 0 0 0 0 [ 66.076416][ T5263] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.089193][ T5263] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950280kB [ 66.105471][ T5263] Node 0 Normal: 25*4kB (UME) 117*8kB (UM) 103*16kB (UM) 243*32kB (ME) 295*64kB (UM) 80*128kB (UM) 51*256kB (UM) 38*512kB (UME) 20*1024kB (UME) 14*2048kB (UM) 1099*4096kB (UM) = 4622748kB [ 66.124316][ T5263] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 66.133689][ T5263] 18937 total pagecache pages [ 66.138437][ T5263] 0 pages in swap cache [ 66.142652][ T5263] Free swap = 124468kB [ 66.146825][ T5263] Total swap = 124996kB [ 66.151013][ T5263] 2097051 pages RAM [ 66.154917][ T5263] 0 pages HighMem/MovableOnly [ 66.159706][ T5263] 80181 pages reserved [ 66.167526][ T5270] ucma_write: process 284 (syz.3.579) changed security contexts after opening file descriptor, this is not allowed. [ 66.265669][ T5274] netlink: 68 bytes leftover after parsing attributes in process `syz.2.581'. [ 66.286239][ T5274] loop2: detected capacity change from 0 to 512 [ 66.340311][ T5274] ext4 filesystem being mounted at /105/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.400000][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.585'. [ 66.469824][ T3303] ================================================================== [ 66.477974][ T3303] BUG: KCSAN: data-race in mlock_new_folio / need_mlock_drain [ 66.485478][ T3303] [ 66.487826][ T3303] read-write to 0xffff888237d2b4a0 of 1 bytes by task 5289 on cpu 1: [ 66.495917][ T3303] mlock_new_folio+0x114/0x200 [ 66.500717][ T3303] folio_add_lru_vma+0x5d/0x60 [ 66.505507][ T3303] handle_mm_fault+0x24d8/0x2ac0 [ 66.510465][ T3303] __get_user_pages+0xf2c/0x2670 [ 66.515436][ T3303] __mm_populate+0x25b/0x3b0 [ 66.520044][ T3303] __se_sys_mlockall+0x2c5/0x370 [ 66.525013][ T3303] __x64_sys_mlockall+0x1f/0x30 [ 66.529881][ T3303] x64_sys_call+0x2bf8/0x2dc0 [ 66.534583][ T3303] do_syscall_64+0xc9/0x1c0 [ 66.539101][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.545028][ T3303] [ 66.547362][ T3303] read to 0xffff888237d2b4a0 of 1 bytes by task 3303 on cpu 0: [ 66.554925][ T3303] need_mlock_drain+0x30/0x50 [ 66.559641][ T3303] __lru_add_drain_all+0x22a/0x3f0 [ 66.564778][ T3303] lru_add_drain_all+0x10/0x20 [ 66.569562][ T3303] invalidate_bdev+0x47/0x70 [ 66.574188][ T3303] ext4_put_super+0x571/0x840 [ 66.578909][ T3303] generic_shutdown_super+0xe5/0x220 [ 66.584229][ T3303] kill_block_super+0x2a/0x70 [ 66.589040][ T3303] ext4_kill_sb+0x44/0x80 [ 66.593407][ T3303] deactivate_locked_super+0x7d/0x1c0 [ 66.598802][ T3303] deactivate_super+0x9f/0xb0 [ 66.603514][ T3303] cleanup_mnt+0x268/0x2e0 [ 66.607962][ T3303] __cleanup_mnt+0x19/0x20 [ 66.612433][ T3303] task_work_run+0x13a/0x1a0 [ 66.617060][ T3303] syscall_exit_to_user_mode+0xa8/0x120 [ 66.622662][ T3303] do_syscall_64+0xd6/0x1c0 [ 66.627197][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.633136][ T3303] [ 66.635475][ T3303] value changed: 0x18 -> 0x1e [ 66.640178][ T3303] [ 66.642510][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 66.648691][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 66.659594][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 66.669700][ T3303] ================================================================== [ 67.214594][ T5290] syz.1.587 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 67.228765][ T5290] CPU: 1 UID: 0 PID: 5290 Comm: syz.1.587 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 67.239393][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.249464][ T5290] Call Trace: [ 67.252740][ T5290] [ 67.255669][ T5290] dump_stack_lvl+0xf2/0x150 [ 67.260288][ T5290] dump_stack+0x15/0x1a [ 67.264482][ T5290] dump_header+0x83/0x2d0 [ 67.268836][ T5290] oom_kill_process+0x341/0x4c0 [ 67.273732][ T5290] out_of_memory+0x9af/0xbe0 [ 67.278348][ T5290] ? css_next_descendant_pre+0x11c/0x140 [ 67.284036][ T5290] mem_cgroup_out_of_memory+0x13e/0x190 [ 67.289623][ T5290] try_charge_memcg+0x508/0x7f0 [ 67.294513][ T5290] obj_cgroup_charge_pages+0xbd/0x1a0 [ 67.299966][ T5290] __memcg_kmem_charge_page+0x9d/0x170 [ 67.305453][ T5290] __alloc_pages_noprof+0x1bc/0x340 [ 67.310672][ T5290] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 67.316100][ T5290] alloc_pages_noprof+0xe1/0x100 [ 67.321134][ T5290] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 67.326969][ T5290] __kvmalloc_node_noprof+0x121/0x170 [ 67.332427][ T5290] ? ip_set_alloc+0x1f/0x30 [ 67.336962][ T5290] ip_set_alloc+0x1f/0x30 [ 67.341307][ T5290] hash_ipport_create+0x4dc/0x9f0 [ 67.346341][ T5290] ? __pfx_hash_ipport_create+0x10/0x10 [ 67.351896][ T5290] ip_set_create+0x359/0x8a0 [ 67.356503][ T5290] ? memchr+0x1/0x50 [ 67.360408][ T5290] ? __nla_parse+0x40/0x60 [ 67.364861][ T5290] nfnetlink_rcv_msg+0x4a9/0x570 [ 67.369890][ T5290] netlink_rcv_skb+0x12c/0x230 [ 67.374704][ T5290] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 67.380297][ T5290] nfnetlink_rcv+0x16c/0x15d0 [ 67.385061][ T5290] ? kmem_cache_free+0xdc/0x2d0 [ 67.390002][ T5290] ? nlmon_xmit+0x51/0x60 [ 67.394360][ T5290] ? __kfree_skb+0x102/0x150 [ 67.398982][ T5290] ? consume_skb+0x49/0x160 [ 67.403510][ T5290] ? nlmon_xmit+0x51/0x60 [ 67.407863][ T5290] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 67.413191][ T5290] ? __dev_queue_xmit+0xb6e/0x2090 [ 67.418372][ T5290] ? ref_tracker_free+0x3a5/0x410 [ 67.423414][ T5290] ? __dev_queue_xmit+0x186/0x2090 [ 67.428586][ T5290] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 67.434073][ T5290] netlink_unicast+0x599/0x670 [ 67.438936][ T5290] netlink_sendmsg+0x5cc/0x6e0 [ 67.443772][ T5290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.449084][ T5290] __sock_sendmsg+0x140/0x180 [ 67.453776][ T5290] ____sys_sendmsg+0x312/0x410 [ 67.458626][ T5290] __sys_sendmsg+0x19d/0x230 [ 67.463332][ T5290] __x64_sys_sendmsg+0x46/0x50 [ 67.468102][ T5290] x64_sys_call+0x2734/0x2dc0 [ 67.472815][ T5290] do_syscall_64+0xc9/0x1c0 [ 67.477342][ T5290] ? clear_bhb_loop+0x55/0xb0 [ 67.482046][ T5290] ? clear_bhb_loop+0x55/0xb0 [ 67.486733][ T5290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.492722][ T5290] RIP: 0033:0x7fdead8ffed9 [ 67.497135][ T5290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.516909][ T5290] RSP: 002b:00007fdeabf56058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.525341][ T5290] RAX: ffffffffffffffda RBX: 00007fdeadac6080 RCX: 00007fdead8ffed9 [ 67.533476][ T5290] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 67.541485][ T5290] RBP: 00007fdead973cc8 R08: 0000000000000000 R09: 0000000000000000 [ 67.549487][ T5290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.557554][ T5290] R13: 0000000000000000 R14: 00007fdeadac6080 R15: 00007fff99b2a428 [ 67.565564][ T5290] [ 67.569216][ T5290] memory: usage 307200kB, limit 307200kB, failcnt 144 [ 67.576126][ T5290] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 67.584107][ T5290] kmem: usage 270604kB, limit 9007199254740988kB, failcnt 0 [ 67.591502][ T5290] Memory cgroup stats for /syz1: [ 67.591697][ T5290] cache 8257536 [ 67.600152][ T5290] rss 29212672 [ 67.603590][ T5290] shmem 0 [ 67.606617][ T5290] mapped_file 8257536 [ 67.610638][ T5290] dirty 8192 [ 67.613846][ T5290] writeback 0 [ 67.617135][ T5290] workingset_refault_anon 0 [ 67.621715][ T5290] workingset_refault_file 0 [ 67.626246][ T5290] swap 188416 [ 67.629559][ T5290] swapcached 0 [ 67.632936][ T5290] pgpgin 32233 [ 67.636304][ T5290] pgpgout 23085 [ 67.639809][ T5290] pgfault 37958 [ 67.643365][ T5290] pgmajfault 5 [ 67.646729][ T5290] inactive_anon 0 [ 67.650406][ T5290] active_anon 0 [ 67.653904][ T5290] inactive_file 0 [ 67.657528][ T5290] active_file 0 [ 67.661063][ T5290] unevictable 37470208 [ 67.665142][ T5290] hierarchical_memory_limit 314572800 [ 67.670549][ T5290] hierarchical_memsw_limit 9223372036854771712 [ 67.676712][ T5290] total_cache 8257536 [ 67.680739][ T5290] total_rss 29212672 [ 67.684696][ T5290] total_shmem 0 [ 67.688198][ T5290] total_mapped_file 8257536 [ 67.692781][ T5290] total_dirty 8192 [ 67.696595][ T5290] total_writeback 0 [ 67.700438][ T5290] total_workingset_refault_anon 0 [ 67.705471][ T5290] total_workingset_refault_file 0 [ 67.710523][ T5290] total_swap 188416 [ 67.714405][ T5290] total_swapcached 0 [ 67.719164][ T5290] total_pgpgin 32233 [ 67.723102][ T5290] total_pgpgout 23085 [ 67.727097][ T5290] total_pgfault 37958 [ 67.731111][ T5290] total_pgmajfault 5 [ 67.735013][ T5290] total_inactive_anon 0 [ 67.739160][ T5290] total_active_anon 0 [ 67.743315][ T5290] total_inactive_file 0 [ 67.747516][ T5290] total_active_file 0 [ 67.751529][ T5290] total_unevictable 37470208 [ 67.756126][ T5290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.587,pid=5288,uid=0 [ 67.770661][ T5290] Memory cgroup out of memory: Killed process 5288 (syz.1.587) total-vm:93412kB, anon-rss:29160kB, file-rss:63940kB, shmem-rss:0kB, UID:0 pgtables:236kB oom_score_adj:1000