last executing test programs: 27.619199795s ago: executing program 4 (id=300): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xc0}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000006c0)='.\x00', 0xaa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000700), 0x18) utimensat(r4, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002800128009000100766574680000000018000280140001000000", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x84) 27.551870679s ago: executing program 4 (id=301): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(0x0, 0x71, 0x301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 27.54582972s ago: executing program 4 (id=303): bpf$MAP_CREATE(0x1000000, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000636a25df"], 0x50) 27.515187101s ago: executing program 4 (id=304): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f00000004c0)={[{@inode_readahead_blks}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@data_ordered}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0xfb10, 0x0) 27.319922583s ago: executing program 4 (id=305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000001040), 0x1, 0x10041) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000200)="05178100", 0x1a, 0x50, &(0x7f0000000080)={0x11, 0x8100, r4, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={0xffffffffffffffff, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000001380)=[0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000001400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x9b, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r6, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e0000000000200021"], 0x58) r7 = inotify_init() add_key$keyring(&(0x7f00000010c0), &(0x7f0000001100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) inotify_add_watch(r7, &(0x7f0000000000)='./file0\x00', 0x46000c48) close(r6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r8 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x1a, 0x2f, &(0x7f0000001780)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x97}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ldst={0x1, 0x3, 0x1, 0x3, 0xb, 0xffffffffffffffff, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x6, 0x8, 0x1, 0x1, 0x8}], &(0x7f0000001200)='syzkaller\x00', 0x570e, 0x55, &(0x7f0000001240)=""/85, 0x41100, 0x10, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001300)={0x3, 0xe, 0x200, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001640)=[{0x0, 0x4, 0x5, 0x3}, {0x0, 0x1, 0xa, 0xb}, {0x5, 0x3, 0x6}, {0x4, 0x2, 0x2, 0xa}, {0x4, 0x3, 0xa, 0x8}, {0x2, 0x3, 0xc, 0x9}, {0x3, 0x3, 0xb, 0xa}, {0x3, 0x1, 0x10, 0x7}], 0x10, 0xff}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) writev(r9, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x1000}], 0x1) 27.101714595s ago: executing program 4 (id=313): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(0x0, 0x71, 0x301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 27.081373137s ago: executing program 32 (id=313): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x4, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(0x0, 0x71, 0x301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8.568486629s ago: executing program 1 (id=605): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x19, 0x1, 0x70bd26, 0x0, {0x1c, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$eJzs3U9rXFUUAPDTsfmr6WQhgop4qRvdDEn8Ag3SghhQYkeqC+HVTHTINBPmDZEpot259XMUl+4E8QtkoXt37rJx2UXpk8yfJpOOKSVOHtXfD8I9yT0nc+883uNuHufw1g93drbz2nbWjcq1FJWIqDyIWO5HA5eGY6Ufz8ZJ9+Kd6q0/3vj4088+WN/YuL6Z0o31m++upZSuvPnL19/8ePXX7ouf/HTl57k4WP788K+1Pw9eOXj18NHNr5p5auZpt91NWbrdbnez261G2mrmO7WUPmo1sryRmrt5ozM2v91q7+31Ura7tbS412nkecp2e2mn0Uvddup2ein7MmvuplqtlpYWg6ep39/czNYH8fwZedcuakFMQaeznh3dw3NPzNTvl7IgAKBU5z3/z/6r5/+ZcP6/SCfP//xXHZ3/Z4f37zjnfwAAAAAAAAAAAAAAeB48KIpqURTV0ViMXhIe/l7y8piyJ67/qZ+y18d0nXhxbz6i9f1+fb8+GAfz69vRjFY0YiWq8fDosTAyiG+8v3F9JfUtx9Kd7/r1V3+LqL8wXr8a1VieXL86qE+P6+NonInFk/VrUY2XJ9evTayfjbffOlFfi2r8/kW0oxVb/cfbcf23qym99+HGqfq5fh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w+1NPJ6DPre79cjFmJ/2L+/dpywPN4ff1D/uL/+SlTj4eT+/CsT+/Nfjtcul7t3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjJe3d3slar0bmoYNTzv/+X2VHwz1WXBun3Tk0txHjy3NP+zzmDyjNVLQw3OWHqUVEU01rq/MVeyvMEMxFxRk4x/ALP/1kvRcQZOXMRMf0tV8r/wp85KONpBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOU6bvpd9koAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoU967u5O1Wo3OFIOy9wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA8+TsAAP//S+oM3w==") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsync(r1) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.424598417s ago: executing program 1 (id=607): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) 8.423977938s ago: executing program 1 (id=609): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@journal_async_commit}, {@resuid}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpid}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) (fail_nth: 1) 7.953008495s ago: executing program 1 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$eJzs3U1oHNcdAPD/zGot2ZYrF1poiw+mLbhgvPqw3bo9yddSg8GHQi+tWK2F0UprtKvWEoLKdxPiQ0iCL84tOeSYkEMOIZccc80lH+eAiUUClg/Jhv2SZXnlrGTtbqz9/WC0783M7v//duY9zQwzbAAD63TtTxrx24i4mkSMbVs2FM2FpxvrbW6s5R9vrOWTqFavfZNEEhGPNtbyrfWT5uvxiFiPiN9ExMfZiLPp1kceaRXKK6vzM8ViYalZH68s3Bwvr6yeu7EwM1eYKyye/8tfL166cHFyanJ7uo+r22vZvbX1zhd3X7nz6d/v333n3VPr+ddmkpiO0eay7e04SI3vJBvTO+Zf6EawPkr6nQD7kmn281pX+nWMRabZ69upbh8chnuSHtBF1eGI6pZtRWAAJC/Q6VuDCPAyah0H1M5/W1Mvjz8eXG6cgNTibm6s5f8frfhDjWsTMVI/Nzn2bfLUmUntfPNkLxPlUFq/HRETQ0PP7v9Jc//bv4mDSJCu+uhyY0M9u/3TrfEn2ow/o61rpy+oNf5tNse/zTbxM7uMf1c7jPH9v756c9f4t4fjd23jJ1vxkzbx04j4T4fx7/3zg0u7Lau+FXEm2sdvSZ5/fXj8+o1iYaLxt22MD8+c+tvu7Y84tkv8xjXbkXoi29t/pJlT2mH73//kvd+vPyf+n/7w/O3f7vs/GhGvdhj/l4/e/sduyx7cTh7WjgL2uv2TyMb9DuP/efr0582iq4YAAAAAAAAAAHCA0vq9bEma2yqnaS7XeIb3V3EsLZbKlbPXS8uLs4173k5GNm3daTXWqCe1+mTzftxWfWpH/XymGTBztF7P5UvF2T63HQAAAAAAAAAAAAAAAAAAAH4uju94/v+7TP35/+mIqRP9zg3ogd1/8hs47PR/GFxP9/+kb3kAvef/Pwysqv4Pg0v/h8Gl/8Pg0v9hcLXt/0d7nwfQe8/0/5H+5AH0nuN/AAAAAAAAAAAAAAAAAAAAAAAAAADoiqtXrtSm6uONtXytPju0sjxf+u+52UJ5PrewnM/lS0s3c3Ol0lyxkMuXFn7q85JS6eZELC7fGq8UypXx8srqvxdKy4ut3xQtZLveIgAAAAAAAAAAAAAAAAAAAHj5jNanJM1FZBv1NM3lIk5ExMkkkus3ioWJiPhFRHyWyQ7X6pP9ThoAAAAAAAAAAAAAAAAAAAAOmfLK6vxMsVhY6l5hqBmqs3d9WelqPkN7WTki1g82jdon7vld2eYXWJ8z0vXtdbgLmQ73w4Ev9HFQAgAAAAAAAAAAAAAAAACAAfXkod9O3/FDdxMCAAAAAAAAAAAAAAAAAACAgZR+nUREbToz9sfRnUuPJJuZ+mtE/O/etddvzVQqS5O1+Q+35lfeaM6f6kf+QKda/TSNiFo/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4or6zOzxSLhaV9FoY7WKffbQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYjx8DAAD//95Mx5c=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x200, 0x53) r3 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x80000000, 0x0) r4 = syz_io_uring_setup(0x839, &(0x7f0000000200)={0x0, 0x679d, 0x1000, 0x2000006, 0x3a6}, &(0x7f0000000040), &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x18600, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x6, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0xf, &(0x7f00000003c0)={0x1000, 0x0, 0x0, 0x0, 0x21}, 0x20) r5 = getuid() quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000301, r5, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x4000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb0000009}) 7.405097458s ago: executing program 1 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=ANY=[@ANYBLOB="24000000200001032cfa7000ffdb5f25020000000000000510000000080017004e234e81"], 0x24}}, 0x8800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1703}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) (fail_nth: 2) 4.524845856s ago: executing program 1 (id=645): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/46, 0x2e, 0x40, 0x0, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x7f) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r9, 0x0, 0x8000, 0x0) 4.507606807s ago: executing program 33 (id=645): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/46, 0x2e, 0x40, 0x0, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x7f) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r9, 0x0, 0x8000, 0x0) 4.129269199s ago: executing program 2 (id=650): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 3.7630025s ago: executing program 2 (id=651): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100000000000000000002000000", @ANYRES32=r1, @ANYRES32=r0], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000000c0)={0x32}, 0x8) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r2, 0x100101) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000100)=@srh={0xb8, 0x4, 0x4, 0x2, 0xd4, 0x28, 0x800, [@loopback, @dev={0xfe, 0x80, '\x00', 0xc}]}, 0x28) accept4(r2, 0x0, 0x0, 0x80800) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) 2.560859621s ago: executing program 2 (id=654): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x800800000000) 2.372013941s ago: executing program 2 (id=658): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xc}, 0x2, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYBLOB="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"/305, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$eJzs3c9rE00YwPEnSdMk7du3Pby8iCgMFUSRLm3AmweLtCAGlLYRrCBs7VZDtklJQiEitoLg1bOHHjyKIII3LyJee/EvUOutl97soTiy2R/NjzWmlbRVv59D8jQzz850Z9LSaXZ288KTxfxCUkQiElDOQ1Ri3percvb92qeT0+/+8YrV5PjMWFqpqIjcvP9i+G2l//rrf98kZH3o1uZW+sv6iRmRbzN3JapyZVXQWplqrlisOE2o+Vw5byh1zbbMsqVyhbJVqnjl5pxtqQW7uLRUVWZhfqBvqWSVy8osVFXeqqpKUVVKVWXeMXMFZRiGGugTiMhQEEVbyiLtErPPt7WWLa21TqyK1jqk9qofxL3nxK91FkdJ0/i3rdsyOWLd7BkOwrbu6Xj88edx3/+fn3Y2/nrlgLqFAzJ9Y/bKeCYzMaVUUmTx8XJ2Oes+u+Uf+yUntliyNnVudkecOeKRiPM4eTkzMapqhuT04oqXv7KcdX85jC/U8jf8pLp88fPH3HzVmB+Xvt18S9IyKP9JaH7az5doXX6vnDlVl2/IoHy4LUWxZd6ZyXX5D8aUunQ109R+qlavzsNDGB4AAAAAAAAAAPbFUIHd9ftI8K/elGEkap/4CMpTzstOPbdCsL4+KoOyE74+Pxq6vt8jx3sO8RsHAAAAAOAvUq7ey5u2bZW6E8Sepdo0ETdEnEDk0bDTmbYH/N/rcWet94pIa1GsfRMNQeq8297LKa9j0s0T5QfJPfQwJPAv1sibO6/8opSEVY7uaQKM9Iae+WQpIl2dPw2BdFJZkvub2ImOp1ZzEAvaOhZaR0d+fhxt2nH3FQlGsH3WxT29HX4YJJtP1MiGe1y7zQ+Nr8ESHwAAAIDfSN0fTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JAE1/9HvDv9d7J5mL9vf2OReLeIb92Srfk+8ez7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI+h4AAP//0fmz5A==") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='pim6reg\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read$hidraw(r4, &(0x7f0000002380)=""/93, 0xfdef) write$binfmt_script(r5, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000068500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000005000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$nci(r7, 0x0, 0xffffff38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.359242231s ago: executing program 2 (id=669): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f0000000100)) 1.287234985s ago: executing program 5 (id=671): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0x4}}}, 0x24}}, 0x20000000) 1.179483221s ago: executing program 5 (id=672): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/46, 0x2e, 0x40, 0x0, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r9, 0x0, 0x8000, 0x0) 955.802944ms ago: executing program 0 (id=673): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 955.013464ms ago: executing program 3 (id=674): syz_emit_ethernet(0x55, &(0x7f00000002c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "9ba5f0", 0x1f, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x4e23, 0x4e20, 0x1f, 0x0, @gue={{0x1, 0x0, 0x1, 0xa, 0x100, @void}, "9794db8c50d7eb0d5deb99f82d9a277af0296a"}}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="12043600d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x103, {{0xa, 0x0, 0x2, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000007000000850000001700000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 920.267996ms ago: executing program 0 (id=675): sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x441e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x8, 0x0, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@max_batch_time}, {@resuid={'resuid', 0x3d, 0xee01}}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0xad55}}]}, 0x1, 0x483, &(0x7f0000001040)="$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") (async, rerun: 32) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x11, 0x6}, 0x6d) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @multicast}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (rerun: 64) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) (async, rerun: 64) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r7, 0x7b6f0ce1e0da0119, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4040841}, 0x4008040) 919.670046ms ago: executing program 3 (id=676): syz_emit_ethernet(0x7a, &(0x7f0000000280)=ANY=[@ANYBLOB="856b934629faaaaaaaaaaaaa86dd60381f3400142f00fc000000655800000000000000000000ff0200000000000000000000000000010420"], 0x0) 896.502778ms ago: executing program 5 (id=677): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usmglfgjYsiwUVK2duLvRak/lAkJVJUTFiUMbEjeKYsdR7JQm9JD+D0hU4gR/AgckDkg9cecGN4RUDkgFKlCDxMFoxpM0m8ZJ1KaeKv58pNHMm2f7+56SeW/yTTIvgKF1MSJ2IuJCRNyKiOnifFJscbW3Za97+uTe4u6Te4tJdLs3/pnk9dm5OPCezJvFZ05ExA+/F/GT5Pm47a3t1YVGo75RlKud5nq1vbX915XmwnJ9ub5Wq83Pzc9+cuXj2pn19b3mbx5/d+Xaj37/u688+uPOt3+WNWuqqDvYj7PU6/rYfpzMaERcexXBSjBS9OdC2Q3hhaQR8bmIeD+7/rtltwYAGIRudzq60wfLAMB5l+Y5sCStFLmAqUjTSqWXw3s3JtNGq925fLu1ubbUy5XNxFh6e6VRny1yhTMxlmTlufz4Wbl2qHwlIt6JiJ+Pv5GXK4utxlKZNz4AMMTePDT//2e8N/8DAOfcRNkNAAAGzvwPAMPH/A8Aw8f8DwDDx/wPAMPH/A8Aw8f8DwBD5QfXr2dbd7d4/vXSna3N1dadD5fq7dVKc3OxstjaWK8st1rL+TN7mid9XqPVWp/7KDbvVjv1dqfa3tq+2WxtrnVu5s/1vlkfG0ivAIDjvPPewz8nEbHz6Rv5FgfWcjBXw/mWlt0AoDQjZTcAKM1o2Q0ASuNnfBh6Jz7xu++fCD3o+xZDC7zmLn1R/h+Glfw/DC/5fxhe8v8wvLrdxJr/ADBk5PiB5IT6F/j9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJx7U/mWpJViLfCpSNNKJeKtiJiJseT2SqM+GxFvR8SfxsfGs/Jc2Y0GAF5S+vekWP/r0vQHU4drLyT/Hc/3EfHTX974xd2FTmdjLjv/r/3znQfF+dqxgSw1CAAl2Zun9+bxPU+f3Fvc2wbZnsff6S0umsXdLbZezWiM5vuJ/MZh8t9JUe7J7ldGziD+zv2I+MJR/U/y3MhMsfLp4fhZ7LcGGj/9TPw0r8v26Rm0AobTw2z8uXrU9ZfGxXx/9PU/kY9QL29v/Nt9bvxL98e/kT7j38XTxvjoD9/vW3c/4kujR8VP9uMnfeJ/cMr4f/nyV9/vV9f9VcSlODr+wVjVTnO92t7a/nClubBcX66v1Wrzc/Ozn1z5uFbNc9TVvUz18/7x6eW3j+v/ZJ/4Eyf0/xun7P+v/3frx187Jv63vn701//dY+Jnc+I3Txl/YfK3fZfvzuIvHd3/4j39+3/5lPEf/W176ZQvBQAGoL21vbrQaNQ3HAzsILt3ew2a4aC0g+w74Cw+5/OvsKllj0zAq/bsoi+7JQAAAAAAAAAAAAAAQD+D+IensvsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+fX/AAAA//8ohteG") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x3100, &(0x7f0000000040)={0x70, 0x100004, 0x1c0000}, 0x20) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) pread64(r0, &(0x7f0000000340)=""/199, 0xc7, 0x7fff) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1000804, &(0x7f0000000100), 0x1, 0x4bf, &(0x7f0000000540)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x2002, 0x49) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x3100, &(0x7f0000000040)={0x70, 0x100004, 0x1c0000}, 0x20) (async) io_setup(0x20fe, &(0x7f00000001c0)) (async) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) (async) pread64(r0, &(0x7f0000000340)=""/199, 0xc7, 0x7fff) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) 804.210763ms ago: executing program 3 (id=678): setreuid(0x0, 0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xba000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 744.605537ms ago: executing program 2 (id=679): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x42718, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x80, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl(0xffffffffffffffff, 0x8916, 0x0) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x6ca3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x2, 0xe, 0x10, 0x6af, 0x15, "1a9f0a3f7b52f26ea6fa6a6638d7219c6a5310"}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, &(0x7f0000000100), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x14, 0x0, 0xffffffffffffffff, 0x0, r0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = syz_io_uring_setup(0x4b7, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r8, 0x24, 0xfffffffffffffffe, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fcntl$getownex(r7, 0x10, &(0x7f0000000000)) syz_emit_ethernet(0x52, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a8000088a8000086dd60ff10f50014060000010000000000000000000000000002fe8000000000000000000000000000aa00004e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000d090780000"], 0x0) 724.632768ms ago: executing program 3 (id=680): r0 = syz_clone(0x80080, &(0x7f0000000100)="f01156b721097634112c9e10233712753085c0de86d4f9a3f30e1540fa", 0x1d, &(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)="d868470f9b5f84e9c17fc2fb578b4a9352db870b72ed789dd22af2111eb4f06f3f54030ba1ecbb991f73e2324b09a0dccba3db399dfaddec59f2f4fddfcf76b3d1ab2c95c131ab087bb7fa3637956fc2c30579a98183e423faa58df1c3d65f7fcaf365a09042885da89d8db4838e5f") r1 = perf_event_open$cgroup(&(0x7f0000000400)={0x4, 0x80, 0x5, 0x7, 0xe, 0xa4, 0x0, 0xce, 0x4, 0xd, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x6c}, 0x2024, 0x2, 0xfff, 0x0, 0x7, 0xba5, 0xffff, 0x0, 0xffff3b95, 0x0, 0xc}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xe) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x10, 0x27, 0x3b, 0x2, 0x0, 0x78, 0x418, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xef, 0x2, @perf_config_ext={0xe, 0x67c13149}, 0x1002, 0xa, 0x2, 0x4, 0x0, 0x6, 0x5, 0x0, 0x6, 0x0, 0xa}, r0, 0x0, r1, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000400000000000000001d711874000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r5, &(0x7f00000010c0)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31241a900518bef75ab52d7df9d091c4c601dc1cb4f1c7ed7a1d442806cc98e32546", 0x5d, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000001040)) r6 = socket$key(0xf, 0x3, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r3, 0x4000, r6}, 0x18) 613.407725ms ago: executing program 0 (id=681): ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x10b841, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000580)="e5", 0x1}], 0x1, 0x1, 0xfffffffb, 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x56}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) 562.918157ms ago: executing program 0 (id=682): msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x6, 0x3a, ')', 0x3a, '', 0x3a, './file0'}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) read$msr(r2, &(0x7f0000000180)=""/43, 0x7b) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)={0x34, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x18, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @nested={0x8, 0x13, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_emit_ethernet(0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa2caaaa86200002adf7073c5c00fe880000000000000000000000000001ff020000000000000000000000000001907800000000600327f60000110000000000000000000000fffffffffffffe8000000000000000000000000000005a74cffa30d41cd96f0319"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000008a00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_WRITE_CHECKPOINT(0xffffffffffffffff, 0xf507, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2008000, &(0x7f0000000000), 0xfd, 0x4f1, &(0x7f00000002c0)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x3c, r5, 0x1, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801c080}, 0x800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x1, 0x2, 0x61, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x7800, 0x3, 0x100}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r5, 0x4, 0x81, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x24}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x20008000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791600000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) pipe(&(0x7f00000002c0)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r8, &(0x7f00000001c0)=ANY=[], 0xff2e) 493.003371ms ago: executing program 0 (id=683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0xfffffff9, 0x25dfdbfe, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x2}, @TCA_PIE_ALPHA={0x8, 0x4, 0xb}]}}]}, 0x40}}, 0x20000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r3, 0x10, 0x6, 0x10001) 437.267674ms ago: executing program 3 (id=684): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 417.613486ms ago: executing program 5 (id=685): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa00, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 350.25684ms ago: executing program 3 (id=686): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x125) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x3000000, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/46, 0x2e, 0x40, 0x0, 0x0) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r9 = socket$inet(0x2, 0x3, 0x7f) setsockopt$inet_int(r9, 0x0, 0x3, &(0x7f0000000140)=0x5, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r9, 0x0, 0x8000, 0x0) 304.606483ms ago: executing program 0 (id=687): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, 0x0, &(0x7f0000000080)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='environ\x00') exit(0x3) r2 = openat(0xffffffffffffffff, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x0) read$rfkill(r2, &(0x7f0000000240), 0x8) open_by_handle_at(r2, &(0x7f0000000000)=@isofs={0x14, 0x1, {0x1000, 0x6, 0x7, 0x80000001, 0x1, 0xfffffffb}}, 0x8ce00) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000200)='1=\xa9\xc3\xc1v\x1f\x81\xf4\xb1\xb0\a\xe8\xf0\x97\xb1\xe9Z\xdd\xa2\xda\\', &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', r1) fcntl$notify(0xffffffffffffffff, 0x402, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000340), 0x619d, 0x80) ioctl$SNAPSHOT_UNFREEZE(r5, 0x3302) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000018000100000000000000000002001000000100070000000006001680100008800c00018006000100000900"/56], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x4, 0x3, 0x6, 0x100, r2, 0x3, '\x00', r9, r1, 0x0, 0x1, 0x5, 0x1}, 0x50) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './cgroup.net/devices.allow', [{}, {0x20, ':+:'}, {0x20, '/dev/snd/timer\x00'}, {0x20, 'environ\x00'}, {0x20, '\x00'}, {0x20, 'environ\x00'}, {0x20, '1=\xa9\xc3\xc1v\x1f\x81\xf4\xb1\xb0\a\xe8\xf0\x97\xb1\xe9Z\xdd\xa2\xda\\'}, {0x20, '\x00'}]}, 0x60) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 213.095698ms ago: executing program 5 (id=688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0d0000007f000000040000000809000000000000", @ANYRES32=r0], 0x50) unshare(0x28000600) io_setup(0x9, &(0x7f00000000c0)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001940)='/sys/kernel/rcu_normal', 0x20001, 0x106) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000100)='9', 0x20000101}]) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x6, 0x2440000, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00040000000000000000000000df86f045f46180ed2d93d094f47b20b9e5090684fca50aa51a6243bd97eb546d8af670402d8eddc3da7d48d75e81dd55c8f633906a4ec6db548b5bf084b957690c3631ac31d6b29b953d93ea42a389940036", @ANYRES32=r1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) unshare(0x22020600) pidfd_getfd(r5, r5, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x208000) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "13722f2d27fb9849ae6cb814915b2bb2e6c062f69f449ca4cbfd62c2c3b71e"}, 0x2a) 0s ago: executing program 5 (id=689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0xffffff01, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x7, 0xfffffffd}]}, 0x10) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x4000b, @empty}, 0x1c) listen(r4, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000001000010027bd7004ffdbdf2a00000000", @ANYRES32=r10, @ANYBLOB="104e0600016a030028001280110001006272696467655f736c6176650000000010000580050001000000000004001800"], 0x48}, 0x1, 0x0, 0x0, 0x400c080}, 0x8002) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x0) r12 = socket(0x8000000010, 0x2, 0x0) write(r12, &(0x7f00000008c0)="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", 0xfc) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) kernel console output (not intermixed with test programs): e_load } for pid=3988 comm="syz.3.181" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 46.307239][ T3994] loop3: detected capacity change from 0 to 512 [ 46.343891][ T3994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.356953][ T3994] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.368313][ T3994] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.502655][ T4015] hub 3-0:1.0: USB hub found [ 46.508989][ T4015] hub 3-0:1.0: 8 ports detected [ 46.537845][ T3990] syz.3.181 (3990) used greatest stack depth: 9896 bytes left [ 46.648687][ T4022] syz.3.191 (4022) used greatest stack depth: 9816 bytes left [ 46.668404][ T4030] netlink: 'syz.4.196': attribute type 10 has an invalid length. [ 46.682821][ T4030] team0: Port device dummy0 added [ 46.690740][ T4030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64784 sclass=netlink_route_socket pid=4030 comm=syz.4.196 [ 46.824494][ T4042] loop4: detected capacity change from 0 to 512 [ 46.846413][ T4042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.861994][ T4044] loop2: detected capacity change from 0 to 512 [ 46.864445][ T4042] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.885118][ T4042] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.900904][ T4044] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.203: invalid indirect mapped block 4294967295 (level 1) [ 46.950785][ T4044] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.203: invalid indirect mapped block 4294967295 (level 1) [ 46.970455][ T4051] loop1: detected capacity change from 0 to 512 [ 46.979113][ T4044] EXT4-fs (loop2): 2 truncates cleaned up [ 46.987369][ T4044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.011905][ T4051] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.204: inode #0: comm syz.1.204: iget: illegal inode # [ 47.038561][ T4051] EXT4-fs (loop1): get orphan inode failed [ 47.044496][ T4051] EXT4-fs (loop1): mount failed [ 47.108385][ T4062] netlink: 'syz.1.204': attribute type 7 has an invalid length. [ 47.108650][ T4059] __nla_validate_parse: 9 callbacks suppressed [ 47.108699][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 47.133305][ T4061] loop3: detected capacity change from 0 to 1024 [ 47.141477][ T4063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'. [ 47.142794][ T4061] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 47.174381][ T4059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.189802][ T4059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.720235][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.894221][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.921149][ T4089] capability: warning: `syz.4.220' uses deprecated v2 capabilities in a way that may be insecure [ 47.932206][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.949486][ T4089] program syz.4.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.955044][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.984663][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.135798][ T4100] 9p: Bad value for 'wfdno' [ 48.231029][ T4109] xt_NFQUEUE: number of total queues is 0 [ 48.618137][ T4098] loop0: detected capacity change from 0 to 512 [ 48.656297][ T4098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.740095][ T4098] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.751043][ T4130] loop3: detected capacity change from 0 to 512 [ 48.761656][ T4126] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 48.781222][ T4130] EXT4-fs: Ignoring removed orlov option [ 48.809227][ T4130] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.843796][ T4130] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 48.893525][ T4130] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.234: attempt to clear invalid blocks 2 len 1 [ 48.978527][ T4130] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 49.051716][ T4130] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.234: invalid indirect mapped block 1819239214 (level 0) [ 49.074966][ T4130] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.234: invalid indirect mapped block 1819239214 (level 1) [ 49.167338][ T4130] EXT4-fs (loop3): 1 truncate cleaned up [ 49.190703][ T4130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.239594][ T4130] FAULT_INJECTION: forcing a failure. [ 49.239594][ T4130] name failslab, interval 1, probability 0, space 0, times 0 [ 49.252344][ T4130] CPU: 0 UID: 0 PID: 4130 Comm: syz.3.234 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.252393][ T4130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.252410][ T4130] Call Trace: [ 49.252417][ T4130] [ 49.252424][ T4130] __dump_stack+0x1d/0x30 [ 49.252510][ T4130] dump_stack_lvl+0x95/0xd0 [ 49.252538][ T4130] dump_stack+0x15/0x1b [ 49.252563][ T4130] should_fail_ex+0x263/0x280 [ 49.252609][ T4130] should_failslab+0x8c/0xb0 [ 49.252778][ T4130] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 49.252809][ T4130] ? __d_alloc+0x37/0x340 [ 49.252844][ T4130] __d_alloc+0x37/0x340 [ 49.252897][ T4130] d_alloc_parallel+0x54/0xce0 [ 49.252945][ T4130] ? lockref_get_not_dead+0x120/0x1c0 [ 49.252974][ T4130] ? __rcu_read_unlock+0x4e/0x70 [ 49.253094][ T4130] ? try_to_unlazy+0x3c0/0x5b0 [ 49.253129][ T4130] __lookup_slow+0x96/0x260 [ 49.253167][ T4130] lookup_slow+0x3c/0x60 [ 49.253228][ T4130] path_lookupat+0x2f7/0x500 [ 49.253266][ T4130] filename_lookup+0x190/0x390 [ 49.253415][ T4130] user_path_at+0x3e/0x130 [ 49.253454][ T4130] user_statfs+0x4d/0x110 [ 49.253489][ T4130] __x64_sys_statfs+0x65/0xf0 [ 49.253591][ T4130] ? fput+0x8f/0xc0 [ 49.253626][ T4130] ? ksys_write+0x194/0x1a0 [ 49.253648][ T4130] x64_sys_call+0x283c/0x3000 [ 49.253757][ T4130] do_syscall_64+0xc0/0x2a0 [ 49.253801][ T4130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.253832][ T4130] RIP: 0033:0x7f63848eaeb9 [ 49.253873][ T4130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.253941][ T4130] RSP: 002b:00007f6383347028 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 49.253967][ T4130] RAX: ffffffffffffffda RBX: 00007f6384b65fa0 RCX: 00007f63848eaeb9 [ 49.253983][ T4130] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000200000000080 [ 49.254015][ T4130] RBP: 00007f6383347090 R08: 0000000000000000 R09: 0000000000000000 [ 49.254070][ T4130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.254087][ T4130] R13: 00007f6384b66038 R14: 00007f6384b65fa0 R15: 00007fff27e888d8 [ 49.254114][ T4130] [ 49.504909][ T4124] bond1: (slave veth3): Enslaving as an active interface with a down link [ 49.518477][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.532235][ T4124] bond1: entered promiscuous mode [ 49.537352][ T4124] bond1: entered allmulticast mode [ 49.612478][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 49.619047][ T4124] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.632091][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.687881][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.753933][ T4156] loop3: detected capacity change from 0 to 512 [ 50.181267][ T4166] veth0_vlan: left promiscuous mode [ 50.247054][ T4168] hub 3-0:1.0: USB hub found [ 50.254717][ T4168] hub 3-0:1.0: 8 ports detected [ 50.275730][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.425090][ T4154] loop1: detected capacity change from 0 to 512 [ 50.450455][ T4154] FAT-fs (loop1): Directory bread(block 199916) failed [ 50.458543][ T4154] FAT-fs (loop1): Directory bread(block 199917) failed [ 50.475792][ T4154] FAT-fs (loop1): Directory bread(block 199918) failed [ 50.479024][ T4176] 9p: Bad value for 'rfdno' [ 50.485626][ T4154] FAT-fs (loop1): Directory bread(block 199919) failed [ 50.500945][ T4154] FAT-fs (loop1): Directory bread(block 199920) failed [ 50.508569][ T4154] FAT-fs (loop1): Directory bread(block 199921) failed [ 50.516962][ T4154] FAT-fs (loop1): Directory bread(block 199922) failed [ 50.526098][ T4154] FAT-fs (loop1): Directory bread(block 199923) failed [ 50.621269][ T4181] loop2: detected capacity change from 0 to 512 [ 50.655174][ T4181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.925334][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.108859][ T4154] FAT-fs (loop1): FAT read failed (blocknr 128) [ 51.125062][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 51.125079][ T29] audit: type=1400 audit(1769878360.727:980): avc: denied { map_read map_write } for pid=4189 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.193515][ T4192] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.244180][ T4195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 51.259572][ T4192] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.319951][ T29] audit: type=1400 audit(1769878360.917:981): avc: denied { write } for pid=4193 comm="syz.1.259" lport=262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.369612][ T4192] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.416698][ T4192] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.439458][ T4204] loop3: detected capacity change from 0 to 1024 [ 51.452410][ T4204] EXT4-fs: Ignoring removed nobh option [ 51.491050][ T4204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.501168][ T29] audit: type=1400 audit(1769878361.087:982): avc: denied { lock } for pid=4207 comm="syz.1.264" path="socket:[8634]" dev="sockfs" ino=8634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 51.556824][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.571732][ T4210] hub 3-0:1.0: USB hub found [ 51.576817][ T4210] hub 3-0:1.0: 8 ports detected [ 51.582135][ T29] audit: type=1400 audit(1769878361.137:983): avc: denied { create } for pid=4203 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 51.613971][ T29] audit: type=1400 audit(1769878361.207:984): avc: denied { create } for pid=4211 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.650304][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.659049][ T29] audit: type=1400 audit(1769878361.217:985): avc: denied { create } for pid=4211 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 51.679217][ T29] audit: type=1400 audit(1769878361.227:986): avc: denied { shutdown } for pid=4211 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.762436][ T4218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.266'. [ 51.812861][ T4216] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 51.898787][ T29] audit: type=1400 audit(1769878361.487:987): avc: denied { write } for pid=4211 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 52.002222][ T4214] bond1: (slave veth3): Enslaving as an active interface with a down link [ 52.016484][ T4214] bond1: entered promiscuous mode [ 52.021586][ T4214] bond1: entered allmulticast mode [ 52.033699][ T4214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.165421][ T29] audit: type=1400 audit(1769878361.767:988): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 52.216634][ T29] audit: type=1400 audit(1769878361.817:989): avc: denied { read } for pid=4234 comm="syz.2.272" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.324072][ T4244] loop4: detected capacity change from 0 to 1024 [ 52.332830][ T4244] EXT4-fs: inline encryption not supported [ 52.349535][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.418809][ T4251] loop2: detected capacity change from 0 to 128 [ 52.435080][ T4251] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.453130][ T4251] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.458524][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.511268][ T4251] EXT4-fs error (device loop2): __ext4_new_inode:1073: comm syz.2.278: reserved inode found cleared - inode=2 [ 52.551249][ T3325] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.565169][ T4254] netlink: 'syz.4.279': attribute type 5 has an invalid length. [ 52.581209][ T3325] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.593310][ T3325] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.608878][ T3325] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.643924][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.693249][ T4267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.282'. [ 52.734001][ T4273] netlink: 108 bytes leftover after parsing attributes in process `syz.4.286'. [ 52.758846][ T4275] loop0: detected capacity change from 0 to 512 [ 52.771977][ T4275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.874833][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.929111][ T4290] loop0: detected capacity change from 0 to 512 [ 52.955369][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.968248][ T4290] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.991517][ T4293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 53.031761][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.153315][ T4304] loop1: detected capacity change from 0 to 512 [ 53.174510][ T4304] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #12: comm syz.1.299: corrupted in-inode xattr: bad e_name length [ 53.196184][ T4304] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.299: couldn't read orphan inode 12 (err -117) [ 53.226165][ T4304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.244404][ T4317] loop4: detected capacity change from 0 to 1024 [ 53.251957][ T4317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.264741][ T4304] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 53.267257][ T4315] loop0: detected capacity change from 0 to 8192 [ 53.271391][ T4304] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.285261][ T4304] vhci_hcd vhci_hcd.0: Device attached [ 53.292380][ T4317] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 53.301776][ T4317] System zones: 0-1, 3-36 [ 53.308629][ T4318] vhci_hcd: connection closed [ 53.309969][ T58] vhci_hcd vhci_hcd.1: stop threads [ 53.320012][ T58] vhci_hcd vhci_hcd.1: release socket [ 53.325446][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 53.335428][ T4317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.376615][ T3319] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.393872][ T3319] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 53.432234][ T3968] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.455043][ T4322] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 53.657112][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.728367][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.774746][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.818289][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.861749][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.925574][ T4363] loop2: detected capacity change from 0 to 512 [ 53.943051][ T58] bridge_slave_1: left allmulticast mode [ 53.943307][ T4363] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.321: inode #0: comm syz.2.321: iget: illegal inode # [ 53.949082][ T58] bridge_slave_1: left promiscuous mode [ 53.962427][ T4363] EXT4-fs (loop2): get orphan inode failed [ 53.967616][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.973703][ T4363] EXT4-fs (loop2): mount failed [ 53.997268][ T58] bridge_slave_0: left allmulticast mode [ 54.003189][ T58] bridge_slave_0: left promiscuous mode [ 54.008977][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.034664][ T4152] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 54.040927][ T3547] Bluetooth: hci0: command 0x1003 tx timeout [ 54.147376][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.157667][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.171728][ T58] bond0 (unregistering): Released all slaves [ 54.306093][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 54.424241][ T4392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.328'. [ 54.453884][ T4405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.329'. [ 54.474784][ T58] hsr_slave_0: left promiscuous mode [ 54.489267][ T58] hsr_slave_1: left promiscuous mode [ 54.500187][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.507802][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.544365][ T58] veth1_macvtap: left promiscuous mode [ 54.555165][ T58] veth0_macvtap: left promiscuous mode [ 54.560725][ T58] veth1_vlan: left promiscuous mode [ 54.568089][ T4397] hub 6-0:1.0: USB hub found [ 54.573092][ T4397] hub 6-0:1.0: 8 ports detected [ 54.579968][ T58] veth0_vlan: left promiscuous mode [ 54.647161][ T58] team0 (unregistering): Port device macvlan1 removed [ 54.651856][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.680365][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.680708][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.680898][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.692563][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.692827][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.693047][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.693292][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.693542][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.693701][ T4418] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 54.750123][ T58] team0 (unregistering): Port device team_slave_1 removed [ 54.804751][ T58] team0 (unregistering): Port device team_slave_0 removed [ 54.851996][ T58] team0 (unregistering): Port device dummy0 removed [ 54.861294][ T4417] loop2: detected capacity change from 0 to 512 [ 54.875558][ T4417] EXT4-fs: Ignoring removed orlov option [ 54.892106][ T4417] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.901990][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.909149][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.927378][ T4341] bridge_slave_0: entered allmulticast mode [ 54.941899][ T4341] bridge_slave_0: entered promiscuous mode [ 54.948513][ T4417] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 54.954318][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.963906][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.971709][ T4341] bridge_slave_1: entered allmulticast mode [ 54.978127][ T4417] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.333: attempt to clear invalid blocks 2 len 1 [ 54.979317][ T4341] bridge_slave_1: entered promiscuous mode [ 55.004935][ T4417] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 55.020735][ T4422] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.045467][ T4417] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.333: invalid indirect mapped block 1819239214 (level 0) [ 55.059524][ T4420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.333'. [ 55.072061][ T4417] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.333: invalid indirect mapped block 1819239214 (level 1) [ 55.081043][ T4422] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.096524][ T4417] EXT4-fs (loop2): 1 truncate cleaned up [ 55.130663][ T4417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.138757][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.152536][ T4417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.211285][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.227064][ T4436] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.240950][ T4435] hub 6-0:1.0: USB hub found [ 55.253765][ T4435] hub 6-0:1.0: 8 ports detected [ 55.288828][ T4436] EXT4-fs (loop3): 1 truncate cleaned up [ 55.295212][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.308935][ T4341] team0: Port device team_slave_0 added [ 55.370042][ T4341] team0: Port device team_slave_1 added [ 55.430186][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.476792][ T4436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4436 comm=syz.3.335 [ 55.502905][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.510048][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.536047][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.564958][ T4436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.593333][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.598662][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.609382][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.635340][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.662070][ T4470] netlink: 'syz.3.339': attribute type 10 has an invalid length. [ 55.670293][ T4467] EXT4-fs: inline encryption not supported [ 55.684954][ T4470] team0: Port device macvlan1 added [ 55.709424][ T4467] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.337: inode #13: comm syz.1.337: iget: illegal inode # [ 55.742127][ T4467] EXT4-fs (loop1): Remounting filesystem read-only [ 55.753462][ T4341] hsr_slave_0: entered promiscuous mode [ 55.760928][ T4467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.775008][ T4341] hsr_slave_1: entered promiscuous mode [ 55.781023][ T4341] debugfs: 'hsr0' already exists in 'hsr' [ 55.786911][ T4341] Cannot create hsr debugfs directory [ 55.942846][ T4341] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 55.955069][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.962203][ T4341] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 55.971378][ T4341] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 55.981163][ T4341] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.030691][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.046757][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.058655][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.065799][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.077192][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.084375][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.172133][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.253760][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 56.253805][ T29] audit: type=1400 audit(1769878365.847:1239): avc: denied { setopt } for pid=4521 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.311678][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.353402][ T4341] veth0_vlan: entered promiscuous mode [ 56.360533][ T4532] netlink: 'syz.1.346': attribute type 13 has an invalid length. [ 56.371190][ T29] audit: type=1326 audit(1769878365.967:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.394759][ T29] audit: type=1326 audit(1769878365.967:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.418314][ T29] audit: type=1326 audit(1769878365.967:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.442989][ T29] audit: type=1326 audit(1769878365.967:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.466682][ T29] audit: type=1326 audit(1769878365.967:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.490193][ T29] audit: type=1326 audit(1769878365.967:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.513610][ T29] audit: type=1326 audit(1769878365.967:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.537070][ T29] audit: type=1326 audit(1769878365.967:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.560397][ T29] audit: type=1326 audit(1769878365.967:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4529 comm="syz.2.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 56.628014][ T4341] veth1_vlan: entered promiscuous mode [ 56.649426][ T4341] veth0_macvtap: entered promiscuous mode [ 56.657566][ T4341] veth1_macvtap: entered promiscuous mode [ 56.670190][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.680146][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.693987][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.705495][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.714245][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.726797][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.885684][ T4547] veth0_to_team: Caught tx_queue_len zero misconfig [ 56.888656][ T4549] netlink: 'syz.5.352': attribute type 10 has an invalid length. [ 56.904469][ T4549] team0: Port device macvlan1 added [ 56.913833][ T4547] set_capacity_and_notify: 3 callbacks suppressed [ 56.913851][ T4547] loop1: detected capacity change from 0 to 1024 [ 56.932982][ T4547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.944258][ T4551] loop0: detected capacity change from 0 to 128 [ 56.965325][ T4547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.982357][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'. [ 56.992460][ T4551] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.995055][ T4555] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'. [ 57.012629][ T4551] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.041755][ T4555] netlink: 'syz.5.354': attribute type 21 has an invalid length. [ 57.049273][ T4551] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.353: reserved inode found cleared - inode=2 [ 57.053303][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz.5.354'. [ 57.118491][ T4563] tmpfs: Bad value for 'size' [ 57.145154][ T4547] syz.1.351 uses obsolete (PF_INET,SOCK_PACKET) [ 57.212405][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.282332][ T4567] loop2: detected capacity change from 0 to 512 [ 57.293159][ T4567] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.312538][ T4567] EXT4-fs (loop2): 1 truncate cleaned up [ 57.323118][ T4567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.478222][ T4582] loop0: detected capacity change from 0 to 512 [ 57.538628][ T4582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.563650][ T4582] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.645492][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.683817][ T4587] xt_NFQUEUE: number of total queues is 0 [ 57.723850][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.744232][ T4590] ip6gre0: Caught tx_queue_len zero misconfig [ 57.813631][ T4596] loop1: detected capacity change from 0 to 512 [ 57.820806][ T4596] EXT4-fs: Ignoring removed oldalloc option [ 57.828381][ T4596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.840751][ T4596] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #11: comm syz.1.366: corrupted in-inode xattr: invalid ea_ino [ 57.854578][ T4596] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.366: couldn't read orphan inode 11 (err -117) [ 57.867212][ T4596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.882078][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 57.961057][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.987222][ T4599] loop1: detected capacity change from 0 to 512 [ 58.009079][ T4599] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.367: inode has both inline data and extents flags [ 58.023249][ T4599] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.367: couldn't read orphan inode 15 (err -117) [ 58.038018][ T4599] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.038761][ T4152] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.057076][ T4599] netlink: 56 bytes leftover after parsing attributes in process `syz.1.367'. [ 58.089410][ T4599] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 58.106934][ T4603] loop3: detected capacity change from 0 to 512 [ 58.117598][ T4603] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.368: inode #0: comm syz.3.368: iget: illegal inode # [ 58.132584][ T4603] EXT4-fs (loop3): get orphan inode failed [ 58.138986][ T4603] EXT4-fs (loop3): mount failed [ 58.146579][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.191451][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.283555][ T4612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 58.322093][ T4619] loop0: detected capacity change from 0 to 128 [ 58.345280][ T4619] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.359840][ T4619] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 58.393277][ T4619] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.374: reserved inode found cleared - inode=2 [ 58.425058][ T4624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'. [ 58.484722][ T4624] bond0: Caught tx_queue_len zero misconfig [ 58.537955][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.609317][ T4632] loop1: detected capacity change from 0 to 256 [ 58.638840][ T4632] FAT-fs (loop1): Directory bread(block 64) failed [ 58.645719][ T4632] FAT-fs (loop1): Directory bread(block 65) failed [ 58.653246][ T4632] FAT-fs (loop1): Directory bread(block 66) failed [ 58.660163][ T4632] FAT-fs (loop1): Directory bread(block 67) failed [ 58.667028][ T4632] FAT-fs (loop1): Directory bread(block 68) failed [ 58.673812][ T4632] FAT-fs (loop1): Directory bread(block 69) failed [ 58.680705][ T4632] FAT-fs (loop1): Directory bread(block 70) failed [ 58.690120][ T4632] FAT-fs (loop1): Directory bread(block 71) failed [ 58.697626][ T4632] FAT-fs (loop1): Directory bread(block 72) failed [ 58.704261][ T4632] FAT-fs (loop1): Directory bread(block 73) failed [ 58.888647][ T4639] netlink: 'syz.1.380': attribute type 83 has an invalid length. [ 58.996884][ T4644] FAULT_INJECTION: forcing a failure. [ 58.996884][ T4644] name failslab, interval 1, probability 0, space 0, times 0 [ 59.009604][ T4644] CPU: 0 UID: 0 PID: 4644 Comm: syz.5.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.009707][ T4644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.009723][ T4644] Call Trace: [ 59.009731][ T4644] [ 59.009743][ T4644] __dump_stack+0x1d/0x30 [ 59.009797][ T4644] dump_stack_lvl+0x95/0xd0 [ 59.009840][ T4644] dump_stack+0x15/0x1b [ 59.009893][ T4644] should_fail_ex+0x263/0x280 [ 59.009931][ T4644] should_failslab+0x8c/0xb0 [ 59.009961][ T4644] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 59.010025][ T4644] ? __alloc_skb+0x2f0/0x4b0 [ 59.010153][ T4644] __alloc_skb+0x2f0/0x4b0 [ 59.010182][ T4644] ? __alloc_skb+0x219/0x4b0 [ 59.010212][ T4644] audit_log_start+0x3aa/0x730 [ 59.010250][ T4644] ? kstrtouint+0x76/0xc0 [ 59.010345][ T4644] audit_seccomp+0x47/0x100 [ 59.010378][ T4644] ? __seccomp_filter+0x8db/0x1350 [ 59.010399][ T4644] __seccomp_filter+0x8ec/0x1350 [ 59.010442][ T4644] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 59.010478][ T4644] ? vfs_write+0x86e/0x9f0 [ 59.010529][ T4644] __secure_computing+0x81/0x150 [ 59.010556][ T4644] syscall_trace_enter+0xce/0x1e0 [ 59.010603][ T4644] do_syscall_64+0x9a/0x2a0 [ 59.010697][ T4644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.010727][ T4644] RIP: 0033:0x7f237681aeb9 [ 59.010748][ T4644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.010773][ T4644] RSP: 002b:00007f2375277028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.010794][ T4644] RAX: ffffffffffffffda RBX: 00007f2376a95fa0 RCX: 00007f237681aeb9 [ 59.010809][ T4644] RDX: 0000000020000000 RSI: 0000200000000a80 RDI: 0000000000000007 [ 59.010891][ T4644] RBP: 00007f2375277090 R08: 0000000000000000 R09: 0000000000000000 [ 59.010972][ T4644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.010989][ T4644] R13: 00007f2376a96038 R14: 00007f2376a95fa0 R15: 00007ffd570822f8 [ 59.011016][ T4644] [ 59.011288][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 59.031494][ T4646] hub 3-0:1.0: USB hub found [ 59.035008][ T4644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.382'. [ 59.046226][ T4646] hub 3-0:1.0: 8 ports detected [ 59.046732][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 59.254686][ T4644] netlink: 36 bytes leftover after parsing attributes in process `syz.5.382'. [ 59.275973][ T4648] netlink: 104 bytes leftover after parsing attributes in process `syz.5.382'. [ 59.363881][ T4653] hub 3-0:1.0: USB hub found [ 59.369078][ T4653] hub 3-0:1.0: 8 ports detected [ 59.383757][ T4656] loop3: detected capacity change from 0 to 512 [ 59.397699][ T4656] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.385: inode #0: comm syz.3.385: iget: illegal inode # [ 59.421908][ T4656] EXT4-fs (loop3): get orphan inode failed [ 59.428081][ T4656] EXT4-fs (loop3): mount failed [ 59.438591][ T4661] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.475988][ T4661] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.387: reserved inode found cleared - inode=2 [ 59.518341][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.5.388'. [ 59.656008][ T4675] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 59.714581][ T3547] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 59.715068][ T4152] Bluetooth: hci1: command 0x1003 tx timeout [ 59.800092][ T4685] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.876374][ T4685] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.896722][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 59.906835][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 59.906868][ T4692] EXT4-fs (loop3): orphan cleanup on readonly fs [ 59.928532][ T4692] EXT4-fs error (device loop3): ext4_quota_enable:7177: comm syz.3.400: inode #218103808: comm syz.3.400: iget: illegal inode # [ 59.942580][ T4692] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.400: Bad quota inode: 218103808, type: 2 [ 59.955723][ T4692] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 59.957372][ T4685] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.984852][ T4692] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 60.023387][ T4699] lo speed is unknown, defaulting to 1000 [ 60.029546][ T4699] lo speed is unknown, defaulting to 1000 [ 60.036048][ T4699] lo speed is unknown, defaulting to 1000 [ 60.042509][ T4699] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 60.043293][ T4685] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.051182][ T4699] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 60.074663][ T4699] lo speed is unknown, defaulting to 1000 [ 60.082243][ T4699] lo speed is unknown, defaulting to 1000 [ 60.089178][ T4699] lo speed is unknown, defaulting to 1000 [ 60.095887][ T4699] lo speed is unknown, defaulting to 1000 [ 60.100676][ T4701] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.402: inode #0: comm syz.3.402: iget: illegal inode # [ 60.102632][ T4699] lo speed is unknown, defaulting to 1000 [ 60.131269][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.134881][ T4702] smc: removing ib device syz1 [ 60.141755][ T4701] EXT4-fs (loop3): get orphan inode failed [ 60.150297][ T4701] EXT4-fs (loop3): mount failed [ 60.157141][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.176945][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.193482][ T4701] lo speed is unknown, defaulting to 1000 [ 60.199558][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.223831][ T4699] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.422407][ T4725] xt_NFQUEUE: number of total queues is 0 [ 60.452437][ T3459] Bluetooth: hci1: Frame reassembly failed (-84) [ 60.472348][ T4728] @˙: renamed from bond_slave_0 (while UP) [ 60.512643][ T4730] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.569629][ T4730] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.582823][ T4732] lo speed is unknown, defaulting to 1000 [ 60.656753][ T4730] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.675058][ T4588] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.683353][ T4743] netlink: 'syz.5.415': attribute type 10 has an invalid length. [ 60.717065][ T4730] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.760636][ T4732] lo speed is unknown, defaulting to 1000 [ 60.776406][ T4749] FAULT_INJECTION: forcing a failure. [ 60.776406][ T4749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.789555][ T4749] CPU: 0 UID: 0 PID: 4749 Comm: syz.5.418 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.789598][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.789615][ T4749] Call Trace: [ 60.789624][ T4749] [ 60.789635][ T4749] __dump_stack+0x1d/0x30 [ 60.789696][ T4749] dump_stack_lvl+0x95/0xd0 [ 60.789724][ T4749] dump_stack+0x15/0x1b [ 60.789801][ T4749] should_fail_ex+0x263/0x280 [ 60.789838][ T4749] should_fail+0xb/0x20 [ 60.789885][ T4749] should_fail_usercopy+0x1a/0x20 [ 60.789924][ T4749] _copy_to_user+0x20/0xa0 [ 60.789945][ T4749] simple_read_from_buffer+0xb5/0x130 [ 60.790018][ T4749] proc_fail_nth_read+0x10e/0x150 [ 60.790055][ T4749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.790086][ T4749] vfs_read+0x1ab/0x7f0 [ 60.790130][ T4749] ? __rcu_read_unlock+0x4e/0x70 [ 60.790198][ T4749] ? __fget_files+0x184/0x1c0 [ 60.790229][ T4749] ? do_mlock+0x4c7/0x520 [ 60.790259][ T4749] ? mutex_lock+0x57/0x90 [ 60.790361][ T4749] ksys_read+0xdc/0x1a0 [ 60.790383][ T4749] __x64_sys_read+0x40/0x50 [ 60.790478][ T4749] x64_sys_call+0x2889/0x3000 [ 60.790515][ T4749] do_syscall_64+0xc0/0x2a0 [ 60.790606][ T4749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.790646][ T4749] RIP: 0033:0x7f23767db78e [ 60.790664][ T4749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 60.790686][ T4749] RSP: 002b:00007f2375276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.790766][ T4749] RAX: ffffffffffffffda RBX: 00007f23752776c0 RCX: 00007f23767db78e [ 60.790782][ T4749] RDX: 000000000000000f RSI: 00007f23752770a0 RDI: 0000000000000003 [ 60.790799][ T4749] RBP: 00007f2375277090 R08: 0000000000000000 R09: 0000000000000000 [ 60.790816][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.790833][ T4749] R13: 00007f2376a96038 R14: 00007f2376a95fa0 R15: 00007ffd570822f8 [ 60.790859][ T4749] [ 61.201455][ T4757] FAT-fs (loop5): bogus sectors per cluster 0 [ 61.207741][ T4757] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 61.217305][ T4757] FAT-fs (loop5): Can't find a valid FAT filesystem [ 61.224447][ T4755] bridge_slave_0: left allmulticast mode [ 61.230215][ T4755] bridge_slave_0: left promiscuous mode [ 61.236121][ T4755] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.254777][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 61.254792][ T29] audit: type=1400 audit(1769878370.777:1459): avc: denied { ioctl } for pid=4756 comm="syz.5.420" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.285797][ T29] audit: type=1400 audit(1769878370.777:1460): avc: denied { mount } for pid=4754 comm="syz.1.419" name="/" dev="ramfs" ino=10866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 61.316875][ T4759] EXT4-fs: Ignoring removed bh option [ 61.322653][ T4759] EXT4-fs: inline encryption not supported [ 61.332040][ T4759] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.336097][ T29] audit: type=1400 audit(1769878370.927:1461): avc: denied { write } for pid=4761 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.383980][ T4759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 61.403463][ T4759] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.419: lblock 2 mapped to illegal pblock 2 (length 1) [ 61.419058][ T4766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.426078][ T4759] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 61.435407][ T4759] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.419: lblock 0 mapped to illegal pblock 48 (length 1) [ 61.450082][ T4759] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 61.459021][ T4759] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.419: Failed to acquire dquot type 0 [ 61.471579][ T4759] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.484664][ T4769] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.517250][ T4759] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.419: mark_inode_dirty error [ 61.533322][ T4759] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 61.544152][ T4759] EXT4-fs (loop1): 1 orphan inode deleted [ 61.559284][ T12] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.575397][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 61.583863][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 61.596498][ T4755] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm syz.1.419: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.613592][ T4755] Quota error (device loop1): find_next_id: Can't read quota tree block 1 [ 61.650605][ T4774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.664816][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 61.708188][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 61.723024][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 61.761726][ T4782] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.427: iget: immutable or append flags not allowed on symlinks [ 61.786166][ T29] audit: type=1400 audit(1769878371.387:1462): avc: denied { bind } for pid=4786 comm="syz.1.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 61.824694][ T4782] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.427: couldn't read orphan inode 17 (err -117) [ 61.852949][ T29] audit: type=1326 audit(1769878371.447:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577e33aeb9 code=0x7ffc0000 [ 61.876638][ T29] audit: type=1326 audit(1769878371.447:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.1.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f577e33aeb9 code=0x7ffc0000 [ 62.153593][ T4812] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 62.161089][ T4812] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 62.274103][ T4824] mmap: syz.5.434 (4824) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.305194][ T4823] sctp_transport_update_pmtu: 103 callbacks suppressed [ 62.305215][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.322656][ T4809] set_capacity_and_notify: 11 callbacks suppressed [ 62.322670][ T4809] loop5: detected capacity change from 0 to 512 [ 62.336140][ T4827] syzkaller0: entered promiscuous mode [ 62.341679][ T4827] syzkaller0: entered allmulticast mode [ 62.346893][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.365803][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.376763][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.388131][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.398857][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.409886][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.420502][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.428271][ T4828] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.441' sets config #1 [ 62.431868][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.450483][ T4823] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 62.515193][ T4152] Bluetooth: hci1: command 0x1003 tx timeout [ 62.521328][ T3547] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 62.566561][ T4833] loop3: detected capacity change from 0 to 512 [ 62.818848][ T4854] loop3: detected capacity change from 0 to 128 [ 62.868751][ T4860] bond_slave_0: entered promiscuous mode [ 62.874451][ T4860] bond_slave_1: entered promiscuous mode [ 62.890539][ T4862] loop5: detected capacity change from 0 to 1024 [ 62.897647][ T4862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.013509][ T4873] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 63.042665][ T4875] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 63.052608][ T4875] bridge1: entered promiscuous mode [ 63.177226][ T4879] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 63.202405][ T4881] __nla_validate_parse: 18 callbacks suppressed [ 63.202438][ T4881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 63.513061][ T4890] loop5: detected capacity change from 0 to 1024 [ 63.520431][ T4890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.618980][ T4894] FAULT_INJECTION: forcing a failure. [ 63.618980][ T4894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.632282][ T4894] CPU: 0 UID: 0 PID: 4894 Comm: syz.5.466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.632318][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.632335][ T4894] Call Trace: [ 63.632380][ T4894] [ 63.632390][ T4894] __dump_stack+0x1d/0x30 [ 63.632421][ T4894] dump_stack_lvl+0x95/0xd0 [ 63.632507][ T4894] dump_stack+0x15/0x1b [ 63.632533][ T4894] should_fail_ex+0x263/0x280 [ 63.632571][ T4894] should_fail+0xb/0x20 [ 63.632609][ T4894] should_fail_usercopy+0x1a/0x20 [ 63.632715][ T4894] _copy_to_user+0x20/0xa0 [ 63.632859][ T4894] simple_read_from_buffer+0xb5/0x130 [ 63.632901][ T4894] proc_fail_nth_read+0x10e/0x150 [ 63.632981][ T4894] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.633057][ T4894] vfs_read+0x1ab/0x7f0 [ 63.633080][ T4894] ? __rcu_read_unlock+0x4e/0x70 [ 63.633118][ T4894] ? __fget_files+0x184/0x1c0 [ 63.633211][ T4894] ? mutex_lock+0x57/0x90 [ 63.633242][ T4894] ksys_read+0xdc/0x1a0 [ 63.633335][ T4894] __x64_sys_read+0x40/0x50 [ 63.633436][ T4894] x64_sys_call+0x2889/0x3000 [ 63.633471][ T4894] do_syscall_64+0xc0/0x2a0 [ 63.633529][ T4894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.633553][ T4894] RIP: 0033:0x7f23767db78e [ 63.633569][ T4894] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 63.633647][ T4894] RSP: 002b:00007f2375276fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.633672][ T4894] RAX: ffffffffffffffda RBX: 00007f23752776c0 RCX: 00007f23767db78e [ 63.633691][ T4894] RDX: 000000000000000f RSI: 00007f23752770a0 RDI: 0000000000000005 [ 63.633704][ T4894] RBP: 00007f2375277090 R08: 0000000000000000 R09: 0000000000000000 [ 63.633717][ T4894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.633795][ T4894] R13: 00007f2376a96038 R14: 00007f2376a95fa0 R15: 00007ffd570822f8 [ 63.633814][ T4894] [ 63.831811][ T4902] loop3: detected capacity change from 0 to 256 [ 63.844772][ T4896] loop1: detected capacity change from 0 to 128 [ 63.861645][ T4896] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.862710][ T4896] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.468: reserved inode found cleared - inode=2 [ 63.986055][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 63.986313][ T4913] FAULT_INJECTION: forcing a failure. [ 63.986313][ T4913] name failslab, interval 1, probability 0, space 0, times 0 [ 63.998337][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 64.007858][ T4913] CPU: 0 UID: 0 PID: 4913 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.008019][ T4913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.008066][ T4913] Call Trace: [ 64.008095][ T4913] [ 64.008118][ T4913] __dump_stack+0x1d/0x30 [ 64.008198][ T4913] dump_stack_lvl+0x95/0xd0 [ 64.008264][ T4913] dump_stack+0x15/0x1b [ 64.008398][ T4913] should_fail_ex+0x263/0x280 [ 64.008487][ T4913] should_failslab+0x8c/0xb0 [ 64.008552][ T4913] __kmalloc_noprof+0xb8/0x580 [ 64.008711][ T4913] ? do_handle_open+0x3a9/0x790 [ 64.008781][ T4913] do_handle_open+0x3a9/0x790 [ 64.008873][ T4913] __x64_sys_open_by_handle_at+0x44/0x50 [ 64.008987][ T4913] x64_sys_call+0x2b6a/0x3000 [ 64.009097][ T4913] do_syscall_64+0xc0/0x2a0 [ 64.009204][ T4913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.009321][ T4913] RIP: 0033:0x7f577e33aeb9 [ 64.009376][ T4913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.009453][ T4913] RSP: 002b:00007f577cd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 64.009532][ T4913] RAX: ffffffffffffffda RBX: 00007f577e5b5fa0 RCX: 00007f577e33aeb9 [ 64.009576][ T4913] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 64.009618][ T4913] RBP: 00007f577cd97090 R08: 0000000000000000 R09: 0000000000000000 [ 64.009662][ T4913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.009704][ T4913] R13: 00007f577e5b6038 R14: 00007f577e5b5fa0 R15: 00007fff1dd088b8 [ 64.009779][ T4913] [ 64.177766][ T4911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.471'. [ 64.187405][ T4917] loop0: detected capacity change from 0 to 512 [ 64.204837][ T4917] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.211281][ T4917] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 64.224985][ T4917] EXT4-fs (loop0): 1 truncate cleaned up [ 64.258254][ T4924] loop1: detected capacity change from 0 to 1024 [ 64.267850][ T4924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.285951][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.296810][ T4917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.475'. [ 64.305828][ T4917] netlink: 'syz.0.475': attribute type 7 has an invalid length. [ 64.313508][ T4917] netlink: 'syz.0.475': attribute type 8 has an invalid length. [ 64.321212][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 64.330407][ T3459] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.344370][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.356902][ T3459] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.385668][ T4929] loop5: detected capacity change from 0 to 128 [ 64.432644][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 64.502508][ T4938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.563613][ T4938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.576318][ T4942] EXT4-fs error (device loop2): ext4_quota_enable:7177: inode #3: comm syz.2.483: iget: bad extended attribute block 5 [ 64.601270][ T4942] EXT4-fs error (device loop2): ext4_quota_enable:7180: comm syz.2.483: Bad quota inode: 3, type: 0 [ 64.644407][ T4943] ip_vti0: entered promiscuous mode [ 64.660556][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 64.666579][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 64.670822][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.486'. [ 64.687454][ T4942] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 64.687918][ T4942] EXT4-fs (loop2): mount failed [ 64.805072][ T4958] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.489: inode #0: comm syz.2.489: iget: illegal inode # [ 64.830123][ T4964] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.840064][ T4964] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 64.841585][ T4958] EXT4-fs (loop2): get orphan inode failed [ 64.850462][ T4964] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.865824][ T4964] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.488: iget: special inode unallocated [ 64.879220][ T4964] EXT4-fs (loop3): no journal found [ 64.884486][ T4964] EXT4-fs (loop3): can't get journal size [ 64.892106][ T4958] EXT4-fs (loop2): mount failed [ 64.902362][ T4964] FAULT_INJECTION: forcing a failure. [ 64.902362][ T4964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.915518][ T4964] CPU: 1 UID: 0 PID: 4964 Comm: syz.3.488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.915545][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.915622][ T4964] Call Trace: [ 64.915631][ T4964] [ 64.915641][ T4964] __dump_stack+0x1d/0x30 [ 64.915672][ T4964] dump_stack_lvl+0x95/0xd0 [ 64.915693][ T4964] dump_stack+0x15/0x1b [ 64.915716][ T4964] should_fail_ex+0x263/0x280 [ 64.915768][ T4964] should_fail+0xb/0x20 [ 64.915801][ T4964] should_fail_usercopy+0x1a/0x20 [ 64.915834][ T4964] _copy_from_user+0x1c/0xb0 [ 64.915854][ T4964] ___sys_sendmsg+0xc1/0x1e0 [ 64.915895][ T4964] __x64_sys_sendmsg+0xd4/0x160 [ 64.915978][ T4964] x64_sys_call+0x17ba/0x3000 [ 64.916012][ T4964] do_syscall_64+0xc0/0x2a0 [ 64.916053][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.916115][ T4964] RIP: 0033:0x7f63848eaeb9 [ 64.916135][ T4964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.916158][ T4964] RSP: 002b:00007f6383326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.916181][ T4964] RAX: ffffffffffffffda RBX: 00007f6384b66090 RCX: 00007f63848eaeb9 [ 64.916195][ T4964] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 000000000000000b [ 64.916231][ T4964] RBP: 00007f6383326090 R08: 0000000000000000 R09: 0000000000000000 [ 64.916253][ T4964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.916270][ T4964] R13: 00007f6384b66128 R14: 00007f6384b66090 R15: 00007fff27e888d8 [ 64.916296][ T4964] [ 65.099612][ T4971] lo speed is unknown, defaulting to 1000 [ 65.145315][ T4974] EXT4-fs: Ignoring removed i_version option [ 65.151451][ T4974] EXT4-fs: Ignoring removed bh option [ 65.215104][ T4974] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.242935][ T4974] EXT4-fs error (device loop0): ext4_resize_begin:60: comm syz.0.494: resize_inode disabled but reserved GDT blocks non-zero [ 65.466661][ T4994] iso9660: Unknown parameter '~NÜ' [ 65.485932][ T5000] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 65.514343][ T5000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.565384][ T3517] udevd[3517]: incorrect ext4 checksum on /dev/loop2 [ 65.588309][ T5006] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 65.665360][ T5009] netlink: 'syz.5.506': attribute type 10 has an invalid length. [ 65.738227][ T5013] ------------[ cut here ]------------ [ 65.743819][ T5013] EA inode 11 i_nlink=0 [ 65.743842][ T5013] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.2.508/5013 [ 65.758882][ T5013] Modules linked in: [ 65.762908][ T5013] CPU: 0 UID: 0 PID: 5013 Comm: syz.2.508 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.772656][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.782941][ T5013] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 65.789853][ T5013] Code: 74 e6 9a ff 4c 8d 2d cd 21 3e 05 49 8d 7e 40 e8 84 d0 b6 ff 49 8b 6e 40 4c 89 e7 e8 b8 cb b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 ef e1 d0 03 66 66 66 66 66 66 2e [ 65.809583][ T5013] RSP: 0018:ffffc90000ed35a8 EFLAGS: 00010246 [ 65.815724][ T5013] RAX: ffff88811b539b10 RBX: ffff88811ac55348 RCX: ffffffff81be1958 [ 65.823800][ T5013] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff86fc3b10 [ 65.831842][ T5013] RBP: 000000000000000b R08: 000188811ac552fb R09: 0000000000000000 [ 65.839962][ T5013] R10: ffffc90000ed34d8 R11: 0001c90000ed34d8 R12: ffff88811ac552f8 [ 65.848037][ T5013] R13: ffffffff86fc3b10 R14: ffff88811ac552b0 R15: 0000000000000001 [ 65.856088][ T5013] FS: 00007f0b1a9e76c0(0000) GS:ffff8882aeb57000(0000) knlGS:0000000000000000 [ 65.865098][ T5013] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.871816][ T5013] CR2: 00007f23775c8060 CR3: 000000011cfca000 CR4: 00000000003506f0 [ 65.879911][ T5013] Call Trace: [ 65.883230][ T5013] [ 65.886302][ T5013] ext4_xattr_set_entry+0x77c/0x1010 [ 65.891663][ T5013] ext4_xattr_ibody_set+0x184/0x3c0 [ 65.896958][ T5013] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 65.902833][ T5013] __ext4_expand_extra_isize+0x246/0x280 [ 65.908573][ T5013] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 65.914183][ T5013] ext4_evict_inode+0x7c3/0xd40 [ 65.919154][ T5013] ? __pfx_ext4_evict_inode+0x10/0x10 [ 65.924628][ T5013] evict+0x2af/0x510 [ 65.928603][ T5013] ? __dquot_initialize+0x146/0x7c0 [ 65.933928][ T5013] iput+0x4b9/0x650 [ 65.937814][ T5013] ext4_process_orphan+0x1a9/0x1c0 [ 65.943209][ T5013] ext4_orphan_cleanup+0x6a8/0xa00 [ 65.948416][ T5013] ext4_fill_super+0x3476/0x3800 [ 65.953429][ T5013] ? set_blocksize+0x1a3/0x310 [ 65.958286][ T5013] ? setup_bdev_super+0x30e/0x370 [ 65.963359][ T5013] ? __pfx_ext4_fill_super+0x10/0x10 [ 65.968713][ T5013] get_tree_bdev_flags+0x291/0x300 [ 65.973954][ T5013] ? __pfx_ext4_fill_super+0x10/0x10 [ 65.979387][ T5013] get_tree_bdev+0x1f/0x30 [ 65.984168][ T5013] ext4_get_tree+0x1c/0x30 [ 65.988711][ T5013] vfs_get_tree+0x57/0x1d0 [ 65.993361][ T5013] do_new_mount+0x288/0x700 [ 65.997957][ T5013] path_mount+0x4d0/0xbc0 [ 66.002345][ T5013] ? user_path_at+0xbf/0x130 [ 66.007190][ T5013] __se_sys_mount+0x28c/0x2e0 [ 66.011964][ T5013] __x64_sys_mount+0x67/0x80 [ 66.016667][ T5013] x64_sys_call+0x2cca/0x3000 [ 66.021479][ T5013] do_syscall_64+0xc0/0x2a0 [ 66.026066][ T5013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.032014][ T5013] RIP: 0033:0x7f0b1bf8c14a [ 66.036494][ T5013] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.056185][ T5013] RSP: 002b:00007f0b1a9e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.064683][ T5013] RAX: ffffffffffffffda RBX: 00007f0b1a9e6ee0 RCX: 00007f0b1bf8c14a [ 66.072718][ T5013] RDX: 0000200000000000 RSI: 00002000000001c0 RDI: 00007f0b1a9e6ea0 [ 66.080761][ T5013] RBP: 0000200000000000 R08: 00007f0b1a9e6ee0 R09: 0000000000800700 [ 66.088873][ T5013] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 66.096915][ T5013] R13: 00007f0b1a9e6ea0 R14: 000000000000046f R15: 00002000000007c0 [ 66.105006][ T5013] [ 66.108197][ T5013] ---[ end trace 0000000000000000 ]--- [ 66.119343][ T5022] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.509: inode #0: comm syz.3.509: iget: illegal inode # [ 66.126818][ T5013] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.508: bit already cleared for inode 11 [ 66.149023][ T5013] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 66.169994][ T5013] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 66.178791][ T5022] EXT4-fs (loop3): get orphan inode failed [ 66.185020][ T5022] EXT4-fs (loop3): mount failed [ 66.185019][ T5013] EXT4-fs (loop2): 1 orphan inode deleted [ 66.210163][ T5013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.236737][ T5013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.255548][ T5033] FAT-fs (loop5): bogus number of reserved sectors [ 66.262127][ T5033] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 66.271604][ T5033] FAT-fs (loop5): Can't find a valid FAT filesystem [ 66.279793][ T5022] lo speed is unknown, defaulting to 1000 [ 66.438167][ T5048] ip6t_rpfilter: unknown options [ 66.515316][ T29] kauditd_printk_skb: 335 callbacks suppressed [ 66.515336][ T29] audit: type=1400 audit(1769878376.097:1800): avc: denied { getopt } for pid=5049 comm="syz.3.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 66.825565][ T5077] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5077 comm=syz.2.517 [ 66.958349][ T5129] netlink: 'syz.2.518': attribute type 21 has an invalid length. [ 67.032880][ T29] audit: type=1400 audit(1769878376.627:1801): avc: denied { bind } for pid=5098 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.078423][ T5134] netlink: 'syz.0.520': attribute type 10 has an invalid length. [ 67.118244][ T29] audit: type=1326 audit(1769878376.697:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.141840][ T29] audit: type=1326 audit(1769878376.697:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.165225][ T29] audit: type=1326 audit(1769878376.697:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.188503][ T29] audit: type=1326 audit(1769878376.697:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.211863][ T29] audit: type=1326 audit(1769878376.697:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.235250][ T29] audit: type=1326 audit(1769878376.697:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.258668][ T29] audit: type=1326 audit(1769878376.697:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.282045][ T29] audit: type=1326 audit(1769878376.697:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b1bf8aeb9 code=0x7ffc0000 [ 67.343664][ T5143] set_capacity_and_notify: 10 callbacks suppressed [ 67.343685][ T5143] loop0: detected capacity change from 0 to 128 [ 67.373790][ T5147] nfs4: Unknown parameter 'PL' [ 67.420973][ T5152] loop2: detected capacity change from 0 to 164 [ 67.456846][ T5143] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 67.506246][ T5143] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.523: reserved inode found cleared - inode=2 [ 67.612083][ T5164] loop3: detected capacity change from 0 to 2048 [ 67.769501][ T5187] xt_NFQUEUE: number of total queues is 0 [ 67.798289][ T4152] Bluetooth: hci0: sending frame failed (-49) [ 67.810742][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 68.422947][ T5238] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 68.542179][ T5252] FAULT_INJECTION: forcing a failure. [ 68.542179][ T5252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.555473][ T5252] CPU: 1 UID: 0 PID: 5252 Comm: syz.0.551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.555560][ T5252] Tainted: [W]=WARN [ 68.555570][ T5252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.555587][ T5252] Call Trace: [ 68.555596][ T5252] [ 68.555662][ T5252] __dump_stack+0x1d/0x30 [ 68.555704][ T5252] dump_stack_lvl+0x95/0xd0 [ 68.555734][ T5252] dump_stack+0x15/0x1b [ 68.555761][ T5252] should_fail_ex+0x263/0x280 [ 68.555877][ T5252] should_fail+0xb/0x20 [ 68.555913][ T5252] should_fail_usercopy+0x1a/0x20 [ 68.555953][ T5252] _copy_from_user+0x1c/0xb0 [ 68.556032][ T5252] do_sock_getsockopt+0xf1/0x210 [ 68.556081][ T5252] __x64_sys_getsockopt+0x11d/0x1a0 [ 68.556130][ T5252] x64_sys_call+0x2dc7/0x3000 [ 68.556213][ T5252] do_syscall_64+0xc0/0x2a0 [ 68.556253][ T5252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.556276][ T5252] RIP: 0033:0x7f6b5e2baeb9 [ 68.556292][ T5252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.556341][ T5252] RSP: 002b:00007f6b5cd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.556369][ T5252] RAX: ffffffffffffffda RBX: 00007f6b5e535fa0 RCX: 00007f6b5e2baeb9 [ 68.556389][ T5252] RDX: 0000000000000089 RSI: 000000000000010f RDI: 0000000000000003 [ 68.556406][ T5252] RBP: 00007f6b5cd17090 R08: 0000200000000040 R09: 0000000000000000 [ 68.556424][ T5252] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.556441][ T5252] R13: 00007f6b5e536038 R14: 00007f6b5e535fa0 R15: 00007ffe4a0e1728 [ 68.556468][ T5252] [ 68.739560][ T5257] loop2: detected capacity change from 0 to 512 [ 68.777055][ T5257] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 68.798957][ T5262] __nla_validate_parse: 11 callbacks suppressed [ 68.798979][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 68.814275][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 68.857825][ T5262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 68.866716][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.554'. [ 68.871079][ T5264] loop0: detected capacity change from 0 to 1024 [ 68.931319][ T5264] EXT4-fs: Ignoring removed orlov option [ 68.975634][ T5264] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.555: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 69.042369][ T5264] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.555: Bad quota inode: 4, type: 1 [ 69.075109][ T5264] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.097758][ T5277] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 69.120171][ T5264] EXT4-fs (loop0): mount failed [ 69.189608][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 69.242860][ T5285] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.292408][ T5294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.563'. [ 69.309991][ T5285] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.409825][ T5300] loop0: detected capacity change from 0 to 1024 [ 69.423550][ T5300] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.445826][ T5285] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.499312][ T5285] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.529064][ T3312] EXT4-fs unmount: 39 callbacks suppressed [ 69.529133][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.578460][ T3340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.598484][ T3340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.618655][ T3340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.635250][ T3340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.696817][ T5307] netlink: 'syz.2.571': attribute type 10 has an invalid length. [ 69.733808][ T5311] loop1: detected capacity change from 0 to 128 [ 69.756611][ T5311] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.769118][ T5311] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.799653][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 69.811246][ T5311] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.573: reserved inode found cleared - inode=2 [ 69.898566][ T5322] loop5: detected capacity change from 0 to 1024 [ 69.905676][ T5322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.932576][ T5322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.935947][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.978559][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.055021][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.5.582'. [ 70.068805][ T5338] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.132233][ T5338] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.154365][ T5316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 70.163453][ T5316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 70.199806][ T5338] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.278565][ T5338] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.305929][ T5345] SELinux: failed to load policy [ 70.342227][ T4717] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.354183][ T4717] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369034][ T4717] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.381279][ T5351] loop2: detected capacity change from 0 to 256 [ 70.387991][ T4717] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.460590][ T5351] lo speed is unknown, defaulting to 1000 [ 71.107929][ T5374] loop1: detected capacity change from 0 to 512 [ 71.129829][ T5374] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.594: inode #0: comm syz.1.594: iget: illegal inode # [ 71.200716][ T5374] EXT4-fs (loop1): get orphan inode failed [ 71.229200][ T5374] EXT4-fs (loop1): mount failed [ 71.258658][ T5379] FAT-fs (loop0): bogus number of reserved sectors [ 71.265409][ T5379] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 71.274805][ T5379] FAT-fs (loop0): Can't find a valid FAT filesystem [ 71.310068][ T5374] lo speed is unknown, defaulting to 1000 [ 71.371581][ T5382] ip6t_rpfilter: unknown options [ 71.548235][ T5382] EXT4-fs (loop0): too many log groups per flexible block group [ 71.561368][ T5382] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 71.584974][ T5392] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.595057][ T5382] EXT4-fs (loop0): mount failed [ 71.657022][ T5392] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.696891][ T5392] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.735681][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 71.735698][ T29] audit: type=1326 audit(1769878381.337:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.765453][ T29] audit: type=1326 audit(1769878381.337:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.789039][ T29] audit: type=1326 audit(1769878381.337:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.812435][ T29] audit: type=1326 audit(1769878381.337:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.836807][ T29] audit: type=1326 audit(1769878381.337:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.860357][ T29] audit: type=1326 audit(1769878381.337:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.883785][ T29] audit: type=1326 audit(1769878381.337:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.907195][ T29] audit: type=1326 audit(1769878381.337:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.930564][ T29] audit: type=1326 audit(1769878381.337:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f237681aeb9 code=0x7ffc0000 [ 71.953946][ T29] audit: type=1326 audit(1769878381.337:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5395 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f237681ac22 code=0x7ffc0000 [ 71.980658][ T5392] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.046008][ T4717] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.066112][ T4717] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.082017][ T4717] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.106621][ T4717] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.185711][ T5407] rock: directory entry would overflow storage [ 72.191933][ T5407] rock: sig=0x4654, size=5, remaining=4 [ 72.200740][ T5409] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.235256][ T5409] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 72.326949][ T5416] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 72.338602][ T5416] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 72.348759][ T5416] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.609: Corrupt directory, running e2fsck is recommended [ 72.352374][ T5418] set_capacity_and_notify: 5 callbacks suppressed [ 72.352387][ T5418] loop3: detected capacity change from 0 to 512 [ 72.377434][ T5416] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 72.388835][ T5416] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.609: corrupted in-inode xattr: e_name out of bounds [ 72.442798][ T5418] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.608: inode #0: comm syz.3.608: iget: illegal inode # [ 72.468562][ T5418] EXT4-fs (loop3): get orphan inode failed [ 72.474544][ T5416] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.609: couldn't read orphan inode 15 (err -117) [ 72.486867][ T5418] EXT4-fs (loop3): mount failed [ 72.507078][ T5416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.532395][ T5416] FAULT_INJECTION: forcing a failure. [ 72.532395][ T5416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.542376][ T5418] lo speed is unknown, defaulting to 1000 [ 72.545679][ T5416] CPU: 1 UID: 0 PID: 5416 Comm: syz.1.609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.545792][ T5416] Tainted: [W]=WARN [ 72.545814][ T5416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.545857][ T5416] Call Trace: [ 72.545878][ T5416] [ 72.545900][ T5416] __dump_stack+0x1d/0x30 [ 72.545990][ T5416] dump_stack_lvl+0x95/0xd0 [ 72.546117][ T5416] dump_stack+0x15/0x1b [ 72.546185][ T5416] should_fail_ex+0x263/0x280 [ 72.546302][ T5416] should_fail+0xb/0x20 [ 72.546462][ T5416] should_fail_usercopy+0x1a/0x20 [ 72.546563][ T5416] _copy_to_user+0x20/0xa0 [ 72.546630][ T5416] ext4_ioctl+0x1475/0x3170 [ 72.546755][ T5416] ? ioctl_has_perm+0x27e/0x2d0 [ 72.546862][ T5416] ? do_vfs_ioctl+0x84f/0xe70 [ 72.546967][ T5416] ? selinux_file_ioctl+0x5f7/0xcb0 [ 72.547069][ T5416] ? __rcu_read_unlock+0x4e/0x70 [ 72.547246][ T5416] ? __rcu_read_unlock+0x4e/0x70 [ 72.547276][ T5416] ? __fget_files+0x184/0x1c0 [ 72.547355][ T5416] ? mutex_lock+0x57/0x90 [ 72.547440][ T5416] ? __pfx_ext4_ioctl+0x10/0x10 [ 72.547526][ T5416] __se_sys_ioctl+0xce/0x140 [ 72.547623][ T5416] __x64_sys_ioctl+0x43/0x50 [ 72.547770][ T5416] x64_sys_call+0x14b0/0x3000 [ 72.547919][ T5416] do_syscall_64+0xc0/0x2a0 [ 72.548023][ T5416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.548076][ T5416] RIP: 0033:0x7f577e33aeb9 [ 72.548116][ T5416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.548242][ T5416] RSP: 002b:00007f577cd97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.548319][ T5416] RAX: ffffffffffffffda RBX: 00007f577e5b5fa0 RCX: 00007f577e33aeb9 [ 72.548372][ T5416] RDX: 00002000000002c0 RSI: 0000000081009431 RDI: 0000000000000004 [ 72.548431][ T5416] RBP: 00007f577cd97090 R08: 0000000000000000 R09: 0000000000000000 [ 72.548538][ T5416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.548574][ T5416] R13: 00007f577e5b6038 R14: 00007f577e5b5fa0 R15: 00007fff1dd088b8 [ 72.548639][ T5416] [ 72.783643][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.857453][ T5427] loop1: detected capacity change from 0 to 1024 [ 72.864218][ T5427] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.876687][ T5429] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.896967][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.909602][ T5427] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.931750][ T5427] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.611: lblock 3 mapped to illegal pblock 3 (length 3) [ 72.946268][ T5427] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 72.958688][ T5427] EXT4-fs (loop1): This should not happen!! Data will be lost [ 72.958688][ T5427] [ 72.971328][ T5427] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.611: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.989867][ T5427] EXT4-fs error (device loop1) in ext4_setattr:6035: Corrupt filesystem [ 73.020160][ T5429] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.076478][ T5429] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.156820][ T5429] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.235808][ T5124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.277218][ T5124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.286065][ T5124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299113][ T5124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.328122][ T3311] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /126/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 73.389395][ T3311] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /126/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.413784][ T3311] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.443396][ T3311] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /126/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.467462][ T3311] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.488489][ T3311] EXT4-fs error (device loop1): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /126/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 73.510417][ T3311] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 73.628134][ T5349] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 73.736403][ T5459] loop2: detected capacity change from 0 to 512 [ 73.753201][ T5459] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.622: inode #0: comm syz.2.622: iget: illegal inode # [ 73.768567][ T5459] EXT4-fs (loop2): get orphan inode failed [ 73.775180][ T5459] EXT4-fs (loop2): mount failed [ 73.813777][ T5459] lo speed is unknown, defaulting to 1000 [ 73.957678][ T5462] __nla_validate_parse: 7 callbacks suppressed [ 73.957697][ T5462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.623'. [ 73.972913][ T5462] tipc: Invalid UDP bearer configuration [ 73.972981][ T5462] tipc: Enabling of bearer rejected, failed to enable media [ 74.043938][ T5463] loop2: detected capacity change from 0 to 512 [ 74.053217][ T5463] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 74.069022][ T5463] EXT4-fs (loop2): orphan cleanup on readonly fs [ 74.075801][ T5463] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.623: bg 0: block 16: invalid block bitmap [ 74.094658][ T5463] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 74.103787][ T5463] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.623: attempt to clear invalid blocks 1669132790 len 1 [ 74.117619][ T5463] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.623: invalid indirect mapped block 4294967295 (level 1) [ 74.135746][ T5463] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.623: invalid indirect mapped block 4294967295 (level 2) [ 74.150313][ T5463] EXT4-fs (loop2): 1 truncate cleaned up [ 74.156746][ T5463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.311633][ T5468] loop0: detected capacity change from 0 to 128 [ 74.321363][ T5468] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.333756][ T5468] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.366801][ T5468] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.624: reserved inode found cleared - inode=2 [ 74.437348][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.545949][ T5471] loop0: detected capacity change from 0 to 128 [ 74.557179][ T5471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 74.569643][ T5471] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.595419][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.639543][ T5476] loop0: detected capacity change from 0 to 512 [ 74.647599][ T5476] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.671083][ T5476] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 74.699522][ T5478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.628'. [ 74.711795][ T5478] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.756354][ T5478] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.766620][ T5481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.628'. [ 74.797177][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.807708][ T5478] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.856525][ T5478] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.946645][ T4717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.957651][ T5489] loop5: detected capacity change from 0 to 512 [ 74.965890][ T4717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.974340][ T4717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.983023][ T4717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.983650][ T5489] EXT4-fs error (device loop5): ext4_init_orphan_info:583: comm syz.5.633: inode #0: comm syz.5.633: iget: illegal inode # [ 75.011852][ T5489] EXT4-fs (loop5): get orphan inode failed [ 75.017991][ T5489] EXT4-fs (loop5): mount failed [ 75.056026][ T5494] loop0: detected capacity change from 0 to 128 [ 75.064389][ T5494] FAT-fs (loop0): bogus number of reserved sectors [ 75.071016][ T5494] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 75.076292][ T5489] lo speed is unknown, defaulting to 1000 [ 75.080655][ T5494] FAT-fs (loop0): Can't find a valid FAT filesystem [ 75.164856][ T5497] ip6t_rpfilter: unknown options [ 75.219010][ T5499] loop5: detected capacity change from 0 to 1024 [ 75.230828][ T5499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.277746][ T5497] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 75.290791][ T5499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.350189][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.418932][ T5508] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.637: bad orphan inode 13 [ 75.433763][ T5508] ext4_test_bit(bit=12, block=4) = 1 [ 75.439157][ T5508] is_bad_inode(inode)=0 [ 75.443410][ T5508] NEXT_ORPHAN(inode)=0 [ 75.447622][ T5508] max_ino=32 [ 75.450839][ T5508] i_nlink=1 [ 75.457559][ T5508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.471170][ T5508] netlink: 48 bytes leftover after parsing attributes in process `syz.5.637'. [ 75.505165][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.696991][ T5529] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 75.712516][ T5529] EXT4-fs (loop5): 1 truncate cleaned up [ 75.719356][ T5529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.908712][ T5535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.644'. [ 75.920783][ T5535] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.971213][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 75.986902][ T5535] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.046421][ T5535] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.106537][ T5535] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.172734][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.185486][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.214720][ T5124] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.242234][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.270023][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.289939][ T5124] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.340318][ T5542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.366276][ T5124] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.378452][ T5542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.426395][ T5124] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.451244][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.487014][ T5552] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 76.503723][ T5538] lo speed is unknown, defaulting to 1000 [ 76.564884][ T5124] bridge_slave_1: left allmulticast mode [ 76.570652][ T5124] bridge_slave_1: left promiscuous mode [ 76.571057][ T4341] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.576615][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.841402][ T5124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.855073][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 76.855160][ T29] audit: type=1400 audit(1769878386.457:2353): avc: denied { bind } for pid=5557 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.881570][ T29] audit: type=1400 audit(1769878386.467:2354): avc: denied { setopt } for pid=5557 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.901743][ T5124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.912375][ T5124] bond0 (unregistering): Released all slaves [ 76.921258][ T5124] bond1 (unregistering): (slave veth3): Releasing active interface [ 76.930954][ T5124] bond1 (unregistering): Released all slaves [ 76.948398][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.649'. [ 77.005949][ T5124] hsr_slave_0: left promiscuous mode [ 77.024764][ T5579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.024845][ T5124] hsr_slave_1: left promiscuous mode [ 77.025551][ T5124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.050340][ T5124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.059611][ T5585] netlink: 'syz.5.652': attribute type 1 has an invalid length. [ 77.064381][ T5579] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.078491][ T5124] veth1_macvtap: left promiscuous mode [ 77.084063][ T5124] veth0_macvtap: left promiscuous mode [ 77.089633][ T5124] veth1_vlan: left promiscuous mode [ 77.095233][ T5124] veth0_vlan: left promiscuous mode [ 77.144412][ T29] audit: type=1400 audit(1769878386.737:2355): avc: denied { accept } for pid=5578 comm="syz.2.651" laddr=fe80::13 lport=34238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.190688][ T5588] FAULT_INJECTION: forcing a failure. [ 77.190688][ T5588] name failslab, interval 1, probability 0, space 0, times 0 [ 77.203442][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.5.653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.203539][ T5588] Tainted: [W]=WARN [ 77.203549][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.203566][ T5588] Call Trace: [ 77.203575][ T5588] [ 77.203585][ T5588] __dump_stack+0x1d/0x30 [ 77.203619][ T5588] dump_stack_lvl+0x95/0xd0 [ 77.203661][ T5588] dump_stack+0x15/0x1b [ 77.203688][ T5588] should_fail_ex+0x263/0x280 [ 77.203731][ T5588] should_failslab+0x8c/0xb0 [ 77.203812][ T5588] __kmalloc_node_noprof+0xbd/0x590 [ 77.203849][ T5588] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 77.203959][ T5588] __vmalloc_node_range_noprof+0x428/0x12b0 [ 77.204083][ T5588] ? __rcu_read_unlock+0x4e/0x70 [ 77.204131][ T5588] __vmalloc_node_noprof+0x89/0xc0 [ 77.204170][ T5588] ? copy_process+0x37e/0x1f10 [ 77.204229][ T5588] ? copy_process+0x37e/0x1f10 [ 77.204272][ T5588] dup_task_struct+0x219/0x940 [ 77.204311][ T5588] ? copy_process+0x36d/0x1f10 [ 77.204356][ T5588] copy_process+0x37e/0x1f10 [ 77.204429][ T5588] ? kstrtouint+0x76/0xc0 [ 77.204473][ T5588] ? kstrtouint_from_user+0xa8/0xf0 [ 77.204525][ T5588] kernel_clone+0x16b/0x5b0 [ 77.204550][ T5588] ? vfs_write+0x86e/0x9f0 [ 77.204606][ T5588] __x64_sys_clone+0x143/0x180 [ 77.204705][ T5588] x64_sys_call+0x12d0/0x3000 [ 77.204736][ T5588] do_syscall_64+0xc0/0x2a0 [ 77.204778][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.204807][ T5588] RIP: 0033:0x7f237681aeb9 [ 77.204840][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.204864][ T5588] RSP: 002b:00007f2375276fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.204888][ T5588] RAX: ffffffffffffffda RBX: 00007f2376a95fa0 RCX: 00007f237681aeb9 [ 77.204902][ T5588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 77.204915][ T5588] RBP: 00007f2375277090 R08: 0000000000000000 R09: 0000000000000000 [ 77.204927][ T5588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 77.204939][ T5588] R13: 00007f2376a96038 R14: 00007f2376a95fa0 R15: 00007ffd570822f8 [ 77.205042][ T5588] [ 77.423936][ T5588] syz.5.653: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 77.440938][ T5588] CPU: 0 UID: 0 PID: 5588 Comm: syz.5.653 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.441034][ T5588] Tainted: [W]=WARN [ 77.441059][ T5588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.441116][ T5588] Call Trace: [ 77.441156][ T5588] [ 77.441194][ T5588] __dump_stack+0x1d/0x30 [ 77.441319][ T5588] dump_stack_lvl+0x95/0xd0 [ 77.441350][ T5588] dump_stack+0x15/0x1b [ 77.441407][ T5588] warn_alloc+0x145/0x1c0 [ 77.441570][ T5588] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 77.441709][ T5588] ? __rcu_read_unlock+0x4e/0x70 [ 77.441834][ T5588] __vmalloc_node_noprof+0x89/0xc0 [ 77.441870][ T5588] ? copy_process+0x37e/0x1f10 [ 77.441909][ T5588] ? copy_process+0x37e/0x1f10 [ 77.441981][ T5588] dup_task_struct+0x219/0x940 [ 77.442086][ T5588] ? copy_process+0x36d/0x1f10 [ 77.442130][ T5588] copy_process+0x37e/0x1f10 [ 77.442171][ T5588] ? kstrtouint+0x76/0xc0 [ 77.442218][ T5588] ? kstrtouint_from_user+0xa8/0xf0 [ 77.442261][ T5588] kernel_clone+0x16b/0x5b0 [ 77.442367][ T5588] ? vfs_write+0x86e/0x9f0 [ 77.442396][ T5588] __x64_sys_clone+0x143/0x180 [ 77.442431][ T5588] x64_sys_call+0x12d0/0x3000 [ 77.442530][ T5588] do_syscall_64+0xc0/0x2a0 [ 77.442611][ T5588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.442641][ T5588] RIP: 0033:0x7f237681aeb9 [ 77.442747][ T5588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.442767][ T5588] RSP: 002b:00007f2375276fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 77.442792][ T5588] RAX: ffffffffffffffda RBX: 00007f2376a95fa0 RCX: 00007f237681aeb9 [ 77.442812][ T5588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 77.442828][ T5588] RBP: 00007f2375277090 R08: 0000000000000000 R09: 0000000000000000 [ 77.442898][ T5588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 77.442915][ T5588] R13: 00007f2376a96038 R14: 00007f2376a95fa0 R15: 00007ffd570822f8 [ 77.442941][ T5588] [ 77.442950][ T5588] Mem-Info: [ 77.517386][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 77.517572][ T5588] active_anon:27823 inactive_anon:2 isolated_anon:0 [ 77.517572][ T5588] active_file:10098 inactive_file:12733 isolated_file:0 [ 77.517572][ T5588] unevictable:0 dirty:203 writeback:0 [ 77.517572][ T5588] slab_reclaimable:3375 slab_unreclaimable:15651 [ 77.517572][ T5588] mapped:32585 shmem:20207 pagetables:1430 [ 77.517572][ T5588] sec_pagetables:0 bounce:0 [ 77.517572][ T5588] kernel_misc_reclaimable:0 [ 77.517572][ T5588] free:1862778 free_pcp:10702 free_cma:0 [ 77.523011][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.527155][ T5588] Node 0 active_anon:111292kB inactive_anon:8kB active_file:40392kB inactive_file:50932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130340kB dirty:812kB writeback:0kB shmem:80828kB kernel_stack:3904kB pagetables:5720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 77.533374][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 77.536145][ T5588] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.570581][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.574828][ T5588] lowmem_reserve[]: 0 [ 77.625234][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 77.627041][ T5588] 2879 7858 7858 [ 77.627065][ T5588] Node 0 DMA32 free:2944748kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948380kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 77.661500][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.662367][ T5588] lowmem_reserve[]: [ 77.761191][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 77.787114][ T5588] 0 0 4978 4978 [ 77.787149][ T5588] Node 0 Normal free:4491216kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112076kB inactive_anon:8kB active_file:40392kB inactive_file:50952kB unevictable:0kB writepending:812kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:38208kB local_pcp:13364kB free_cma:0kB [ 77.899878][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 77.910753][ T5588] lowmem_reserve[]: 0 0 0 0 [ 77.924300][ T5588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.937404][ T5588] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944748kB [ 77.951149][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 77.953567][ T5588] Node 0 Normal: 326*4kB (UM) 277*8kB (U) 16*16kB (UME) 13*32kB (U) 10*64kB (UM) 19*128kB (UME) 15*256kB (UM) 11*512kB (UME) 13*1024kB (UME) 12*2048kB (U) 1083*4096kB (UM) = 4490592kB [ 77.968169][ T29] audit: type=1400 audit(1769878387.537:2356): avc: denied { add_name } for pid=5578 comm="syz.2.651" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.985149][ T5588] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 78.015085][ T5588] 43410 total pagecache pages [ 78.019844][ T5588] 2 pages in swap cache [ 78.024056][ T5588] Free swap = 124988kB [ 78.025491][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=12 [ 78.028287][ T5588] Total swap = 124996kB [ 78.041389][ T5588] 2097051 pages RAM [ 78.045248][ T5588] 0 pages HighMem/MovableOnly [ 78.049946][ T5588] 81556 pages reserved [ 78.050903][ T5602] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #12: comm syz.2.651: corrupted xattr block 6: invalid header [ 78.085781][ T5124] team0 (unregistering): Port device team_slave_1 removed [ 78.096444][ T5124] team0 (unregistering): Port device team_slave_0 removed [ 78.138133][ T3400] lo speed is unknown, defaulting to 1000 [ 78.144228][ T3400] infiniband syz2: ib_query_port failed (-19) [ 78.153680][ T5579] syz.2.651 (5579) used greatest stack depth: 9424 bytes left [ 78.176008][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.200737][ T5538] chnl_net:caif_netlink_parms(): no params data found [ 78.258676][ T5608] set_capacity_and_notify: 5 callbacks suppressed [ 78.258698][ T5608] loop2: detected capacity change from 0 to 256 [ 78.303945][ T5608] syz.2.654: attempt to access beyond end of device [ 78.303945][ T5608] loop2: rw=8912896, sector=256, nr_sectors = 20 limit=256 [ 78.331470][ T5608] syz.2.654: attempt to access beyond end of device [ 78.331470][ T5608] loop2: rw=8388608, sector=256, nr_sectors = 8 limit=256 [ 78.398890][ T5626] loop2: detected capacity change from 0 to 128 [ 78.408135][ T5538] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.415662][ T5538] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.430431][ T29] audit: type=1401 audit(1769878388.017:2357): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 78.434792][ T5631] loop0: detected capacity change from 0 to 128 [ 78.454349][ T5538] bridge_slave_0: entered allmulticast mode [ 78.464090][ T5538] bridge_slave_0: entered promiscuous mode [ 78.470278][ T5626] FAT-fs (loop2): bogus number of reserved sectors [ 78.472361][ T5538] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.476960][ T5626] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 78.484043][ T5538] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.493338][ T5626] FAT-fs (loop2): Can't find a valid FAT filesystem [ 78.504760][ T5538] bridge_slave_1: entered allmulticast mode [ 78.526020][ T5538] bridge_slave_1: entered promiscuous mode [ 78.557760][ T5538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.604470][ T5538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.639667][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.663'. [ 78.648641][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.663'. [ 78.668915][ T5538] team0: Port device team_slave_0 added [ 78.676562][ T5647] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.695390][ T5538] team0: Port device team_slave_1 added [ 78.704086][ T5644] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 78.723056][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.730163][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.756309][ T5538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.785344][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.663'. [ 78.811887][ T5647] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.834986][ T5538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.842047][ T5538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.868024][ T5538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.874098][ T5626] loop2: detected capacity change from 0 to 512 [ 78.923690][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.933112][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.942329][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.951495][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.960798][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.963923][ T5673] x_tables: duplicate underflow at hook 2 [ 78.970002][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.984767][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 78.993902][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 79.003080][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 79.012270][ T5670] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 79.013027][ T5673] loop0: detected capacity change from 0 to 512 [ 79.032231][ T5647] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.072717][ T5673] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 79.096113][ T5673] EXT4-fs (loop0): orphan cleanup on readonly fs [ 79.104479][ T5626] EXT4-fs (loop2): too many log groups per flexible block group [ 79.133208][ T5626] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 79.141846][ T5647] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.152931][ T5673] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.666: Bad quota inum: 5, type: 1 [ 79.178945][ T5626] EXT4-fs (loop2): mount failed [ 79.198800][ T5673] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 79.231901][ T5538] hsr_slave_0: entered promiscuous mode [ 79.241109][ T5673] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 79.248869][ T5538] hsr_slave_1: entered promiscuous mode [ 79.256977][ T5538] debugfs: 'hsr0' already exists in 'hsr' [ 79.262765][ T5538] Cannot create hsr debugfs directory [ 79.305892][ T5673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.308432][ T5124] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.390931][ T5124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.414370][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.417332][ T5124] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.462246][ T5124] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.486795][ T5538] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.516588][ T5538] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.523419][ T29] audit: type=1400 audit(1769878389.117:2358): avc: denied { append } for pid=5696 comm="syz.0.670" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.546800][ T29] audit: type=1400 audit(1769878389.117:2359): avc: denied { ioctl } for pid=5696 comm="syz.0.670" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 79.577524][ T5698] netlink: 'syz.0.670': attribute type 18 has an invalid length. [ 79.577559][ T5538] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.585386][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 79.614598][ T5538] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 79.644380][ T29] audit: type=1401 audit(1769878389.207:2360): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 79.679794][ T5122] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.688542][ T5122] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.697660][ T5122] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.707721][ T5122] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.745642][ T5710] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 79.772784][ T5538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.794374][ T5538] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.823028][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.830167][ T5122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.854761][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.861865][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.872708][ T5718] loop0: detected capacity change from 0 to 512 [ 79.880066][ T5720] loop5: detected capacity change from 0 to 512 [ 79.895809][ T5719] batadv_slave_1: entered promiscuous mode [ 79.931719][ T5538] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.942232][ T5538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.954568][ T5718] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 79.954617][ T5718] EXT4-fs: failed to create workqueue [ 79.969598][ T5718] EXT4-fs (loop0): mount failed [ 80.003708][ T5718] batadv_slave_1: left promiscuous mode [ 80.025472][ T5720] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #4: comm syz.5.677: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 80.059972][ T5720] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.677: Bad quota inode: 4, type: 1 [ 80.123240][ T5538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.152859][ T5720] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 80.191475][ T5720] EXT4-fs (loop5): mount failed [ 80.272410][ T5751] loop0: detected capacity change from 0 to 1024 [ 80.282320][ T5751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.303792][ T5754] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 80.341822][ T5751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.433908][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.495146][ T29] audit: type=1401 audit(1769878390.067:2361): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 80.562427][ T5538] veth0_vlan: entered promiscuous mode [ 80.577186][ T5538] veth1_vlan: entered promiscuous mode [ 80.621838][ T5538] veth0_macvtap: entered promiscuous mode [ 80.630130][ T5538] veth1_macvtap: entered promiscuous mode [ 80.643971][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.676033][ T5538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.697721][ T5112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.746187][ T5112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787673][ T5112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.830632][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.846254][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.855204][ T5112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.865371][ T5777] netlink: 188 bytes leftover after parsing attributes in process `syz.5.689'. [ 80.886536][ T3039] ================================================================== [ 80.894687][ T3039] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 80.902998][ T3039] [ 80.905366][ T3039] write to 0xffff8881016ec65c of 4 bytes by task 28 on cpu 1: [ 80.913034][ T3039] rcu_tasks_trace_pregp_step+0x1b4/0x8f0 [ 80.918830][ T3039] rcu_tasks_wait_gp+0x94/0x540 [ 80.923741][ T3039] rcu_tasks_one_gp+0x7f1/0x8e0 [ 80.928661][ T3039] rcu_tasks_kthread+0xf6/0x110 [ 80.933562][ T3039] kthread+0x488/0x510 [ 80.937676][ T3039] ret_from_fork+0x148/0x280 [ 80.942333][ T3039] ret_from_fork_asm+0x1a/0x30 [ 80.947577][ T3039] [ 80.950029][ T3039] read to 0xffff8881016ec200 of 3264 bytes by task 3039 on cpu 0: [ 80.957858][ T3039] memcpy_and_pad+0x48/0x80 [ 80.962410][ T3039] arch_dup_task_struct+0x2c/0x40 [ 80.967483][ T3039] dup_task_struct+0x6e/0x940 [ 80.972264][ T3039] copy_process+0x37e/0x1f10 [ 80.976918][ T3039] kernel_clone+0x16b/0x5b0 [ 80.981453][ T3039] __x64_sys_clone+0x143/0x180 [ 80.986250][ T3039] x64_sys_call+0x12d0/0x3000 [ 80.990970][ T3039] do_syscall_64+0xc0/0x2a0 [ 80.995519][ T3039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.001445][ T3039] [ 81.003783][ T3039] Reported by Kernel Concurrency Sanitizer on: [ 81.009989][ T3039] CPU: 0 UID: 0 PID: 3039 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 81.020971][ T3039] Tainted: [W]=WARN [ 81.024803][ T3039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.034895][ T3039] ==================================================================