last executing test programs: 3.813732217s ago: executing program 0 (id=3743): sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20002017}) close_range(r1, 0xffffffffffffffff, 0x0) 2.865579478s ago: executing program 0 (id=3758): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020601020000740000000000000000000900020073797a31000000000500010007000000050005000a000000140007800800134000e4000008001240ffffffff11000300686173683a69702c706f727400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4004851}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 2.389357548s ago: executing program 2 (id=3770): socket$inet6(0xa, 0x80001, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) shutdown(0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000400009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x0, @local}, 0x0, 0x80800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="eea71fbd6999e4c61ce190ff08000000000000003e", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000140000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000540)='user\x00', &(0x7f0000000680)=@secondary) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0xf7, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x7fffffff, 0x2fd7782f}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xc000000000000001, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000840)={[{@jqfmt_vfsv0}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@barrier}, {@nobh}, {@nomblk_io_submit}]}, 0x1, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000040)={'gretap0\x00', &(0x7f00000008c0)={'erspan0\x00', 0x0, 0x1, 0x80, 0x80, 0x7fffffff, {{0x2d, 0x4, 0x0, 0x3d, 0xb4, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0x60, [@private=0xa010102, @private=0xa010101, @remote, @empty, @private=0xa010102, @private=0xa010102, @loopback, @local]}, @timestamp_prespec={0x44, 0xc, 0x8f, 0x3, 0x1, [{@remote, 0x44}]}, @ssrr={0x89, 0x3, 0xc}, @rr={0x7, 0xf, 0xeb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010101]}, @generic={0x89, 0x12, "1051f775692c2a455557024bcd2ee440"}, @timestamp_prespec={0x44, 0x3c, 0x5b, 0x3, 0x2, [{@private=0xa010100, 0x2}, {@rand_addr=0x64010100, 0x9}, {@multicast1, 0xffff}, {@broadcast, 0x6}, {@private=0xa010100, 0xb}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9f3ffd71}, {@private=0xa010101, 0x6}]}, @ra={0x94, 0x4}, @generic={0x86, 0xa, "0fd16625eac5e59b"}]}}}}}) r5 = socket(0x8000000010, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000000000000000000000000001860000000000000000000a97600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x20000000000001f8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000000020204eaf007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r6}, 0x10) write(r5, &(0x7f00000002c0)="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", 0xfc) 2.198331636s ago: executing program 2 (id=3773): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) fcntl$getown(0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44040) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d4", 0x5}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2.058545022s ago: executing program 2 (id=3775): r0 = socket(0x10, 0x400000000080803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffa, 0xc11, 0x6, 0x20000, 0x8000000, 0xf}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") 1.810012303s ago: executing program 0 (id=3777): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0xacd37000) open_tree(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x89901) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000940)={[{@noauto_da_alloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@quota}]}, 0x5, 0x50d, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.781941774s ago: executing program 2 (id=3778): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair(0x1, 0x20000000000001, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_remove_blocks\x00'}, 0xfffffe3a) listen(r2, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa1000000ec6d0007010000f8ffffffb7020000080000000001000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 1.720936237s ago: executing program 0 (id=3779): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) fadvise64(r3, 0x45, 0x80000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x555) accept(r0, 0x0, 0x0) 1.101307893s ago: executing program 4 (id=3793): r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0xfffeffff, 0x8, 0xd, 0x3, 0x6, 0x9}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20000001) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0xfffffffffffffff7, 0x3, 0x6, 0x8, 0xf, 0x5, 0xf06, 0x7}, &(0x7f0000000240)={0x6e9, 0xfffffffffffffff7, 0x3, 0x3, 0x1, 0xb4, 0x2, 0x9e5}, &(0x7f0000000280)={0x0, 0x9, 0x8, 0x6, 0x5, 0x100000000, 0x100, 0x6}, &(0x7f0000000300)={r3, r4/1000+10000}) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = fcntl$getown(r1, 0x9) fcntl$lock(r6, 0x5, &(0x7f0000000380)={0x1, 0x4, 0x8, 0x40, r7}) ioctl$PPPIOCGDEBUG(r5, 0x80047441, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000400)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)=""/216, 0xd8}], 0x1}, 0x10000}, {{&(0x7f00000005c0)=@hci, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000640)=""/44, 0x2c}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/233, 0xe9}, {&(0x7f0000000a00)=""/175, 0xaf}, {&(0x7f0000000ac0)=""/68, 0x44}, {&(0x7f0000000b40)=""/148, 0x94}], 0x8, &(0x7f0000000c80)=""/112, 0x70}, 0x3}, {{&(0x7f0000000d00)=@nfc, 0x80, &(0x7f0000002180)=[{&(0x7f0000000d80)=""/20, 0x14}, {&(0x7f0000000dc0)}, {&(0x7f0000000e00)=""/169, 0xa9}, {&(0x7f0000000ec0)=""/79, 0x4f}, {&(0x7f0000000f40)=""/250, 0xfa}, {&(0x7f0000001040)=""/25, 0x19}, {&(0x7f0000001080)=""/198, 0xc6}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x8, &(0x7f0000002200)=""/132, 0x84}, 0x2}], 0x3, 0x21, 0x0) r8 = open_tree(r1, &(0x7f0000002380)='./file0\x00', 0x89100) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000023c0), &(0x7f0000002400), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000002440)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$BLKCRYPTOIMPORTKEY(r8, 0xc0401289, &(0x7f0000002540)={&(0x7f0000002480)="ff4ab9464c3a333bff8e40c6a51508fbf3b15be4ac6a6e5ee2593d960b2e0c98a869284ff296488214ab9f5f72d8b3", 0x2f, &(0x7f00000024c0)=""/128, 0x80}) fcntl$lock(r5, 0x24, &(0x7f0000002580)={0x2, 0x1, 0x6, 0x5, r7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000002640)={'ip6gre0\x00', &(0x7f00000025c0)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x9, 0x3ff, 0x1b, @mcast1, @private1, 0x20, 0x7, 0x3312, 0x10}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000002740)={'ip_vti0\x00', &(0x7f0000002680)={'ip_vti0\x00', r10, 0x8000, 0x20, 0x6, 0x7fff, {{0x1e, 0x4, 0x1, 0x7, 0x78, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @local, {[@timestamp={0x44, 0x20, 0xf5, 0x0, 0xa, [0x40, 0x10001, 0xfffff502, 0x7, 0x8001, 0xf15, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xb0, 0x3, 0x7, [{@broadcast, 0x1}, {@loopback, 0xa6fc5997}, {@multicast1, 0x1}, {@private=0xa010100, 0x2}, {@broadcast, 0xcef}, {@local}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@multicast2, 0x8}]}]}}}}}) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000002ac0)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a80)={&(0x7f00000027c0)={0x2bc, r2, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x7c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "860047828ee8415ac8b320dae61620ad7ae02f9a8d11ddae718692f516bdf7abbc"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x130, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4000}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x837}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe17b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}]}, @TIPC_NLA_NODE={0x38, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "c10c9022d1a5fae644b64b46936ef4a11a4149ee4e5a2c66953134cb1103688618dbb1a45473a79eb0824f8c15ee"}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b00)={0x1b, 0x0, 0x0, 0x6c06e9cd, 0x0, r8, 0x3, '\x00', r10, r8, 0x2, 0x5, 0x5}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000002c40)={{{@in=@initdev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000002d40)=0xe8) mount$9p_unix(&(0x7f0000002b80)='./file0\x00', &(0x7f0000002bc0)='./file1\x00', &(0x7f0000002c00), 0x102000, &(0x7f0000002d80)={'trans=unix,', {[{@cache_fscache}, {@directio}], [{@fowner_gt={'fowner>', r13}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/vcsu\x00'}}]}}) ioctl$PPPIOCATTACH(r8, 0x4004743d, &(0x7f0000002e00)=0x4) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e40), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000002f80)={0xfffffffffffffffd, 0x0, &(0x7f0000002f40)={&(0x7f0000002e80)={0x98, r14, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000002fc0)={{0x40, 0x27}, 0x0, 0x3, 0xc, {0x8, 0x8}, 0x9, 0x7}) 1.096204993s ago: executing program 3 (id=3794): timer_create(0x9, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) (fail_nth: 5) 1.078699943s ago: executing program 4 (id=3795): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 841.841134ms ago: executing program 4 (id=3796): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 830.321894ms ago: executing program 3 (id=3797): sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x0) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20002017}) close_range(r1, 0xffffffffffffffff, 0x0) 822.943215ms ago: executing program 4 (id=3798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/123, 0x7b) fadvise64(r4, 0x45, 0x80000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) mq_open(&(0x7f0000000000)='kfree\x00', 0x40, 0x11, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xe83a}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x555) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) accept(r0, 0x0, 0x0) 778.886037ms ago: executing program 2 (id=3799): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') open_tree(r3, &(0x7f0000000000)='./mnt/file0\x00', 0x9001) write$binfmt_script(r0, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000001300)={0x73, 0x20d, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x1ffe, [0xb0dd, 0x9, 0x1, 0x77, 0x2]}}, @jumbo={0xc2, 0x4, 0x1ff}, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @loopback}]}, 0x1078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140), &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) 733.478658ms ago: executing program 0 (id=3801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 677.012411ms ago: executing program 3 (id=3802): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, 0xffffffffffffffff, 0xacd37000) open_tree(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x89901) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x8, &(0x7f0000000940)={[{@noauto_da_alloc}, {@usrquota}, {@barrier_val={'barrier', 0x3d, 0x8e}}, {}, {@errors_remount}, {@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@quota}]}, 0x5, 0x50d, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 676.534531ms ago: executing program 2 (id=3803): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000700)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='\x00') sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) setuid(0x0) 568.269976ms ago: executing program 4 (id=3804): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={0xffffffffffffffff, &(0x7f0000000580)="43a1c81ed450fb1401ccfc50d24088d59754bbdecc63454596797dbc782cbbd41be234107c3d2bedca3d7219ac1a6e92ce533652cd7aa90e13c2bf6fd8f5b754d81b957ec263e21ac4dec1b358ae90883c05719c26bf978d2f093a9e46c363c6472c3825c08e3e53e534b63e78d5196f35e77a1ed66dfaf98752248f23472451c07ea67a586d03084edfbcd7f0040ac4cab5aaf052694c7a00ca53ba044b4c220b", &(0x7f00000004c0)=""/83, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000700)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0xffff, 0xffff}, {0x5, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000740)='\x00') sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) setuid(0x0) 565.206785ms ago: executing program 0 (id=3805): bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000c40)={{0x2, 0x4e1f, @private=0xa0100ff}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x2c, {0x2, 0x4e23, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="119a74af1ff24d00c85e45e18484900000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xdb}, 0x0, 0x1, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{r7}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0x4, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x33d52d06, 0x0, 0x0, 0x0, 0x1}, [@generic={0x0, 0x7, 0xd, 0x10e5, 0xffff}]}, &(0x7f0000001540)='syzkaller\x00', 0x1, 0x44, &(0x7f0000001600)=""/68, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001680)={0x0, 0x2, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001740)=[{0x1, 0x2, 0x2, 0x2}, {0x2, 0x5, 0x7, 0x2}, {0x1, 0x2, 0xf, 0x1}, {0x4, 0x4, 0x8}, {0x3, 0x1, 0x80, 0x9}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp}, 0x20) socket(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x200000c0) 517.219288ms ago: executing program 3 (id=3807): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8}, {0xc, 0x1}, {0x7, 0x2}, {0xf, 0x1}, {0x10, 0x4}, {0xc, 0x2}]}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x5, 0x3}, {0x0, 0x4}, {0xc, 0x4}]}, @restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x8001}}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x54, 0xf}, @struct={0xc, 0x3, 0x0, 0x4, 0x0, 0xc, [{0xc, 0x1, 0x9}, {0x3, 0x1, 0x9}, {0x3, 0x1, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x800}}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000700)=""/144, 0x120, 0x90, 0x1, 0x4}, 0x28) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000980)=@base={0x1f, 0x6, 0x0, 0x2000, 0x59340, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @value=r1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xb01e, '\x00', 0x0, r4, 0x0, 0x4, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r5, 0x0, r5, &(0x7f0000000500)=0xffff, 0x9, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(r3) r7 = syz_io_uring_setup(0x4ad7, &(0x7f0000000140)={0x0, 0x8d2c, 0x400, 0x3, 0x33d}, &(0x7f0000000040), &(0x7f00000001c0)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, &(0x7f0000000200)=[r8, r3, r6, r6], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 414.649522ms ago: executing program 1 (id=3808): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 399.564912ms ago: executing program 4 (id=3809): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x50, r0, 0x10000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_open_dev$evdev(&(0x7f0000000640), 0x2, 0x80) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, r2, 0x13}, 0x20) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaae3aaaa48ffa4318cfae1d6f295d31800140600fc000000000000000000000000000001fe8000000000800000000000", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="5002000090780000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0xb, 0xb, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fe8000000000000000000000000200000000bb00004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYRES64], 0x0) write$tun(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff117a199afcf408004e0f017100680000fa069078e0000001e000000244247e91ac1414aa000026530a010102000000f6ac1414aa000000060a010102000004004e234e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="0001fccf90780008fe0dbc15d07f671e3322dd7c17fe06e2d4c3d9fe52f9895cb12260181d83d743855aba512205a7c0e10000001e128b83de1a2db8189039a3f575d3150b27b5882195a97e4231d1b2e9ef8c80317452a1f9dd5516839cea1cade03891d0df04e76670414bf0c120f301b3b3456c802f063e642882af5e796a984fa166b97699012665350ea0d2da498eee763f6019efd020ad77419cf12f66382fb2e3cd7322fae29917d27792dc619bd4feac3994f8fe468e228282244c8d78ee1457c9cc6c8d461e68d8a8153b70f7bbf89b5f4ebdc44244ab0ffa65379d2d3e429f23fa87f5a060c4104922ab86f1629a979d92c20d616a5355c796c1410749c69d02b2fb31d1f4d1dc236403a2ac5c9fec8ee56656f897f7a4c0ac0df7bf1fa70df13c00000000000000"], 0x183) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00'}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x201000, 0x1000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x616, 0xd, 0x8100}}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a788fd24931cdf01f8ac9d2a1fa252b5050076c669012b", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r7}, 0x18) write(r6, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc131b8e11e775ef7ff118fe916e4017771c3d08", 0x29) sendfile(r6, r5, 0x0, 0x3ffff) 382.721473ms ago: executing program 1 (id=3810): timer_create(0x7, 0x0, &(0x7f00000000c0)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x1946}, 0x8922, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x2000, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs(r1, &(0x7f0000000100)='net/sockstat6\x00') process_vm_writev(r1, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/222, 0xde}], 0x1, &(0x7f0000000ac0)=[{&(0x7f00000017c0)=""/242, 0xf2}], 0x1, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000200)) 355.907515ms ago: executing program 3 (id=3811): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141220, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000204004d1504"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40890}, 0x24008004) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMRRU(r1, 0x4010744d, &(0x7f0000000080)=0xc) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x88102, 0x0) write$binfmt_script(r6, &(0x7f00000109c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r4, @ANYRESOCT=r5], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r9, 0x0, 0x4804}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e", 0xcb}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="ac00028008000200020000001b000500e523f0a74bbce1646a541eeff38c19a9e2d923c36ed2ef00790005009068a741be68aef9e6b81e7d75673fa096d894a84d72d0732e79b5d739928d4e8d30a0b663b891d7e1eb8393be673a5786cc40305e2e8ac7cc14fc68ce0e4ea1323f5f5902e4ee5dc7278e4ad4809198f70a821c64371d6c41ad52802bf920ef6a96d8f91f782eac62aee0a0ab0618469d7ec7ce770000000400010004000100"], 0x3a4}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000004) r11 = geteuid() sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c0100041000130700000000fedbdf246401010100000000000000000000000020010000000000000000000000000001000000004e2100020a0000001d000000cdddd09e7094343e5d0000000000004c2f5ed315ed00b2892817b1b73ad817cab9ef0eedf98748d7d75dc9b78e4ff23fc0fc4546724cae167a37dc6c4cf28f2c1b9a64efd9018c3d697cbbe63649553d921099c35a5ff4a5ca24ac65e84741223783f106005f1c15f52cb1902e1acdf4cd9b77873e", @ANYRES16, @ANYRES32=r11, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x8000) socket$key(0xf, 0x3, 0x2) syz_read_part_table(0x104d, &(0x7f0000002100)="$eJzsz7utwlAQBNCxnz9PQiCXADEZHVx6cD+mExIIaBKkK4jIkYNzgtVoN1hNWJFnkramy/dx8wl/dY5DsuwP17m0yX+SJUmZcjsf0512dVWVIc3Uj+myTdLfm/eLdJkfPygFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKv3CgAA//+ZcQf0") socket$inet6(0xa, 0x80002, 0x0) 294.660477ms ago: executing program 1 (id=3812): syz_io_uring_setup(0x3471, &(0x7f00000003c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001d00)=""/4067, 0xfe3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 284.152208ms ago: executing program 1 (id=3813): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000a00000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[], 0x2, 0x699, &(0x7f0000000140)="$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") r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') open_tree(r3, &(0x7f0000000000)='./mnt/file0\x00', 0x9001) write$binfmt_script(r0, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000001300)={0x73, 0x20d, '\x00', [@pad1, @ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x30, {0x2, 0xa, 0x0, 0x1ffe, [0xb0dd, 0x9, 0x1, 0x77, 0x2]}}, @jumbo={0xc2, 0x4, 0x1ff}, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @pad1, @jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @loopback}]}, 0x1078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0xfffffffc, 0x10100}, &(0x7f0000000140), &(0x7f0000000040)) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) 233.64403ms ago: executing program 1 (id=3814): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000d80)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000002f80)={0x0, 0x5, 0x1, [0x2, 0xfffffffffffffffa, 0x9, 0x10, 0x1], [0x4, 0x8001, 0x6, 0x400, 0xafd, 0xa40, 0x5, 0xc5f, 0x6, 0x0, 0x5, 0x6, 0x80000001, 0x80000000, 0x6, 0xc, 0xc68, 0x4, 0x7, 0x4, 0xa32, 0x2, 0x0, 0x5e7, 0x1, 0x81, 0xfffffffffffffff8, 0x6, 0xf, 0x9, 0x3, 0x0, 0x4, 0xc000000000000000, 0x26f1400, 0x3, 0x81, 0x25, 0x0, 0x42, 0x77, 0xd, 0x4, 0x81, 0x696, 0x0, 0x7fffffffffffffff, 0x8e319, 0x10001, 0x2730000000000000, 0x4, 0x5, 0xffffffffffff0001, 0x1, 0x5, 0x8000, 0x3, 0xc6, 0xca9, 0x4, 0x0, 0x0, 0x9, 0x8, 0x4, 0x2, 0x100, 0x5248, 0xff, 0x1, 0xfff, 0x5, 0x0, 0x43, 0x80000001, 0x1386, 0x3, 0x6, 0xff, 0x1, 0xffffffffffffff87, 0x2, 0x0, 0xbb5, 0x7, 0x5, 0x0, 0xfb74, 0x0, 0x3, 0xe9, 0xbc, 0x0, 0x401, 0x5, 0x0, 0x40, 0x6, 0x81, 0x4, 0xcb, 0x8, 0x7, 0x6, 0x7, 0x2, 0x8, 0xffff, 0x3, 0x1, 0x800, 0x5, 0x405, 0x4, 0x3c0000000, 0x1, 0x9, 0x7, 0xfffffffffffffff7, 0x6, 0x2]}) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x48, 0x0, &(0x7f00007d0000)) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="270e286cfca3c370000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 99.102905ms ago: executing program 3 (id=3815): socket(0x10, 0x400000000080803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf251500000060000180140001"], 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffce2a0000000000000011424203"], 0x0) socket(0x10, 0x80002, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000a00)={[{@init_itable_val}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@journal_ioprio}]}, 0x2, 0x44a, &(0x7f0000000c40)="$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") 0s ago: executing program 1 (id=3816): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)={[{@auto_da_alloc}]}, 0x3, 0x554, &(0x7f0000000e40)="$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") readlink(&(0x7f0000000700)='./file2\x00', &(0x7f0000000800)=""/138, 0x8a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) kernel console output (not intermixed with test programs): ipv6_setsockopt+0x11a/0x130 [ 202.638505][T12768] tcp_setsockopt+0x98/0xb0 [ 202.638571][T12768] sock_common_setsockopt+0x69/0x80 [ 202.638607][T12768] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 202.638693][T12768] __sys_setsockopt+0x184/0x200 [ 202.638789][T12768] __x64_sys_setsockopt+0x64/0x80 [ 202.638831][T12768] x64_sys_call+0x20ec/0x3000 [ 202.638865][T12768] do_syscall_64+0xd2/0x200 [ 202.638956][T12768] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.638992][T12768] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 202.639036][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.639080][T12768] RIP: 0033:0x7f56acfef749 [ 202.639099][T12768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.639117][T12768] RSP: 002b:00007f56aba4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 202.639137][T12768] RAX: ffffffffffffffda RBX: 00007f56ad245fa0 RCX: 00007f56acfef749 [ 202.639153][T12768] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 202.639166][T12768] RBP: 00007f56aba4f090 R08: 0000000000000268 R09: 0000000000000000 [ 202.639178][T12768] R10: 0000200000000e80 R11: 0000000000000246 R12: 0000000000000001 [ 202.639315][T12768] R13: 00007f56ad246038 R14: 00007f56ad245fa0 R15: 00007ffc75465fc8 [ 202.639336][T12768] [ 202.901188][T12771] loop3: detected capacity change from 0 to 512 [ 202.916201][T12773] loop2: detected capacity change from 0 to 128 [ 202.922365][T12775] loop1: detected capacity change from 0 to 512 [ 202.932934][T12771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.945896][T12771] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.949246][T12779] __nla_validate_parse: 1 callbacks suppressed [ 202.949269][T12779] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 202.972474][T12775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.985345][T12775] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.001394][T12779] team0 (unregistering): Port device team_slave_0 removed [ 203.011012][T12779] team0 (unregistering): Port device team_slave_1 removed [ 203.059009][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.079051][T12666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.100091][T12666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.128728][T12666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.155735][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.157965][T12666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.212609][T12804] loop4: detected capacity change from 0 to 1024 [ 203.236267][T12809] loop3: detected capacity change from 0 to 128 [ 203.243017][T12804] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.266489][T12804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.269365][T12666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.306868][T12666] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.327499][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.334929][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.365622][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.372824][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.418797][T12816] netlink: '': attribute type 30 has an invalid length. [ 203.463366][T12818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3180'. [ 203.465072][T12666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.486229][T12821] loop1: detected capacity change from 0 to 128 [ 203.502853][T12818] IPv6: Can't replace route, no match found [ 203.589119][T12666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.614203][T12818] loop3: detected capacity change from 0 to 8192 [ 203.676129][T12818] loop3: p1[EZD] p2 p3 p4 [ 203.682114][T12818] loop3: p1 size 32768 extends beyond EOD, truncated [ 203.696623][T12666] veth0_vlan: entered promiscuous mode [ 203.705076][T12666] veth1_vlan: entered promiscuous mode [ 203.710967][T12818] loop3: p2 start 930308 is beyond EOD, truncated [ 203.717484][T12818] loop3: p3 start 117772289 is beyond EOD, truncated [ 203.724263][T12818] loop3: p4 size 262144 extends beyond EOD, truncated [ 203.726489][T12666] veth0_macvtap: entered promiscuous mode [ 203.745297][T12666] veth1_macvtap: entered promiscuous mode [ 203.757390][T12666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.771291][T12666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.786664][ T1861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.804340][ T1861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.825280][ T1861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.837275][T12838] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 203.847924][ T1861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.904183][T12849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3138'. [ 203.929565][T12851] loop2: detected capacity change from 0 to 128 [ 203.957608][T12858] loop3: detected capacity change from 0 to 128 [ 204.059217][T12069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.127556][T12873] loop1: detected capacity change from 0 to 1024 [ 204.135966][T12873] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.157711][T12873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.182218][T12884] loop3: detected capacity change from 0 to 1024 [ 204.189329][T12884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.197321][T12876] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 204.211456][T12884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.255758][T12884] netlink: '': attribute type 30 has an invalid length. [ 204.275321][T12890] netlink: '': attribute type 30 has an invalid length. [ 204.331941][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.368375][T12896] loop3: detected capacity change from 0 to 1024 [ 204.375880][T12896] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.386842][T12896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.417940][T12896] netlink: '': attribute type 30 has an invalid length. [ 204.443593][T12899] loop2: detected capacity change from 0 to 512 [ 204.476161][T12899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.489174][T12899] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.504701][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 204.517955][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.538705][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.647550][T12919] loop3: detected capacity change from 0 to 1024 [ 204.654428][T12919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.674703][T12919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.711610][T12923] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 204.757056][T12928] netlink: '': attribute type 30 has an invalid length. [ 204.781792][T12930] 9pnet_fd: Insufficient options for proto=fd [ 204.788475][T12932] loop2: detected capacity change from 0 to 128 [ 204.936788][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3218'. [ 204.948453][T12939] IPv6: Can't replace route, no match found [ 204.979178][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.990909][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3219'. [ 205.002880][T12939] loop2: detected capacity change from 0 to 8192 [ 205.010443][T12943] IPv6: Can't replace route, no match found [ 205.025398][T12945] loop1: detected capacity change from 0 to 128 [ 205.054251][T12943] loop4: detected capacity change from 0 to 8192 [ 205.061093][T12939] loop2: p1[EZD] p2 p3 p4 [ 205.065999][T12939] loop2: p1 size 32768 extends beyond EOD, truncated [ 205.073478][T12939] loop2: p2 start 930308 is beyond EOD, truncated [ 205.080021][T12939] loop2: p3 start 117772289 is beyond EOD, truncated [ 205.086814][T12939] loop2: p4 size 262144 extends beyond EOD, truncated [ 205.125247][T12943] loop4: p1[EZD] p2 p3 p4 [ 205.129954][T12943] loop4: p1 size 32768 extends beyond EOD, truncated [ 205.138252][T12943] loop4: p2 start 930308 is beyond EOD, truncated [ 205.144725][T12943] loop4: p3 start 117772289 is beyond EOD, truncated [ 205.151608][T12943] loop4: p4 size 262144 extends beyond EOD, truncated [ 205.161303][T12950] loop1: detected capacity change from 0 to 512 [ 205.168939][T12950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.181842][T12950] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 205.200156][T12950] EXT4-fs (loop1): 1 truncate cleaned up [ 205.211471][T12950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.224663][T12950] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.318918][T12960] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 205.336415][T12964] 9pnet_fd: Insufficient options for proto=fd [ 205.401238][T12968] loop2: detected capacity change from 0 to 128 [ 205.472438][T12972] IPv6: Can't replace route, no match found [ 205.529144][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.546556][T12972] loop1: detected capacity change from 0 to 8192 [ 205.585337][T12972] loop1: p1[EZD] p2 p3 p4 [ 205.590253][T12981] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 205.591521][T12980] IPv6: Can't replace route, no match found [ 205.600817][T12972] loop1: p1 size 32768 extends beyond EOD, truncated [ 205.614637][T12972] loop1: p2 start 930308 is beyond EOD, truncated [ 205.621224][T12972] loop1: p3 start 117772289 is beyond EOD, truncated [ 205.628011][T12972] loop1: p4 size 262144 extends beyond EOD, truncated [ 205.651145][T12980] loop2: detected capacity change from 0 to 8192 [ 205.685271][T12980] loop2: p1[EZD] p2 p3 p4 [ 205.689937][T12980] loop2: p1 size 32768 extends beyond EOD, truncated [ 205.697417][T12980] loop2: p2 start 930308 is beyond EOD, truncated [ 205.703890][T12980] loop2: p3 start 117772289 is beyond EOD, truncated [ 205.710649][T12980] loop2: p4 size 262144 extends beyond EOD, truncated [ 205.719612][ T29] kauditd_printk_skb: 2248 callbacks suppressed [ 205.719628][ T29] audit: type=1326 audit(1763897783.467:113988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12975 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56acfe65e7 code=0x7ffc0000 [ 205.749706][ T29] audit: type=1326 audit(1763897783.467:113989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12975 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56acf8b829 code=0x7ffc0000 [ 205.773575][ T29] audit: type=1326 audit(1763897783.467:113990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12975 comm="syz.3.3231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 205.799924][ T29] audit: type=1326 audit(1763897783.517:113991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.823767][ T29] audit: type=1326 audit(1763897783.517:113992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.847676][ T29] audit: type=1326 audit(1763897783.517:113993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.871861][ T29] audit: type=1326 audit(1763897783.517:113994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.895726][ T29] audit: type=1326 audit(1763897783.517:113995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.919867][ T29] audit: type=1326 audit(1763897783.517:113996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 205.944008][ T29] audit: type=1326 audit(1763897783.517:113997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12982 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 206.007155][T12994] team0 (unregistering): Port device team_slave_0 removed [ 206.017549][T12994] team0 (unregistering): Port device team_slave_1 removed [ 206.042767][T12996] 9pnet_fd: Insufficient options for proto=fd [ 206.163460][T13001] loop2: detected capacity change from 0 to 1024 [ 206.170583][T13001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.186753][T13001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.205632][T13001] netlink: '': attribute type 30 has an invalid length. [ 206.305762][T13006] loop4: detected capacity change from 0 to 128 [ 206.319099][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.366815][T13010] loop2: detected capacity change from 0 to 128 [ 206.424368][T13012] loop4: detected capacity change from 0 to 512 [ 206.432322][T13012] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.445656][T13012] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 206.470539][T13015] loop3: detected capacity change from 0 to 512 [ 206.477446][T13012] EXT4-fs (loop4): 1 truncate cleaned up [ 206.484937][T13015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.498283][T13015] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 206.528290][T13015] EXT4-fs (loop3): 1 truncate cleaned up [ 206.585297][T13028] loop3: detected capacity change from 0 to 512 [ 206.606802][T13028] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.638799][T13037] loop2: detected capacity change from 0 to 128 [ 206.693388][T13040] loop4: detected capacity change from 0 to 1024 [ 206.700730][T13040] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.740743][T13040] netlink: '': attribute type 30 has an invalid length. [ 206.771393][T13046] loop3: detected capacity change from 0 to 512 [ 206.778366][T13046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.788903][ T37] bio_check_eod: 1064 callbacks suppressed [ 206.788947][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.788947][ T37] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 206.792858][T13046] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 206.795480][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.795480][ T37] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 206.808240][T13046] block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 206.816617][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.816617][ T37] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 206.851929][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.851929][ T37] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 206.866162][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.866162][ T37] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 206.879976][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.879976][ T37] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 206.893669][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.893669][ T37] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 206.907390][T13046] EXT4-fs (loop3): 1 truncate cleaned up [ 206.907421][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.907421][ T37] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 206.932449][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.932449][ T37] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 206.956482][ T37] kworker/u8:2: attempt to access beyond end of device [ 206.956482][ T37] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 206.978210][T13052] 9pnet_fd: Insufficient options for proto=fd [ 207.007459][T13055] loop4: detected capacity change from 0 to 512 [ 207.014741][T13055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.028518][T13055] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 207.044821][T13055] EXT4-fs (loop4): 1 truncate cleaned up [ 207.100006][T13062] IPv6: Can't replace route, no match found [ 207.140952][T13070] loop2: detected capacity change from 0 to 128 [ 207.207941][T13074] tipc: Started in network mode [ 207.212895][T13074] tipc: Node identity e2387f018816, cluster identity 4711 [ 207.220174][T13074] tipc: Enabled bearer , priority 0 [ 207.224569][T13078] loop2: detected capacity change from 0 to 128 [ 207.233048][T13074] syzkaller0: entered promiscuous mode [ 207.233100][T13074] syzkaller0: entered allmulticast mode [ 207.247312][T13073] tipc: Resetting bearer [ 207.255574][T13073] tipc: Disabling bearer [ 207.385391][T13088] 9pnet_fd: Insufficient options for proto=fd [ 207.391738][T13085] loop3: detected capacity change from 0 to 512 [ 207.410907][T13089] loop4: detected capacity change from 0 to 512 [ 207.422186][T13089] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.434372][T13089] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 207.449699][T13085] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.474296][T13089] EXT4-fs (loop4): 1 truncate cleaned up [ 207.508897][T13098] loop2: detected capacity change from 0 to 512 [ 207.532382][T13098] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.620605][T13110] ip6gretap0: entered promiscuous mode [ 207.628967][T13112] IPv6: Can't replace route, no match found [ 207.638351][T13110] loop4: detected capacity change from 0 to 512 [ 207.673604][T13110] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.719947][T13112] loop3: detected capacity change from 0 to 8192 [ 207.733058][T13123] 9pnet_fd: Insufficient options for proto=fd [ 207.738610][T13122] ip6gretap0: entered promiscuous mode [ 207.765395][T13112] loop3: p1[EZD] p2 p3 p4 [ 207.782508][T13112] loop3: p1 size 32768 extends beyond EOD, truncated [ 207.798040][T13112] loop3: p2 start 930308 is beyond EOD, truncated [ 207.804572][T13112] loop3: p3 start 117772289 is beyond EOD, truncated [ 207.806552][T13127] loop1: detected capacity change from 0 to 1024 [ 207.811390][T13112] loop3: p4 size 262144 extends beyond EOD, truncated [ 207.820848][T13127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.862691][T13130] 9pnet: Could not find request transport: fd0x0000000000000004 [ 207.900367][T13142] loop2: detected capacity change from 0 to 128 [ 207.948657][T13145] netlink: '': attribute type 30 has an invalid length. [ 207.978290][T13151] 9pnet_fd: Insufficient options for proto=fd [ 208.001744][T13150] __nla_validate_parse: 14 callbacks suppressed [ 208.001762][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3294'. [ 208.020545][T13150] IPv6: Can't replace route, no match found [ 208.046263][T13157] loop4: detected capacity change from 0 to 1024 [ 208.053175][T13157] EXT4-fs: Ignoring removed nomblk_io_submit option [ 208.076665][T13150] loop3: detected capacity change from 0 to 8192 [ 208.084170][T13157] netlink: '': attribute type 30 has an invalid length. [ 208.115623][T13150] loop3: p1[EZD] p2 p3 p4 [ 208.120139][T13150] loop3: p1 size 32768 extends beyond EOD, truncated [ 208.127552][T13150] loop3: p2 start 930308 is beyond EOD, truncated [ 208.134000][T13150] loop3: p3 start 117772289 is beyond EOD, truncated [ 208.140980][T13150] loop3: p4 size 262144 extends beyond EOD, truncated [ 208.267642][T13173] FAULT_INJECTION: forcing a failure. [ 208.267642][T13173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.280868][T13173] CPU: 0 UID: 0 PID: 13173 Comm: syz.3.3302 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.280910][T13173] Tainted: [W]=WARN [ 208.280918][T13173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.280931][T13173] Call Trace: [ 208.280938][T13173] [ 208.280946][T13173] __dump_stack+0x1d/0x30 [ 208.280990][T13173] dump_stack_lvl+0xe8/0x140 [ 208.281016][T13173] dump_stack+0x15/0x1b [ 208.281094][T13173] should_fail_ex+0x265/0x280 [ 208.281129][T13173] should_fail+0xb/0x20 [ 208.281146][T13173] should_fail_usercopy+0x1a/0x20 [ 208.281173][T13173] copy_fpstate_to_sigframe+0x628/0x7d0 [ 208.281268][T13173] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 208.281316][T13173] ? x86_task_fpu+0x36/0x60 [ 208.281350][T13173] get_sigframe+0x34d/0x490 [ 208.281447][T13173] ? get_signal+0xdc7/0xf70 [ 208.281470][T13173] x64_setup_rt_frame+0xa8/0x580 [ 208.281504][T13173] arch_do_signal_or_restart+0x23e/0x440 [ 208.281537][T13173] exit_to_user_mode_loop+0x77/0x110 [ 208.281569][T13173] do_syscall_64+0x1d6/0x200 [ 208.281655][T13173] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.281690][T13173] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.281736][T13173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.281764][T13173] RIP: 0033:0x7f56acfef747 [ 208.281853][T13173] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 208.281877][T13173] RSP: 002b:00007f56aba4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 208.281901][T13173] RAX: 000000000000012b RBX: 00007f56ad245fa0 RCX: 00007f56acfef749 [ 208.281917][T13173] RDX: 0000000000000006 RSI: 0000200000007f80 RDI: 0000000000000006 [ 208.281931][T13173] RBP: 00007f56aba4f090 R08: 0000000000000000 R09: 0000000000000000 [ 208.281943][T13173] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 208.282011][T13173] R13: 00007f56ad246038 R14: 00007f56ad245fa0 R15: 00007ffc75465fc8 [ 208.282035][T13173] [ 208.543639][T13177] loop3: detected capacity change from 0 to 512 [ 208.576636][T13179] usb usb5: usbfs: process 13179 (syz.0.3304) did not claim interface 0 before use [ 208.580617][T13177] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.671713][T13184] tipc: Started in network mode [ 208.676844][T13184] tipc: Node identity ea38b6159cca, cluster identity 4711 [ 208.684141][T13184] tipc: Enabled bearer , priority 0 [ 208.692899][T13184] syzkaller0: entered promiscuous mode [ 208.698475][T13184] syzkaller0: entered allmulticast mode [ 208.712503][T13183] tipc: Resetting bearer [ 208.714947][T13187] x_tables: duplicate underflow at hook 4 [ 208.727513][T13183] tipc: Disabling bearer [ 208.765294][T13186] vhci_hcd: invalid port number 96 [ 208.770520][T13186] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 208.819429][T13193] loop3: detected capacity change from 0 to 512 [ 208.836550][T13193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 208.862581][T13193] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 208.877922][T13193] EXT4-fs (loop3): 1 truncate cleaned up [ 208.930653][T13200] loop3: detected capacity change from 0 to 1024 [ 208.944402][T13200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.009370][T13206] loop2: detected capacity change from 0 to 128 [ 209.039257][T13207] netlink: '': attribute type 30 has an invalid length. [ 209.056916][T13208] netlink: '': attribute type 30 has an invalid length. [ 209.187087][T13217] loop2: detected capacity change from 0 to 128 [ 209.201231][T13219] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3317'. [ 209.220912][T13219] loop1: detected capacity change from 0 to 512 [ 209.227864][T13219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 209.243623][T13219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 209.244968][T13223] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3320'. [ 209.268219][T13222] 9pnet_fd: Insufficient options for proto=fd [ 209.275636][T13219] EXT4-fs (loop1): 1 truncate cleaned up [ 209.279941][T13223] loop2: detected capacity change from 0 to 512 [ 209.288961][T13223] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.301426][T13223] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 209.319101][T13223] EXT4-fs (loop2): 1 truncate cleaned up [ 209.336449][T13227] loop1: detected capacity change from 0 to 1024 [ 209.344089][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.351830][T13229] loop4: detected capacity change from 0 to 128 [ 209.388813][T13233] loop2: detected capacity change from 0 to 1024 [ 209.395942][T13233] EXT4-fs: Ignoring removed bh option [ 209.401668][T13233] EXT4-fs: inline encryption not supported [ 209.410294][T13233] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.421745][T13233] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 209.430253][T13233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 209.436721][T13237] netlink: '': attribute type 30 has an invalid length. [ 209.445756][T13233] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.3324: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.460123][T13233] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3324: Failed to acquire dquot type 0 [ 209.471777][T13233] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.3324: Freeing blocks not in datazone - block = 0, count = 4096 [ 209.486144][T13233] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3324: Invalid inode bitmap blk 0 in block_group 0 [ 209.500292][T13233] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 209.509099][ T381] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.509145][T13233] EXT4-fs (loop2): 1 orphan inode deleted [ 209.524166][ T381] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 210.181489][T13254] FAULT_INJECTION: forcing a failure. [ 210.181489][T13254] name failslab, interval 1, probability 0, space 0, times 0 [ 210.194303][T13254] CPU: 1 UID: 0 PID: 13254 Comm: syz.0.3332 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.194336][T13254] Tainted: [W]=WARN [ 210.194343][T13254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.194355][T13254] Call Trace: [ 210.194363][T13254] [ 210.194438][T13254] __dump_stack+0x1d/0x30 [ 210.194470][T13254] dump_stack_lvl+0xe8/0x140 [ 210.194494][T13254] dump_stack+0x15/0x1b [ 210.194516][T13254] should_fail_ex+0x265/0x280 [ 210.194590][T13254] should_failslab+0x8c/0xb0 [ 210.194626][T13254] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 210.194713][T13254] ? __d_alloc+0x3d/0x340 [ 210.194806][T13254] __d_alloc+0x3d/0x340 [ 210.194877][T13254] d_alloc_parallel+0x58/0xc70 [ 210.194903][T13254] ? lockref_get_not_dead+0x120/0x1c0 [ 210.194937][T13254] ? __rcu_read_unlock+0x4f/0x70 [ 210.194969][T13254] __lookup_slow+0x8c/0x250 [ 210.195003][T13254] lookup_slow+0x3c/0x60 [ 210.195065][T13254] walk_component+0x1ec/0x220 [ 210.195104][T13254] path_lookupat+0xfe/0x2a0 [ 210.195145][T13254] filename_lookup+0x147/0x340 [ 210.195199][T13254] kern_path+0x3b/0x130 [ 210.195222][T13254] lookup_bdev+0x66/0x150 [ 210.195252][T13254] __se_sys_quotactl+0x1b7/0x670 [ 210.195317][T13254] ? fput+0x8f/0xc0 [ 210.195341][T13254] __x64_sys_quotactl+0x55/0x70 [ 210.195450][T13254] x64_sys_call+0x15d6/0x3000 [ 210.195519][T13254] do_syscall_64+0xd2/0x200 [ 210.195547][T13254] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 210.195618][T13254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.195643][T13254] RIP: 0033:0x7f428d2cf749 [ 210.195659][T13254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.195681][T13254] RSP: 002b:00007f428bd2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 210.195706][T13254] RAX: ffffffffffffffda RBX: 00007f428d525fa0 RCX: 00007f428d2cf749 [ 210.195722][T13254] RDX: 0000000000000000 RSI: 00002000000017c0 RDI: ffffffff80000800 [ 210.195780][T13254] RBP: 00007f428bd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.195796][T13254] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 210.195811][T13254] R13: 00007f428d526038 R14: 00007f428d525fa0 R15: 00007fffe03b5df8 [ 210.195834][T13254] [ 210.198029][T13256] loop3: detected capacity change from 0 to 128 [ 210.265991][T13258] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3333'. [ 210.495163][T13270] loop2: detected capacity change from 0 to 128 [ 210.506070][ T31] Buffer I/O error on dev loop3, logical block 1032, lost async page write [ 210.522556][T13272] loop4: detected capacity change from 0 to 1024 [ 210.530139][T13272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.560005][T13272] netlink: '': attribute type 30 has an invalid length. [ 210.725808][T13290] loop2: detected capacity change from 0 to 1024 [ 210.752939][T13290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 210.762393][T13292] FAULT_INJECTION: forcing a failure. [ 210.762393][T13292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.775557][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.3.3346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.775599][T13292] Tainted: [W]=WARN [ 210.775607][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.775624][T13292] Call Trace: [ 210.775631][T13292] [ 210.775640][T13292] __dump_stack+0x1d/0x30 [ 210.775726][T13292] dump_stack_lvl+0xe8/0x140 [ 210.775746][T13292] dump_stack+0x15/0x1b [ 210.775769][T13292] should_fail_ex+0x265/0x280 [ 210.775813][T13292] should_fail+0xb/0x20 [ 210.775834][T13292] should_fail_usercopy+0x1a/0x20 [ 210.775863][T13292] _copy_to_user+0x20/0xa0 [ 210.776046][T13292] simple_read_from_buffer+0xb5/0x130 [ 210.776073][T13292] proc_fail_nth_read+0x10e/0x150 [ 210.776109][T13292] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.776148][T13292] vfs_read+0x1a8/0x770 [ 210.776178][T13292] ? __rcu_read_unlock+0x4f/0x70 [ 210.776211][T13292] ? __fget_files+0x184/0x1c0 [ 210.776313][T13292] ksys_read+0xda/0x1a0 [ 210.776409][T13292] __x64_sys_read+0x40/0x50 [ 210.776434][T13292] x64_sys_call+0x27c0/0x3000 [ 210.776459][T13292] do_syscall_64+0xd2/0x200 [ 210.776486][T13292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.776530][T13292] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 210.776563][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.776633][T13292] RIP: 0033:0x7f56acfee15c [ 210.776652][T13292] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 210.776675][T13292] RSP: 002b:00007f56aba4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.776699][T13292] RAX: ffffffffffffffda RBX: 00007f56ad245fa0 RCX: 00007f56acfee15c [ 210.776731][T13292] RDX: 000000000000000f RSI: 00007f56aba4f0a0 RDI: 0000000000000007 [ 210.776742][T13292] RBP: 00007f56aba4f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.776754][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.776768][T13292] R13: 00007f56ad246038 R14: 00007f56ad245fa0 R15: 00007ffc75465fc8 [ 210.776792][T13292] [ 210.781413][T13295] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3347'. [ 210.942041][T13298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3348'. [ 211.007511][T13302] IPv6: Can't replace route, no match found [ 211.008033][T13295] loop4: detected capacity change from 0 to 512 [ 211.020747][T13295] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 211.032438][T13295] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 211.049554][T13295] EXT4-fs (loop4): 1 truncate cleaned up [ 211.056897][ T29] kauditd_printk_skb: 3438 callbacks suppressed [ 211.056915][ T29] audit: type=1326 audit(1763897788.797:117433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.108189][T13290] netlink: '': attribute type 30 has an invalid length. [ 211.130218][ T29] audit: type=1326 audit(1763897788.797:117434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.154092][ T29] audit: type=1326 audit(1763897788.797:117435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.158894][T13310] loop4: detected capacity change from 0 to 128 [ 211.177814][ T29] audit: type=1326 audit(1763897788.797:117436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.177853][ T29] audit: type=1326 audit(1763897788.797:117437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.231542][ T29] audit: type=1326 audit(1763897788.797:117438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.255388][ T29] audit: type=1326 audit(1763897788.797:117439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.279106][ T29] audit: type=1326 audit(1763897788.797:117440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.302766][ T29] audit: type=1326 audit(1763897788.797:117441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.326462][ T29] audit: type=1326 audit(1763897788.797:117443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13289 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 211.379476][T13323] loop1: detected capacity change from 0 to 128 [ 211.390031][T13324] loop3: detected capacity change from 0 to 512 [ 211.407369][T13324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 211.433115][T13324] EXT4-fs (loop3): 1 truncate cleaned up [ 211.481874][T13327] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 211.505711][T13334] loop4: detected capacity change from 0 to 128 [ 211.627168][T13349] loop3: detected capacity change from 0 to 128 [ 211.722793][T13361] loop3: detected capacity change from 0 to 128 [ 211.729427][ T37] Buffer I/O error on dev loop4, logical block 584, lost async page write [ 211.799049][T13367] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 211.858636][ T31] bio_check_eod: 787 callbacks suppressed [ 211.858649][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.858649][ T31] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 211.883606][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.883606][ T31] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 211.897578][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.897578][ T31] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 211.911685][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.911685][ T31] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 211.940372][T13380] netlink: '': attribute type 30 has an invalid length. [ 211.966934][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.966934][ T31] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 211.996873][ T31] kworker/u8:1: attempt to access beyond end of device [ 211.996873][ T31] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 212.025075][ T31] kworker/u8:1: attempt to access beyond end of device [ 212.025075][ T31] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 212.055062][ T31] kworker/u8:1: attempt to access beyond end of device [ 212.055062][ T31] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 212.083801][ T31] kworker/u8:1: attempt to access beyond end of device [ 212.083801][ T31] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 212.112724][ T31] kworker/u8:1: attempt to access beyond end of device [ 212.112724][ T31] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 212.182343][T13388] loop3: detected capacity change from 0 to 128 [ 212.235434][T13390] FAULT_INJECTION: forcing a failure. [ 212.235434][T13390] name failslab, interval 1, probability 0, space 0, times 0 [ 212.248145][T13390] CPU: 0 UID: 0 PID: 13390 Comm: syz.3.3383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.248181][T13390] Tainted: [W]=WARN [ 212.248190][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.248320][T13390] Call Trace: [ 212.248329][T13390] [ 212.248338][T13390] __dump_stack+0x1d/0x30 [ 212.248365][T13390] dump_stack_lvl+0xe8/0x140 [ 212.248496][T13390] dump_stack+0x15/0x1b [ 212.248520][T13390] should_fail_ex+0x265/0x280 [ 212.248562][T13390] should_failslab+0x8c/0xb0 [ 212.248609][T13390] __kmalloc_noprof+0xa5/0x570 [ 212.248690][T13390] ? security_prepare_creds+0x52/0x120 [ 212.248728][T13390] security_prepare_creds+0x52/0x120 [ 212.248759][T13390] prepare_creds+0x34a/0x4c0 [ 212.248793][T13390] copy_creds+0x8f/0x3f0 [ 212.248890][T13390] copy_process+0x658/0x2000 [ 212.248919][T13390] ? kstrtouint+0x76/0xc0 [ 212.248952][T13390] ? __rcu_read_unlock+0x4f/0x70 [ 212.248998][T13390] kernel_clone+0x16c/0x5c0 [ 212.249035][T13390] ? vfs_write+0x7e8/0x960 [ 212.249111][T13390] __x64_sys_clone+0xe6/0x120 [ 212.249173][T13390] x64_sys_call+0x119c/0x3000 [ 212.249257][T13390] do_syscall_64+0xd2/0x200 [ 212.249285][T13390] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.249322][T13390] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.249418][T13390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.249443][T13390] RIP: 0033:0x7f56acfef749 [ 212.249463][T13390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.249489][T13390] RSP: 002b:00007f56aba4efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 212.249511][T13390] RAX: ffffffffffffffda RBX: 00007f56ad245fa0 RCX: 00007f56acfef749 [ 212.249523][T13390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026801000 [ 212.249569][T13390] RBP: 00007f56aba4f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.249584][T13390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 212.249599][T13390] R13: 00007f56ad246038 R14: 00007f56ad245fa0 R15: 00007ffc75465fc8 [ 212.249624][T13390] [ 212.529325][T13394] loop3: detected capacity change from 0 to 128 [ 212.586588][T13396] loop2: detected capacity change from 0 to 128 [ 212.768168][T13404] loop3: detected capacity change from 0 to 512 [ 212.808112][T13404] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.899932][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3390'. [ 212.933685][T13420] loop2: detected capacity change from 0 to 1024 [ 212.950784][T13420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.047527][T13428] netlink: '': attribute type 30 has an invalid length. [ 213.088019][T13431] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3396'. [ 213.109997][T13431] loop4: detected capacity change from 0 to 512 [ 213.117664][T13431] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.130439][T13431] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 213.148246][T13431] EXT4-fs (loop4): 1 truncate cleaned up [ 213.184929][T13436] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 213.196782][T13436] SELinux: failed to load policy [ 213.203268][T13438] loop4: detected capacity change from 0 to 128 [ 213.390054][T13442] loop3: detected capacity change from 0 to 1024 [ 213.410780][T13442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.450352][T13446] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3400'. [ 213.504453][T13449] netlink: '': attribute type 30 has an invalid length. [ 213.596921][T13455] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 213.777561][T13469] tipc: Started in network mode [ 213.782535][T13469] tipc: Node identity e68db83824ec, cluster identity 4711 [ 213.789887][T13469] tipc: Enabled bearer , priority 0 [ 213.799272][T13469] syzkaller0: entered promiscuous mode [ 213.804814][T13469] syzkaller0: entered allmulticast mode [ 213.812227][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3410'. [ 213.818592][T13469] tipc: Resetting bearer [ 213.828444][T13468] tipc: Resetting bearer [ 213.829828][T13471] IPv6: Can't replace route, no match found [ 213.842051][T13468] tipc: Disabling bearer [ 213.874759][T13471] loop2: detected capacity change from 0 to 8192 [ 213.926062][T13471] loop2: p1[EZD] p2 p3 p4 [ 213.934985][T13471] loop2: p1 size 32768 extends beyond EOD, truncated [ 213.945441][T13471] loop2: p2 start 930308 is beyond EOD, truncated [ 213.951960][T13471] loop2: p3 start 117772289 is beyond EOD, truncated [ 213.958738][T13471] loop2: p4 size 262144 extends beyond EOD, truncated [ 213.969376][T13475] loop4: detected capacity change from 0 to 512 [ 213.997717][T13475] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.012683][T13475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3412'. [ 214.055746][T13487] loop4: detected capacity change from 0 to 128 [ 214.126533][T13489] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 214.168471][T13496] netlink: '': attribute type 30 has an invalid length. [ 214.217996][T13502] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3422'. [ 214.227362][T13500] loop1: detected capacity change from 0 to 1024 [ 214.234554][T13500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.244220][T13502] loop2: detected capacity change from 0 to 512 [ 214.256069][T13502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.269236][T13502] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 214.298362][T13502] EXT4-fs (loop2): 1 truncate cleaned up [ 214.315593][T13511] netlink: '': attribute type 30 has an invalid length. [ 214.325628][T13513] loop3: detected capacity change from 0 to 512 [ 214.339663][T13513] EXT4-fs: Ignoring removed oldalloc option [ 214.358177][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3425: Parent and EA inode have the same ino 15 [ 214.375202][T13513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.3425: Parent and EA inode have the same ino 15 [ 214.387956][T13513] EXT4-fs (loop3): 1 orphan inode deleted [ 214.389565][T13519] loop4: detected capacity change from 0 to 128 [ 214.403165][T13519] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 214.439432][T13519] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 214.477465][T13528] loop3: detected capacity change from 0 to 1024 [ 214.492113][T13528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.595258][T13534] netlink: '': attribute type 30 has an invalid length. [ 215.333120][T13552] FAULT_INJECTION: forcing a failure. [ 215.333120][T13552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.346375][T13552] CPU: 1 UID: 0 PID: 13552 Comm: syz.0.3436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.346417][T13552] Tainted: [W]=WARN [ 215.346425][T13552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.346454][T13552] Call Trace: [ 215.346462][T13552] [ 215.346472][T13552] __dump_stack+0x1d/0x30 [ 215.346501][T13552] dump_stack_lvl+0xe8/0x140 [ 215.346586][T13552] dump_stack+0x15/0x1b [ 215.346609][T13552] should_fail_ex+0x265/0x280 [ 215.346694][T13552] should_fail+0xb/0x20 [ 215.346716][T13552] should_fail_usercopy+0x1a/0x20 [ 215.346743][T13552] _copy_from_user+0x1c/0xb0 [ 215.346780][T13552] copy_from_sockptr_offset+0x66/0xa0 [ 215.346808][T13552] do_ip6t_set_ctl+0x5d1/0x840 [ 215.346829][T13552] ? kstrtoull+0x111/0x140 [ 215.346921][T13552] ? __rcu_read_unlock+0x4f/0x70 [ 215.346953][T13552] nf_setsockopt+0x199/0x1b0 [ 215.346980][T13552] ipv6_setsockopt+0x11a/0x130 [ 215.347015][T13552] tcp_setsockopt+0x98/0xb0 [ 215.347034][T13552] sock_common_setsockopt+0x69/0x80 [ 215.347149][T13552] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.347184][T13552] __sys_setsockopt+0x184/0x200 [ 215.347227][T13552] __x64_sys_setsockopt+0x64/0x80 [ 215.347307][T13552] x64_sys_call+0x20ec/0x3000 [ 215.347337][T13552] do_syscall_64+0xd2/0x200 [ 215.347364][T13552] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.347477][T13552] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.347521][T13552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.347624][T13552] RIP: 0033:0x7f428d2cf749 [ 215.347646][T13552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.347669][T13552] RSP: 002b:00007f428bd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.347697][T13552] RAX: ffffffffffffffda RBX: 00007f428d525fa0 RCX: 00007f428d2cf749 [ 215.347709][T13552] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 215.347720][T13552] RBP: 00007f428bd2f090 R08: 0000000000000500 R09: 0000000000000000 [ 215.347732][T13552] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.347809][T13552] R13: 00007f428d526038 R14: 00007f428d525fa0 R15: 00007fffe03b5df8 [ 215.347827][T13552] [ 215.577778][T13549] loop4: detected capacity change from 0 to 1024 [ 215.582600][T13553] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3437'. [ 215.584877][T13549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.603102][T13553] loop2: detected capacity change from 0 to 512 [ 215.615390][T13553] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 215.626821][T13556] loop1: detected capacity change from 0 to 128 [ 215.644765][T13553] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 215.663779][T13562] loop3: detected capacity change from 0 to 128 [ 215.664254][T13553] EXT4-fs (loop2): 1 truncate cleaned up [ 215.706587][T13549] netlink: '': attribute type 30 has an invalid length. [ 215.862570][T13579] tipc: Enabled bearer , priority 0 [ 215.869878][T13579] syzkaller0: entered promiscuous mode [ 215.875539][T13579] syzkaller0: entered allmulticast mode [ 215.886593][T13579] tipc: Resetting bearer [ 215.893891][T13578] tipc: Resetting bearer [ 215.901025][T13577] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.913351][T13578] tipc: Disabling bearer [ 216.002252][T13582] loop3: detected capacity change from 0 to 128 [ 216.071907][ T29] kauditd_printk_skb: 3382 callbacks suppressed [ 216.071923][ T29] audit: type=1326 audit(1763897793.807:120825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4611b65e7 code=0x7ffc0000 [ 216.120124][ T29] audit: type=1326 audit(1763897793.837:120826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc46115b829 code=0x7ffc0000 [ 216.143828][ T29] audit: type=1326 audit(1763897793.837:120827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4611b65e7 code=0x7ffc0000 [ 216.167788][ T29] audit: type=1326 audit(1763897793.837:120828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc46115b829 code=0x7ffc0000 [ 216.181825][T13585] loop4: detected capacity change from 0 to 128 [ 216.191494][ T29] audit: type=1326 audit(1763897793.837:120829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 216.208070][T13585] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.221353][ T29] audit: type=1326 audit(1763897793.857:120830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4611b65e7 code=0x7ffc0000 [ 216.255330][ T29] audit: type=1326 audit(1763897793.857:120831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc46115b829 code=0x7ffc0000 [ 216.278998][ T29] audit: type=1326 audit(1763897793.857:120832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fc4611bf749 code=0x7ffc0000 [ 216.303455][ T29] audit: type=1326 audit(1763897793.857:120833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4611b65e7 code=0x7ffc0000 [ 216.327324][ T29] audit: type=1326 audit(1763897793.857:120834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13565 comm="syz.2.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc46115b829 code=0x7ffc0000 [ 216.369957][T13590] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3449'. [ 216.387569][T13590] loop3: detected capacity change from 0 to 512 [ 216.394796][T13590] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.406624][T13590] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 216.421904][T13590] EXT4-fs (loop3): 1 truncate cleaned up [ 216.554219][T13600] loop4: detected capacity change from 0 to 128 [ 216.591059][T13603] loop2: detected capacity change from 0 to 128 [ 216.709158][T13608] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 216.729367][T13616] loop4: detected capacity change from 0 to 512 [ 216.738646][T13616] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 216.758391][T13610] netlink: '': attribute type 30 has an invalid length. [ 216.773051][T13616] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 216.824611][T13616] EXT4-fs (loop4): 1 truncate cleaned up [ 216.842926][T13628] loop3: detected capacity change from 0 to 1024 [ 216.850359][T13628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.944658][T13639] netlink: '': attribute type 30 has an invalid length. [ 216.965371][T13641] loop2: detected capacity change from 0 to 128 [ 216.978798][T13641] bio_check_eod: 827 callbacks suppressed [ 216.978828][T13641] syz.2.3468: attempt to access beyond end of device [ 216.978828][T13641] loop2: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 216.999638][T13641] syz.2.3468: attempt to access beyond end of device [ 216.999638][T13641] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 217.015808][T13641] syz.2.3468: attempt to access beyond end of device [ 217.015808][T13641] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 217.029639][T13646] loop4: detected capacity change from 0 to 128 [ 217.031076][T13641] syz.2.3468: attempt to access beyond end of device [ 217.031076][T13641] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 217.046465][T13646] syz.4.3470: attempt to access beyond end of device [ 217.046465][T13646] loop4: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 217.050393][T13641] syz.2.3468: attempt to access beyond end of device [ 217.050393][T13641] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 217.065954][T13646] syz.4.3470: attempt to access beyond end of device [ 217.065954][T13646] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 217.090373][T13646] syz.4.3470: attempt to access beyond end of device [ 217.090373][T13646] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 217.104683][T13646] syz.4.3470: attempt to access beyond end of device [ 217.104683][T13646] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 217.119158][T13641] syz.2.3468: attempt to access beyond end of device [ 217.119158][T13641] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 217.296467][T13658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 217.320044][T13662] loop4: detected capacity change from 0 to 1024 [ 217.327610][T13662] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.410380][T13666] netlink: '': attribute type 30 has an invalid length. [ 217.699490][T13671] loop1: detected capacity change from 0 to 128 [ 217.821806][T13677] loop3: detected capacity change from 0 to 8192 [ 217.857001][T13677] loop3: p1[EZD] p2 p3 p4 [ 217.862151][T13677] loop3: p1 size 32768 extends beyond EOD, truncated [ 217.871246][T13677] loop3: p2 start 930308 is beyond EOD, truncated [ 217.877914][T13677] loop3: p3 start 117772289 is beyond EOD, truncated [ 217.884766][T13677] loop3: p4 size 262144 extends beyond EOD, truncated [ 218.087934][T13690] FAULT_INJECTION: forcing a failure. [ 218.087934][T13690] name failslab, interval 1, probability 0, space 0, times 0 [ 218.101113][T13690] CPU: 0 UID: 0 PID: 13690 Comm: syz.0.3485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.101190][T13690] Tainted: [W]=WARN [ 218.101196][T13690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.101208][T13690] Call Trace: [ 218.101214][T13690] [ 218.101221][T13690] __dump_stack+0x1d/0x30 [ 218.101302][T13690] dump_stack_lvl+0xe8/0x140 [ 218.101321][T13690] dump_stack+0x15/0x1b [ 218.101337][T13690] should_fail_ex+0x265/0x280 [ 218.101395][T13690] should_failslab+0x8c/0xb0 [ 218.101424][T13690] __kvmalloc_node_noprof+0x12e/0x670 [ 218.101462][T13690] ? xt_alloc_entry_offsets+0x4d/0x60 [ 218.101520][T13690] xt_alloc_entry_offsets+0x4d/0x60 [ 218.101610][T13690] translate_table+0xa9/0xf90 [ 218.101628][T13690] ? __rcu_read_unlock+0x4f/0x70 [ 218.101653][T13690] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 218.101728][T13690] ? should_fail_ex+0xdb/0x280 [ 218.101766][T13690] ? _copy_from_user+0x89/0xb0 [ 218.101840][T13690] do_ipt_set_ctl+0x66f/0x820 [ 218.101858][T13690] ? _raw_spin_unlock_bh+0x36/0x40 [ 218.101883][T13690] ? tcp_release_cb+0xf1/0x370 [ 218.101959][T13690] nf_setsockopt+0x199/0x1b0 [ 218.102064][T13690] ip_setsockopt+0x102/0x110 [ 218.102106][T13690] tcp_setsockopt+0x98/0xb0 [ 218.102125][T13690] sock_common_setsockopt+0x69/0x80 [ 218.102225][T13690] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 218.102250][T13690] __sys_setsockopt+0x184/0x200 [ 218.102282][T13690] __x64_sys_setsockopt+0x64/0x80 [ 218.102313][T13690] x64_sys_call+0x20ec/0x3000 [ 218.102372][T13690] do_syscall_64+0xd2/0x200 [ 218.102390][T13690] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 218.102442][T13690] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 218.102487][T13690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.102508][T13690] RIP: 0033:0x7f428d2cf749 [ 218.102525][T13690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.102546][T13690] RSP: 002b:00007f428bd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.102563][T13690] RAX: ffffffffffffffda RBX: 00007f428d525fa0 RCX: 00007f428d2cf749 [ 218.102625][T13690] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007 [ 218.102636][T13690] RBP: 00007f428bd2f090 R08: 0000000000000468 R09: 0000000000000000 [ 218.102695][T13690] R10: 0000200000001640 R11: 0000000000000246 R12: 0000000000000001 [ 218.102706][T13690] R13: 00007f428d526038 R14: 00007f428d525fa0 R15: 00007fffe03b5df8 [ 218.102725][T13690] [ 218.377285][T13688] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 218.383910][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 218.391401][T13688] vhci_hcd vhci_hcd.0: Device attached [ 218.400023][T13692] loop2: detected capacity change from 0 to 512 [ 218.412463][T13688] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 218.419148][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.426817][T13688] vhci_hcd vhci_hcd.0: Device attached [ 218.437167][T13688] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.439098][T13692] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.445853][T13688] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 218.466277][T13688] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(18) [ 218.473099][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.480756][T13688] vhci_hcd vhci_hcd.0: Device attached [ 218.492979][T13692] __nla_validate_parse: 2 callbacks suppressed [ 218.492998][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3486'. [ 218.510481][T13688] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(20) [ 218.517171][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.524908][T13688] vhci_hcd vhci_hcd.0: Device attached [ 218.553821][T13704] vhci_hcd: connection closed [ 218.554007][T13702] vhci_hcd: connection closed [ 218.559006][ T37] vhci_hcd: stop threads [ 218.568245][ T37] vhci_hcd: release socket [ 218.572710][ T37] vhci_hcd: disconnect device [ 218.577536][ T10] vhci_hcd: vhci_device speed not set [ 218.586867][T13695] vhci_hcd: connection closed [ 218.587416][T13698] vhci_hcd: connection closed [ 218.598018][ T37] vhci_hcd: stop threads [ 218.607056][ T37] vhci_hcd: release socket [ 218.611704][ T37] vhci_hcd: disconnect device [ 218.617267][ T37] vhci_hcd: stop threads [ 218.621658][ T37] vhci_hcd: release socket [ 218.626227][ T37] vhci_hcd: disconnect device [ 218.633084][ T37] vhci_hcd: stop threads [ 218.637435][ T37] vhci_hcd: release socket [ 218.639247][T13711] loop4: detected capacity change from 0 to 128 [ 218.641894][ T37] vhci_hcd: disconnect device [ 218.642209][ T10] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 218.661147][ T10] usb 7-1: enqueue for inactive port 0 [ 218.666769][ T10] usb 7-1: enqueue for inactive port 0 [ 218.672349][ T10] usb 7-1: enqueue for inactive port 0 [ 218.687639][T13713] loop1: detected capacity change from 0 to 128 [ 218.788035][ T10] vhci_hcd: vhci_device speed not set [ 218.891877][T13719] FAULT_INJECTION: forcing a failure. [ 218.891877][T13719] name failslab, interval 1, probability 0, space 0, times 0 [ 218.904602][T13719] CPU: 0 UID: 0 PID: 13719 Comm: syz.2.3491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 218.904689][T13719] Tainted: [W]=WARN [ 218.904698][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 218.904715][T13719] Call Trace: [ 218.904725][T13719] [ 218.904741][T13719] __dump_stack+0x1d/0x30 [ 218.904768][T13719] dump_stack_lvl+0xe8/0x140 [ 218.904788][T13719] dump_stack+0x15/0x1b [ 218.904891][T13719] should_fail_ex+0x265/0x280 [ 218.904936][T13719] should_failslab+0x8c/0xb0 [ 218.904969][T13719] __kvmalloc_node_noprof+0x12e/0x670 [ 218.905078][T13719] ? alloc_fdtable+0xc2/0x1d0 [ 218.905103][T13719] alloc_fdtable+0xc2/0x1d0 [ 218.905206][T13719] dup_fd+0x4c7/0x540 [ 218.905230][T13719] ? _raw_spin_unlock+0x26/0x50 [ 218.905306][T13719] ksys_unshare+0x346/0x6d0 [ 218.905342][T13719] ? ksys_write+0x192/0x1a0 [ 218.905412][T13719] __x64_sys_unshare+0x1f/0x30 [ 218.905453][T13719] x64_sys_call+0x2915/0x3000 [ 218.905497][T13719] do_syscall_64+0xd2/0x200 [ 218.905517][T13719] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 218.905546][T13719] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 218.905590][T13719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.905682][T13719] RIP: 0033:0x7fc4611bf749 [ 218.905697][T13719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.905718][T13719] RSP: 002b:00007fc45fbe5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.905749][T13719] RAX: ffffffffffffffda RBX: 00007fc461416180 RCX: 00007fc4611bf749 [ 218.905766][T13719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000680 [ 218.905782][T13719] RBP: 00007fc45fbe5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.905858][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.905874][T13719] R13: 00007fc461416218 R14: 00007fc461416180 R15: 00007ffd32707e28 [ 218.905899][T13719] [ 219.184824][T13721] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3492'. [ 219.271780][T13721] loop1: detected capacity change from 0 to 8192 [ 219.295306][T13721] loop1: p1[EZD] p2 p3 p4 [ 219.299911][T13721] loop1: p1 size 32768 extends beyond EOD, truncated [ 219.307938][T13721] loop1: p2 start 930308 is beyond EOD, truncated [ 219.314409][T13721] loop1: p3 start 117772289 is beyond EOD, truncated [ 219.321181][T13721] loop1: p4 size 262144 extends beyond EOD, truncated [ 219.353620][T13729] loop4: detected capacity change from 0 to 512 [ 219.364593][T13729] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.367134][T13732] ip6gretap0: entered promiscuous mode [ 219.383703][T13732] loop3: detected capacity change from 0 to 512 [ 219.391491][T13729] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 219.406881][T13729] EXT4-fs (loop4): 1 truncate cleaned up [ 219.425839][T13732] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.452818][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3497'. [ 219.490361][T13741] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 219.520056][T13748] tipc: Enabled bearer , priority 0 [ 219.528057][T13748] syzkaller0: entered promiscuous mode [ 219.533653][T13748] syzkaller0: entered allmulticast mode [ 219.548742][T13748] tipc: Resetting bearer [ 219.557044][T13747] tipc: Resetting bearer [ 219.593856][T13747] tipc: Disabling bearer [ 219.600705][T13752] FAULT_INJECTION: forcing a failure. [ 219.600705][T13752] name failslab, interval 1, probability 0, space 0, times 0 [ 219.613786][T13752] CPU: 0 UID: 0 PID: 13752 Comm: syz.2.3505 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.613819][T13752] Tainted: [W]=WARN [ 219.613825][T13752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.613838][T13752] Call Trace: [ 219.613848][T13752] [ 219.613855][T13752] __dump_stack+0x1d/0x30 [ 219.613878][T13752] dump_stack_lvl+0xe8/0x140 [ 219.613904][T13752] dump_stack+0x15/0x1b [ 219.613924][T13752] should_fail_ex+0x265/0x280 [ 219.614034][T13752] should_failslab+0x8c/0xb0 [ 219.614103][T13752] __kmalloc_noprof+0xa5/0x570 [ 219.614147][T13752] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 219.614185][T13752] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 219.614268][T13752] genl_family_rcv_msg_doit+0x48/0x1b0 [ 219.614335][T13752] ? selinux_capable+0x31/0x40 [ 219.614358][T13752] ? security_capable+0x83/0x90 [ 219.614395][T13752] ? ns_capable+0x7d/0xb0 [ 219.614426][T13752] genl_rcv_msg+0x422/0x460 [ 219.614496][T13752] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 219.614523][T13752] netlink_rcv_skb+0x123/0x220 [ 219.614559][T13752] ? __pfx_genl_rcv_msg+0x10/0x10 [ 219.614598][T13752] genl_rcv+0x28/0x40 [ 219.614679][T13752] netlink_unicast+0x5c0/0x690 [ 219.614718][T13752] netlink_sendmsg+0x58b/0x6b0 [ 219.614795][T13752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.614825][T13752] __sock_sendmsg+0x145/0x180 [ 219.614935][T13752] ____sys_sendmsg+0x31e/0x4e0 [ 219.614972][T13752] ___sys_sendmsg+0x17b/0x1d0 [ 219.615010][T13752] __x64_sys_sendmsg+0xd4/0x160 [ 219.615040][T13752] x64_sys_call+0x191e/0x3000 [ 219.615069][T13752] do_syscall_64+0xd2/0x200 [ 219.615139][T13752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 219.615169][T13752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 219.615209][T13752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.615306][T13752] RIP: 0033:0x7fc4611bf749 [ 219.615322][T13752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.615339][T13752] RSP: 002b:00007fc45fc27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.615433][T13752] RAX: ffffffffffffffda RBX: 00007fc461415fa0 RCX: 00007fc4611bf749 [ 219.615448][T13752] RDX: 0000000004000080 RSI: 0000200000000500 RDI: 0000000000000003 [ 219.615460][T13752] RBP: 00007fc45fc27090 R08: 0000000000000000 R09: 0000000000000000 [ 219.615476][T13752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.615491][T13752] R13: 00007fc461416038 R14: 00007fc461415fa0 R15: 00007ffd32707e28 [ 219.615538][T13752] [ 219.877180][T13754] loop3: detected capacity change from 0 to 128 [ 219.984032][T13763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3509'. [ 220.036152][T13768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3508'. [ 220.047457][T13768] IPv6: Can't replace route, no match found [ 220.072011][T13770] loop3: detected capacity change from 0 to 512 [ 220.079279][T13763] loop1: detected capacity change from 0 to 8192 [ 220.088151][T13770] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 220.100171][T13770] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 220.115973][T13770] EXT4-fs (loop3): 1 truncate cleaned up [ 220.145352][T13763] loop1: p1[EZD] p2 p3 p4 [ 220.150074][T13763] loop1: p1 size 32768 extends beyond EOD, truncated [ 220.157840][T13763] loop1: p2 start 930308 is beyond EOD, truncated [ 220.164436][T13763] loop1: p3 start 117772289 is beyond EOD, truncated [ 220.171277][T13763] loop1: p4 size 262144 extends beyond EOD, truncated [ 220.246753][T13777] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 220.260320][T13777] team0 (unregistering): Port device team_slave_0 removed [ 220.269846][T13777] team0 (unregistering): Port device team_slave_1 removed [ 220.306546][T13782] loop1: detected capacity change from 0 to 128 [ 220.334019][T13784] loop4: detected capacity change from 0 to 512 [ 220.340909][T13784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 220.361996][T13784] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 220.379597][T13787] loop3: detected capacity change from 0 to 128 [ 220.386125][T13784] EXT4-fs (loop4): 1 truncate cleaned up [ 220.450358][T13792] loop1: detected capacity change from 0 to 128 [ 220.517875][T13795] netlink: '': attribute type 30 has an invalid length. [ 220.576483][T13803] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3523'. [ 220.582272][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3524'. [ 220.597792][T13805] IPv6: Can't replace route, no match found [ 220.601109][T13803] loop1: detected capacity change from 0 to 512 [ 220.611480][T13803] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.623409][T13803] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 220.639389][T13803] EXT4-fs (loop1): 1 truncate cleaned up [ 220.652644][T13805] loop3: detected capacity change from 0 to 8192 [ 220.690035][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3526'. [ 220.696766][T13805] loop3: p1[EZD] p2 p3 p4 [ 220.703901][T13805] loop3: p1 size 32768 extends beyond EOD, truncated [ 220.711896][T13805] loop3: p2 start 930308 is beyond EOD, truncated [ 220.718474][T13805] loop3: p3 start 117772289 is beyond EOD, truncated [ 220.725228][T13805] loop3: p4 size 262144 extends beyond EOD, truncated [ 220.749986][T13810] loop1: detected capacity change from 0 to 8192 [ 220.766097][T13812] loop2: detected capacity change from 0 to 1024 [ 220.772889][T13812] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.795752][T13810] loop1: p1[EZD] p2 p3 p4 [ 220.800823][T13810] loop1: p1 size 32768 extends beyond EOD, truncated [ 220.801933][T13812] netlink: '': attribute type 30 has an invalid length. [ 220.808908][T13810] loop1: p2 start 930308 is beyond EOD, truncated [ 220.821167][T13810] loop1: p3 start 117772289 is beyond EOD, truncated [ 220.828353][T13810] loop1: p4 size 262144 extends beyond EOD, truncated [ 220.886335][T11889] EXT4-fs unmount: 93 callbacks suppressed [ 220.886426][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.913365][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.920977][T13821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.929055][T13821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.936689][T13821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.951207][T13823] loop1: detected capacity change from 0 to 1024 [ 220.958540][T13823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.988662][T13823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.014301][T13823] netlink: '': attribute type 30 has an invalid length. [ 221.076978][ T29] kauditd_printk_skb: 2683 callbacks suppressed [ 221.076993][ T29] audit: type=1326 audit(1763897798.817:123519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 221.106227][ T29] audit: type=1326 audit(1763897798.817:123520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13822 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 221.129072][ T29] audit: type=1326 audit(1763897798.817:123521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.153451][ T29] audit: type=1326 audit(1763897798.817:123522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.177199][ T29] audit: type=1326 audit(1763897798.817:123523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.200954][ T29] audit: type=1326 audit(1763897798.817:123524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.224685][ T29] audit: type=1326 audit(1763897798.817:123525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.248462][ T29] audit: type=1326 audit(1763897798.817:123526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.272398][ T29] audit: type=1326 audit(1763897798.817:123527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.296322][ T29] audit: type=1326 audit(1763897798.847:123528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.0.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f428d302005 code=0x7ffc0000 [ 221.352034][T13836] loop2: detected capacity change from 0 to 128 [ 221.359847][T13839] loop3: detected capacity change from 0 to 128 [ 221.442500][T13844] IPv6: Can't replace route, no match found [ 221.461574][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.495224][T13848] FAULT_INJECTION: forcing a failure. [ 221.495224][T13848] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 221.508663][T13848] CPU: 1 UID: 0 PID: 13848 Comm: syz.0.3539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.508697][T13848] Tainted: [W]=WARN [ 221.508703][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.508718][T13848] Call Trace: [ 221.508726][T13848] [ 221.508736][T13848] __dump_stack+0x1d/0x30 [ 221.508764][T13848] dump_stack_lvl+0xe8/0x140 [ 221.508816][T13848] dump_stack+0x15/0x1b [ 221.508843][T13848] should_fail_ex+0x265/0x280 [ 221.508950][T13848] should_fail_alloc_page+0xf2/0x100 [ 221.509040][T13848] __alloc_frozen_pages_noprof+0xff/0x360 [ 221.509078][T13848] alloc_pages_mpol+0xb3/0x260 [ 221.509172][T13848] folio_alloc_mpol_noprof+0x39/0x80 [ 221.509198][T13848] shmem_get_folio_gfp+0x3cf/0xd60 [ 221.509235][T13848] ? simple_xattr_get+0xb9/0x120 [ 221.509325][T13848] shmem_write_begin+0xa8/0x190 [ 221.509354][T13848] generic_perform_write+0x184/0x490 [ 221.509380][T13848] ? _raw_spin_unlock+0x26/0x50 [ 221.509441][T13848] shmem_file_write_iter+0xc5/0xf0 [ 221.509484][T13848] do_iter_readv_writev+0x4a1/0x540 [ 221.509525][T13848] vfs_writev+0x2df/0x8b0 [ 221.509643][T13848] __se_sys_pwritev2+0xfc/0x1c0 [ 221.509679][T13848] __x64_sys_pwritev2+0x67/0x80 [ 221.509727][T13848] x64_sys_call+0x2c59/0x3000 [ 221.509755][T13848] do_syscall_64+0xd2/0x200 [ 221.509781][T13848] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.509889][T13848] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.509975][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.510002][T13848] RIP: 0033:0x7f428d2cf749 [ 221.510018][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.510059][T13848] RSP: 002b:00007f428bd2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 221.510086][T13848] RAX: ffffffffffffffda RBX: 00007f428d525fa0 RCX: 00007f428d2cf749 [ 221.510102][T13848] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 221.510116][T13848] RBP: 00007f428bd2f090 R08: 0000000000000000 R09: 0000000000000003 [ 221.510130][T13848] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000001 [ 221.510178][T13848] R13: 00007f428d526038 R14: 00007f428d525fa0 R15: 00007fffe03b5df8 [ 221.510200][T13848] [ 221.561392][T13854] loop1: detected capacity change from 0 to 128 [ 221.592617][T13844] loop4: detected capacity change from 0 to 8192 [ 221.774562][T13863] loop3: detected capacity change from 0 to 512 [ 221.781866][T13863] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 221.792397][T13844] loop4: p1[EZD] p2 p3 p4 [ 221.798097][T13844] loop4: p1 size 32768 extends beyond EOD, truncated [ 221.805497][T13844] loop4: p2 start 930308 is beyond EOD, truncated [ 221.811984][T13844] loop4: p3 start 117772289 is beyond EOD, truncated [ 221.818728][T13844] loop4: p4 size 262144 extends beyond EOD, truncated [ 221.840576][T13863] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 221.855943][T13863] EXT4-fs (loop3): 1 truncate cleaned up [ 221.861904][T13863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.902114][T13870] FAULT_INJECTION: forcing a failure. [ 221.902114][T13870] name failslab, interval 1, probability 0, space 0, times 0 [ 221.915160][T13870] CPU: 1 UID: 0 PID: 13870 Comm: syz.1.3547 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.915247][T13870] Tainted: [W]=WARN [ 221.915256][T13870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.915272][T13870] Call Trace: [ 221.915280][T13870] [ 221.915290][T13870] __dump_stack+0x1d/0x30 [ 221.915341][T13870] dump_stack_lvl+0xe8/0x140 [ 221.915366][T13870] dump_stack+0x15/0x1b [ 221.915387][T13870] should_fail_ex+0x265/0x280 [ 221.915486][T13870] should_failslab+0x8c/0xb0 [ 221.915520][T13870] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 221.915562][T13870] ? sidtab_sid2str_get+0xa0/0x130 [ 221.915606][T13870] kmemdup_noprof+0x2b/0x70 [ 221.915680][T13870] sidtab_sid2str_get+0xa0/0x130 [ 221.915721][T13870] security_sid_to_context_core+0x1eb/0x2e0 [ 221.915762][T13870] security_sid_to_context+0x27/0x40 [ 221.915858][T13870] selinux_lsmprop_to_secctx+0x67/0xf0 [ 221.915891][T13870] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 221.915998][T13870] audit_log_subj_ctx+0xa4/0x3e0 [ 221.916021][T13870] ? skb_put+0xa9/0xf0 [ 221.916055][T13870] audit_log_task_context+0x48/0x70 [ 221.916146][T13870] audit_log_task+0xf4/0x250 [ 221.916187][T13870] ? kstrtouint+0x76/0xc0 [ 221.916265][T13870] audit_seccomp+0x61/0x100 [ 221.916295][T13870] ? __seccomp_filter+0x82d/0x1250 [ 221.916329][T13870] __seccomp_filter+0x83e/0x1250 [ 221.916367][T13870] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 221.916526][T13870] ? vfs_write+0x7e8/0x960 [ 221.916555][T13870] ? __rcu_read_unlock+0x4f/0x70 [ 221.916725][T13870] ? __fget_files+0x184/0x1c0 [ 221.916756][T13870] __secure_computing+0x82/0x150 [ 221.916792][T13870] syscall_trace_enter+0xcf/0x1e0 [ 221.916896][T13870] do_syscall_64+0xac/0x200 [ 221.916918][T13870] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.916949][T13870] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.916999][T13870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.917045][T13870] RIP: 0033:0x7fa967eff749 [ 221.917065][T13870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.917084][T13870] RSP: 002b:00007fa966967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 221.917103][T13870] RAX: ffffffffffffffda RBX: 00007fa968155fa0 RCX: 00007fa967eff749 [ 221.917115][T13870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 221.917130][T13870] RBP: 00007fa966967090 R08: 0000000000000000 R09: 0000000000000000 [ 221.917145][T13870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.917215][T13870] R13: 00007fa968156038 R14: 00007fa968155fa0 R15: 00007ffecaad2e18 [ 221.917235][T13870] [ 222.194239][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.200234][T13871] netlink: '': attribute type 30 has an invalid length. [ 222.261820][T13880] loop1: detected capacity change from 0 to 128 [ 222.306141][T13887] loop3: detected capacity change from 0 to 128 [ 222.320288][T13887] bio_check_eod: 1011 callbacks suppressed [ 222.320304][T13887] syz.3.3553: attempt to access beyond end of device [ 222.320304][T13887] loop3: rw=2049, sector=145, nr_sectors = 40 limit=128 [ 222.339938][T13887] syz.3.3553: attempt to access beyond end of device [ 222.339938][T13887] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 222.348192][T13880] syz.1.3551: attempt to access beyond end of device [ 222.348192][T13880] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 222.366821][T13887] syz.3.3553: attempt to access beyond end of device [ 222.366821][T13887] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 222.367234][T13880] syz.1.3551: attempt to access beyond end of device [ 222.367234][T13880] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 222.394131][T13880] syz.1.3551: attempt to access beyond end of device [ 222.394131][T13880] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 222.407995][T13880] syz.1.3551: attempt to access beyond end of device [ 222.407995][T13880] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 222.409932][T13887] syz.3.3553: attempt to access beyond end of device [ 222.409932][T13887] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 222.421852][T13880] syz.1.3551: attempt to access beyond end of device [ 222.421852][T13880] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 222.450453][T13880] syz.1.3551: attempt to access beyond end of device [ 222.450453][T13880] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 222.471046][T13891] loop4: detected capacity change from 0 to 512 [ 222.482007][T13891] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 222.507100][T13891] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 222.524350][T13891] EXT4-fs (loop4): 1 truncate cleaned up [ 222.530678][T13891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.544056][T13891] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.621490][T13902] loop3: detected capacity change from 0 to 128 [ 222.839611][T13924] loop4: detected capacity change from 0 to 128 [ 222.923283][T13932] loop2: detected capacity change from 0 to 128 [ 223.003328][T13940] loop4: detected capacity change from 0 to 128 [ 223.121928][T13953] loop2: detected capacity change from 0 to 128 [ 223.252144][T13962] loop3: detected capacity change from 0 to 512 [ 223.256535][T13958] loop4: detected capacity change from 0 to 8192 [ 223.280420][T13962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.295866][T13962] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.315227][T13958] loop4: p1[EZD] p2 p3 p4 [ 223.323069][T13958] loop4: p1 size 32768 extends beyond EOD, truncated [ 223.332852][T13958] loop4: p2 start 930308 is beyond EOD, truncated [ 223.339405][T13958] loop4: p3 start 117772289 is beyond EOD, truncated [ 223.346161][T13958] loop4: p4 size 262144 extends beyond EOD, truncated [ 223.387434][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.399314][T13975] syz.2.3584 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 223.418494][T13977] loop3: detected capacity change from 0 to 512 [ 223.433817][T13979] loop2: detected capacity change from 0 to 512 [ 223.441332][T13977] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.451997][T13979] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.466111][T13979] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 223.481289][T13977] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 223.485147][T13981] IPv6: Can't replace route, no match found [ 223.496199][T13979] EXT4-fs (loop2): 1 truncate cleaned up [ 223.507586][T13977] EXT4-fs (loop3): 1 truncate cleaned up [ 223.513727][T13977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.534129][T13979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.554510][T13977] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.564098][T13979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.565528][T13988] loop1: detected capacity change from 0 to 128 [ 223.627885][T13981] loop4: detected capacity change from 0 to 8192 [ 223.681547][T13997] loop3: detected capacity change from 0 to 512 [ 223.689369][T13981] loop4: p1[EZD] p2 p3 p4 [ 223.694055][T13981] loop4: p1 size 32768 extends beyond EOD, truncated [ 223.709309][T13997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 223.720092][T13981] loop4: p2 start 930308 is beyond EOD, truncated [ 223.726616][T13981] loop4: p3 start 117772289 is beyond EOD, truncated [ 223.733460][T13981] loop4: p4 size 262144 extends beyond EOD, truncated [ 223.747168][T13997] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 223.775383][T13997] EXT4-fs (loop3): 1 truncate cleaned up [ 223.781541][T13997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.829017][T13997] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.879097][T14015] loop2: detected capacity change from 0 to 1024 [ 223.901776][T14015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.903267][T14018] __nla_validate_parse: 11 callbacks suppressed [ 223.903305][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3601'. [ 223.929479][T14018] IPv6: Can't replace route, no match found [ 223.958138][T14015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.970873][T14018] loop3: detected capacity change from 0 to 8192 [ 224.010369][T14024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3603'. [ 224.032251][T14018] loop3: p1[EZD] p2 p3 p4 [ 224.037052][T14018] loop3: p1 size 32768 extends beyond EOD, truncated [ 224.056822][T14025] netlink: '': attribute type 30 has an invalid length. [ 224.064003][T14018] loop3: p2 start 930308 is beyond EOD, truncated [ 224.070556][T14018] loop3: p3 start 117772289 is beyond EOD, truncated [ 224.077368][T14018] loop3: p4 size 262144 extends beyond EOD, truncated [ 224.107414][T14024] loop1: detected capacity change from 0 to 8192 [ 224.165571][T14024] loop1: p1[EZD] p2 p3 p4 [ 224.174569][T14024] loop1: p1 size 32768 extends beyond EOD, truncated [ 224.185471][T14024] loop1: p2 start 930308 is beyond EOD, truncated [ 224.192061][T14024] loop1: p3 start 117772289 is beyond EOD, truncated [ 224.198838][T14024] loop1: p4 size 262144 extends beyond EOD, truncated [ 224.244304][T14037] loop3: detected capacity change from 0 to 128 [ 224.430489][T14049] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3611'. [ 224.466765][T14046] netlink: '+}[@': attribute type 1 has an invalid length. [ 224.645879][T14061] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3617'. [ 224.661726][T14061] loop1: detected capacity change from 0 to 512 [ 224.668864][T14061] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.680359][T14061] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 224.695786][T14061] EXT4-fs (loop1): 1 truncate cleaned up [ 224.701947][T14061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.730789][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.793795][T14066] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3618'. [ 224.804455][T14069] loop3: detected capacity change from 0 to 128 [ 224.818345][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.917348][T14066] loop1: detected capacity change from 0 to 8192 [ 224.945317][T14066] loop1: p1[EZD] p2 p3 p4 [ 224.951390][T14066] loop1: p1 size 32768 extends beyond EOD, truncated [ 224.965569][T14066] loop1: p2 start 930308 is beyond EOD, truncated [ 224.966091][T14078] loop2: detected capacity change from 0 to 1024 [ 224.972159][T14066] loop1: p3 start 117772289 is beyond EOD, truncated [ 224.979288][T14078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.985261][T14066] loop1: p4 size 262144 extends beyond EOD, truncated [ 225.018688][T14078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.053654][T14088] loop4: detected capacity change from 0 to 512 [ 225.054366][T14090] loop3: detected capacity change from 0 to 164 [ 225.072057][T14078] netlink: '': attribute type 30 has an invalid length. [ 225.079505][T14090] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 225.092951][T14090] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 225.103022][T14088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.122077][T14088] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.139280][T14094] loop1: detected capacity change from 0 to 1024 [ 225.146953][T14094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.157983][T14097] loop3: detected capacity change from 0 to 128 [ 225.186265][T14094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.232770][T12069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.244434][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.291702][T14105] netlink: '': attribute type 30 has an invalid length. [ 225.454649][T14130] loop3: detected capacity change from 0 to 1024 [ 225.461961][T14130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.477419][T14130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.512099][T14130] netlink: '': attribute type 30 has an invalid length. [ 225.610514][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.728164][T14147] loop3: detected capacity change from 0 to 128 [ 225.923752][T14153] loop3: detected capacity change from 0 to 1024 [ 225.930900][T14153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.948768][T14153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.016331][T14153] netlink: '': attribute type 30 has an invalid length. [ 226.027371][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.093587][ T29] kauditd_printk_skb: 1833 callbacks suppressed [ 226.093607][ T29] audit: type=1326 audit(1763897803.827:125360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.140934][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.172357][ T29] audit: type=1326 audit(1763897803.827:125361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.196280][ T29] audit: type=1326 audit(1763897803.847:125362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.220079][ T29] audit: type=1326 audit(1763897803.847:125363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.243909][ T29] audit: type=1326 audit(1763897803.847:125364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.267866][ T29] audit: type=1326 audit(1763897803.847:125365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.291635][ T29] audit: type=1326 audit(1763897803.847:125366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.315398][ T29] audit: type=1326 audit(1763897803.847:125367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.316160][T14174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3655'. [ 226.339266][ T29] audit: type=1326 audit(1763897803.847:125368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.371922][ T29] audit: type=1326 audit(1763897803.847:125369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14166 comm="syz.1.3654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa967eff749 code=0x7ffc0000 [ 226.404094][T14172] IPv6: Can't replace route, no match found [ 226.473692][T14172] loop3: detected capacity change from 0 to 8192 [ 226.487265][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3661'. [ 226.495792][T14179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 226.499418][T14183] IPv6: Can't replace route, no match found [ 226.518131][T14172] loop3: p1[EZD] p2 p3 p4 [ 226.522735][T14172] loop3: p1 size 32768 extends beyond EOD, truncated [ 226.537607][T14172] loop3: p2 start 930308 is beyond EOD, truncated [ 226.544103][T14172] loop3: p3 start 117772289 is beyond EOD, truncated [ 226.550907][T14172] loop3: p4 size 262144 extends beyond EOD, truncated [ 226.586523][T14187] loop4: detected capacity change from 0 to 512 [ 226.604146][T14187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.638891][T14187] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 226.653781][T14187] EXT4-fs (loop4): 1 truncate cleaned up [ 226.674162][T14187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.703760][T14187] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.713017][T14194] loop3: detected capacity change from 0 to 512 [ 226.731123][T14194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.765731][T14198] loop4: detected capacity change from 0 to 128 [ 226.772170][T14194] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.875210][T14206] loop2: detected capacity change from 0 to 128 [ 226.895967][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.958417][T14210] netlink: '': attribute type 30 has an invalid length. [ 227.026681][T14219] loop1: detected capacity change from 0 to 128 [ 227.120688][T14229] loop2: detected capacity change from 0 to 1024 [ 227.137818][T14229] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.168865][T14229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.235581][T14229] netlink: '': attribute type 30 has an invalid length. [ 227.257730][T14237] loop3: detected capacity change from 0 to 128 [ 227.289818][T14241] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3684'. [ 227.308457][T14241] loop4: detected capacity change from 0 to 512 [ 227.327983][T14241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 227.345901][T14241] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 227.374500][T14241] EXT4-fs (loop4): 1 truncate cleaned up [ 227.386056][T14229] (14229) used greatest stack depth: 9824 bytes left [ 227.386139][T14241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.431414][T14241] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.445605][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.491992][ T37] bio_check_eod: 1423 callbacks suppressed [ 227.492007][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.492007][ T37] loop3: rw=1, sector=153, nr_sectors = 8 limit=128 [ 227.527312][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.527312][ T37] loop3: rw=1, sector=169, nr_sectors = 8 limit=128 [ 227.547140][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.547140][ T37] loop3: rw=1, sector=185, nr_sectors = 8 limit=128 [ 227.561108][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.561108][ T37] loop3: rw=1, sector=201, nr_sectors = 8 limit=128 [ 227.574707][T14256] loop1: detected capacity change from 0 to 512 [ 227.575049][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.575049][ T37] loop3: rw=1, sector=217, nr_sectors = 8 limit=128 [ 227.595021][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.595021][ T37] loop3: rw=1, sector=233, nr_sectors = 8 limit=128 [ 227.595321][T14260] loop2: detected capacity change from 0 to 512 [ 227.608775][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.608775][ T37] loop3: rw=1, sector=249, nr_sectors = 8 limit=128 [ 227.616601][T14256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.628768][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.628768][ T37] loop3: rw=1, sector=265, nr_sectors = 8 limit=128 [ 227.642880][T14256] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.656172][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.656172][ T37] loop3: rw=1, sector=281, nr_sectors = 8 limit=128 [ 227.671582][T14256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 227.680385][ T37] kworker/u8:2: attempt to access beyond end of device [ 227.680385][ T37] loop3: rw=1, sector=297, nr_sectors = 8 limit=128 [ 227.691688][T14260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.713778][T14260] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.734466][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.754192][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 227.768382][T14272] loop1: detected capacity change from 0 to 128 [ 227.803609][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.899841][T14279] loop1: detected capacity change from 0 to 1024 [ 227.906888][T14279] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.918994][T14279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.928500][T14276] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.952406][T14279] netlink: '': attribute type 30 has an invalid length. [ 228.014728][T14289] loop3: detected capacity change from 0 to 1024 [ 228.024998][T14289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 228.064118][T14289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.081147][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.114716][T14289] netlink: '': attribute type 30 has an invalid length. [ 228.118068][T14300] loop4: detected capacity change from 0 to 512 [ 228.138512][T14300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.151405][T14306] loop1: detected capacity change from 0 to 512 [ 228.169603][T14312] loop2: detected capacity change from 0 to 128 [ 228.171343][T14300] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.176670][T14306] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.201414][T14306] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 228.222528][T14306] EXT4-fs (loop1): 1 truncate cleaned up [ 228.229070][T14306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.229669][T12069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.264387][T14306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.264865][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.375841][T14328] loop4: detected capacity change from 0 to 128 [ 228.376607][T14327] loop2: detected capacity change from 0 to 512 [ 228.415493][T14327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.454650][T14336] loop1: detected capacity change from 0 to 128 [ 228.464943][T14327] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.569540][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.705753][T14358] IPv6: Can't replace route, no match found [ 228.753170][T14358] loop4: detected capacity change from 0 to 8192 [ 228.814215][T14372] loop1: detected capacity change from 0 to 128 [ 228.821191][T14358] loop4: p1[EZD] p2 p3 p4 [ 228.826610][T14358] loop4: p1 size 32768 extends beyond EOD, truncated [ 228.835801][T14358] loop4: p2 start 930308 is beyond EOD, truncated [ 228.842291][T14358] loop4: p3 start 117772289 is beyond EOD, truncated [ 228.849078][T14358] loop4: p4 size 262144 extends beyond EOD, truncated [ 228.962787][T14379] tipc: Enabled bearer , priority 0 [ 228.970914][T14379] syzkaller0: entered promiscuous mode [ 228.976504][T14379] syzkaller0: entered allmulticast mode [ 228.986802][T14378] tipc: Resetting bearer [ 228.995681][T14381] loop4: detected capacity change from 0 to 128 [ 229.003171][T14378] tipc: Disabling bearer [ 229.073426][T14383] loop1: detected capacity change from 0 to 512 [ 229.098908][T14383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.123673][T14383] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.143769][T14383] __nla_validate_parse: 4 callbacks suppressed [ 229.143795][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3733'. [ 229.206068][T14396] loop3: detected capacity change from 0 to 128 [ 229.235187][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.265835][T14400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3737'. [ 229.304209][T14406] loop1: detected capacity change from 0 to 128 [ 229.313683][T14404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3741'. [ 229.349429][T14404] IPv6: Can't replace route, no match found [ 229.364414][T14409] loop3: detected capacity change from 0 to 1024 [ 229.378620][T14409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 229.409148][T14409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.469288][T14404] loop4: detected capacity change from 0 to 8192 [ 229.494974][T14416] tipc: Enabled bearer , priority 0 [ 229.504053][T14417] netlink: '': attribute type 30 has an invalid length. [ 229.511670][T14416] syzkaller0: entered promiscuous mode [ 229.515526][T14404] loop4: p1[EZD] p2 p3 p4 [ 229.517281][T14416] syzkaller0: entered allmulticast mode [ 229.522470][T14404] loop4: p1 size 32768 extends beyond EOD, truncated [ 229.536059][T14404] loop4: p2 start 930308 is beyond EOD, truncated [ 229.542529][T14404] loop4: p3 start 117772289 is beyond EOD, truncated [ 229.549336][T14404] loop4: p4 size 262144 extends beyond EOD, truncated [ 229.564887][T14415] tipc: Resetting bearer [ 229.575226][T14415] tipc: Disabling bearer [ 229.683169][T14426] loop4: detected capacity change from 0 to 128 [ 229.780650][T14431] loop1: detected capacity change from 0 to 512 [ 229.796866][T14431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.817958][T14431] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.842262][T14431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3749'. [ 229.867054][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.888272][T14441] netlink: 'syz.4.3753': attribute type 1 has an invalid length. [ 229.897384][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3753'. [ 229.900312][T14443] loop1: detected capacity change from 0 to 128 [ 229.935102][T14445] loop4: detected capacity change from 0 to 128 [ 230.028535][T14449] tipc: Enabled bearer , priority 0 [ 230.036103][T14449] syzkaller0: entered promiscuous mode [ 230.041628][T14449] syzkaller0: entered allmulticast mode [ 230.056983][T14448] tipc: Resetting bearer [ 230.067812][T14448] tipc: Disabling bearer [ 230.129499][T14453] FAULT_INJECTION: forcing a failure. [ 230.129499][T14453] name failslab, interval 1, probability 0, space 0, times 0 [ 230.142308][T14453] CPU: 0 UID: 0 PID: 14453 Comm: syz.4.3756 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.142460][T14453] Tainted: [W]=WARN [ 230.142468][T14453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.142482][T14453] Call Trace: [ 230.142491][T14453] [ 230.142500][T14453] __dump_stack+0x1d/0x30 [ 230.142527][T14453] dump_stack_lvl+0xe8/0x140 [ 230.142550][T14453] dump_stack+0x15/0x1b [ 230.142584][T14453] should_fail_ex+0x265/0x280 [ 230.142622][T14453] should_failslab+0x8c/0xb0 [ 230.142724][T14453] __kmalloc_noprof+0xa5/0x570 [ 230.142773][T14453] ? memcg_list_lru_alloc+0x195/0x490 [ 230.142798][T14453] memcg_list_lru_alloc+0x195/0x490 [ 230.142904][T14453] __memcg_slab_post_alloc_hook+0x1a7/0x580 [ 230.142930][T14453] kmem_cache_alloc_lru_noprof+0x2c1/0x490 [ 230.142961][T14453] ? mqueue_alloc_inode+0x34/0x50 [ 230.143038][T14453] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 230.143066][T14453] mqueue_alloc_inode+0x34/0x50 [ 230.143093][T14453] alloc_inode+0x40/0x170 [ 230.143125][T14453] new_inode+0x1d/0xe0 [ 230.143231][T14453] mqueue_get_inode+0x26/0x6a0 [ 230.143274][T14453] mqueue_create_attr+0x172/0x260 [ 230.143374][T14453] ? __pfx_mqueue_create_attr+0x10/0x10 [ 230.143483][T14453] vfs_mkobj+0xa5/0x1c0 [ 230.143510][T14453] do_mq_open+0x385/0x4f0 [ 230.143547][T14453] ? should_fail_ex+0xdb/0x280 [ 230.143583][T14453] __x64_sys_mq_open+0xcb/0x100 [ 230.143694][T14453] x64_sys_call+0x8c6/0x3000 [ 230.143724][T14453] do_syscall_64+0xd2/0x200 [ 230.143770][T14453] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.143839][T14453] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.143884][T14453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.143913][T14453] RIP: 0033:0x7f6187d0f749 [ 230.143933][T14453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.143979][T14453] RSP: 002b:00007f6186756038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 230.144004][T14453] RAX: ffffffffffffffda RBX: 00007f6187f66090 RCX: 00007f6187d0f749 [ 230.144019][T14453] RDX: 0000000000000011 RSI: 0000000000000040 RDI: 0000200000000000 [ 230.144030][T14453] RBP: 00007f6186756090 R08: 0000000000000000 R09: 0000000000000000 [ 230.144042][T14453] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 230.144054][T14453] R13: 00007f6187f66128 R14: 00007f6187f66090 R15: 00007ffed21049c8 [ 230.144073][T14453] [ 230.422525][T14459] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3759'. [ 230.441604][T14459] loop1: detected capacity change from 0 to 512 [ 230.457889][T14459] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 230.468899][T12506] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.500492][T14459] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 230.526741][T14466] loop3: detected capacity change from 0 to 128 [ 230.534759][T14459] EXT4-fs (loop1): 1 truncate cleaned up [ 230.546314][T14459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.580355][T12243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.606232][T14471] loop2: detected capacity change from 0 to 128 [ 230.630801][T14474] 9pnet_fd: Insufficient options for proto=fd [ 230.648107][T14467] loop4: detected capacity change from 0 to 512 [ 230.684963][T14478] loop1: detected capacity change from 0 to 128 [ 230.694525][T14467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.710623][T14467] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.724425][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3762'. [ 230.805540][T12069] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.899209][T14493] unsupported nla_type 52263 [ 230.906062][T14492] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 230.918696][T14493] loop2: detected capacity change from 0 to 512 [ 230.936214][T14493] EXT4-fs: Ignoring removed nobh option [ 230.941931][T14493] EXT4-fs: Ignoring removed nomblk_io_submit option [ 230.980755][T14493] EXT4-fs (loop2): 1 truncate cleaned up [ 230.995252][T14493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.019825][T14493] netlink: 'syz.2.3770': attribute type 12 has an invalid length. [ 231.073363][T11889] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.098601][ T29] kauditd_printk_skb: 1240 callbacks suppressed [ 231.098632][ T29] audit: type=1326 audit(1763897808.837:126610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.128821][ T29] audit: type=1326 audit(1763897808.837:126611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.164603][ T29] audit: type=1326 audit(1763897808.837:126612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.188387][ T29] audit: type=1326 audit(1763897808.837:126613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.193438][T14510] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3775'. [ 231.212181][ T29] audit: type=1326 audit(1763897808.837:126614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.212222][ T29] audit: type=1326 audit(1763897808.837:126615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.212255][ T29] audit: type=1326 audit(1763897808.837:126616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.212347][ T29] audit: type=1326 audit(1763897808.837:126617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.316183][ T29] audit: type=1326 audit(1763897808.837:126618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.339994][ T29] audit: type=1326 audit(1763897808.837:126619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14505 comm="syz.3.3774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56acfef749 code=0x7ffc0000 [ 231.392000][T14513] loop4: detected capacity change from 0 to 1024 [ 231.399027][T14513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 231.407292][T14510] loop2: detected capacity change from 0 to 512 [ 231.414663][T14510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 231.427673][T14513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.444322][T14510] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 231.460641][T14510] EXT4-fs (loop2): 1 truncate cleaned up [ 231.468825][T14513] netlink: '': attribute type 30 has an invalid length. [ 231.521620][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3777'. [ 231.624213][T14530] loop4: detected capacity change from 0 to 128 [ 231.863321][T14547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3787'. [ 231.876530][T14547] IPv6: Can't replace route, no match found [ 231.915400][T14547] loop1: detected capacity change from 0 to 8192 [ 231.946878][T14549] loop3: detected capacity change from 0 to 128 [ 231.963467][T14551] loop4: detected capacity change from 0 to 128 [ 231.965159][T14547] loop1: p1[EZD] p2 p3 p4 [ 231.980089][T14547] loop1: p1 size 32768 extends beyond EOD, truncated [ 231.988026][T14547] loop1: p2 start 930308 is beyond EOD, truncated [ 231.994507][T14547] loop1: p3 start 117772289 is beyond EOD, truncated [ 232.001364][T14547] loop1: p4 size 262144 extends beyond EOD, truncated [ 232.048314][T14554] loop3: detected capacity change from 0 to 128 [ 232.113822][T14557] loop1: detected capacity change from 0 to 128 [ 232.202495][T14567] FAULT_INJECTION: forcing a failure. [ 232.202495][T14567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.215785][T14567] CPU: 0 UID: 0 PID: 14567 Comm: syz.3.3794 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.215908][T14567] Tainted: [W]=WARN [ 232.215918][T14567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.215935][T14567] Call Trace: [ 232.215944][T14567] [ 232.215954][T14567] __dump_stack+0x1d/0x30 [ 232.215983][T14567] dump_stack_lvl+0xe8/0x140 [ 232.216013][T14567] dump_stack+0x15/0x1b [ 232.216036][T14567] should_fail_ex+0x265/0x280 [ 232.216081][T14567] should_fail+0xb/0x20 [ 232.216159][T14567] should_fail_usercopy+0x1a/0x20 [ 232.216186][T14567] _copy_to_user+0x20/0xa0 [ 232.216219][T14567] simple_read_from_buffer+0xb5/0x130 [ 232.216285][T14567] proc_fail_nth_read+0x10e/0x150 [ 232.216327][T14567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.216367][T14567] vfs_read+0x1a8/0x770 [ 232.216397][T14567] ? __rcu_read_unlock+0x4f/0x70 [ 232.216537][T14567] ? __fget_files+0x184/0x1c0 [ 232.216576][T14567] ksys_read+0xda/0x1a0 [ 232.216610][T14567] __x64_sys_read+0x40/0x50 [ 232.216642][T14567] x64_sys_call+0x27c0/0x3000 [ 232.216671][T14567] do_syscall_64+0xd2/0x200 [ 232.216705][T14567] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.216771][T14567] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 232.216889][T14567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.216943][T14567] RIP: 0033:0x7f56acfee15c [ 232.216962][T14567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.216986][T14567] RSP: 002b:00007f56aba4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.217011][T14567] RAX: ffffffffffffffda RBX: 00007f56ad245fa0 RCX: 00007f56acfee15c [ 232.217027][T14567] RDX: 000000000000000f RSI: 00007f56aba4f0a0 RDI: 0000000000000003 [ 232.217042][T14567] RBP: 00007f56aba4f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.217105][T14567] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 232.217120][T14567] R13: 00007f56ad246038 R14: 00007f56ad245fa0 R15: 00007ffc75465fc8 [ 232.217145][T14567] [ 232.499628][T14576] loop2: detected capacity change from 0 to 164 [ 232.577430][T14578] loop1: detected capacity change from 0 to 512 [ 232.638768][T14586] loop3: detected capacity change from 0 to 512 [ 232.650099][T14592] loop2: detected capacity change from 0 to 1024 [ 232.660069][T14592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.670721][T14578] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.687009][T14586] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.717354][T14602] loop4: detected capacity change from 0 to 1024 [ 232.724308][T14602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.766883][T14604] loop1: detected capacity change from 0 to 512 [ 232.767886][T14602] netlink: '': attribute type 30 has an invalid length. [ 232.788519][T14604] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.808717][T14611] loop3: detected capacity change from 0 to 512 [ 232.815313][T14607] netlink: '': attribute type 30 has an invalid length. [ 232.828174][T14611] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.903546][T14622] loop4: detected capacity change from 0 to 128 [ 232.999954][T14632] loop1: detected capacity change from 0 to 164 [ 233.003133][T14627] loop3: detected capacity change from 0 to 8192 [ 233.045462][T14627] loop3: p1[EZD] p2 p3 p4 [ 233.050489][T14627] loop3: p1 size 32768 extends beyond EOD, truncated [ 233.057811][T14634] loop1: detected capacity change from 0 to 128 [ 233.058110][T14627] loop3: p2 start 930308 is beyond EOD, truncated [ 233.070716][T14627] loop3: p3 start 117772289 is beyond EOD, truncated [ 233.077615][T14627] loop3: p4 size 262144 extends beyond EOD, truncated [ 233.097955][T14634] bio_check_eod: 1791 callbacks suppressed [ 233.097976][T14634] syz.1.3814: attempt to access beyond end of device [ 233.097976][T14634] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 233.117626][T14634] syz.1.3814: attempt to access beyond end of device [ 233.117626][T14634] loop1: rw=2049, sector=161, nr_sectors = 32 limit=128 [ 233.132637][T14634] syz.1.3814: attempt to access beyond end of device [ 233.132637][T14634] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 233.146210][T14634] syz.1.3814: attempt to access beyond end of device [ 233.146210][T14634] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 233.171780][T14634] syz.1.3814: attempt to access beyond end of device [ 233.171780][T14634] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 233.200203][T14634] syz.1.3814: attempt to access beyond end of device [ 233.200203][T14634] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 233.214299][T14634] syz.1.3814: attempt to access beyond end of device [ 233.214299][T14634] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 233.228646][T14634] syz.1.3814: attempt to access beyond end of device [ 233.228646][T14634] loop1: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 233.252879][T14637] loop3: detected capacity change from 0 to 512 [ 233.260152][T14637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 233.270918][ T37] kworker/u8:2: attempt to access beyond end of device [ 233.270918][ T37] loop1: rw=1, sector=297, nr_sectors = 80 limit=128 [ 233.285015][ T37] kworker/u8:2: attempt to access beyond end of device [ 233.285015][ T37] loop1: rw=1, sector=385, nr_sectors = 8 limit=128 [ 233.296990][T14637] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 233.313497][T14637] EXT4-fs (loop3): 1 truncate cleaned up [ 233.327040][T14640] ================================================================== [ 233.335271][T14640] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 233.342583][T14640] [ 233.344932][T14640] write to 0xffff888100173b00 of 8 bytes by task 14641 on cpu 1: [ 233.352866][T14640] mas_wmb_replace+0x208/0xfa0 [ 233.357869][T14640] mas_wr_store_entry+0x13e3/0x2750 [ 233.363096][T14640] mas_store_prealloc+0x760/0xa90 [ 233.368146][T14640] vma_iter_store_new+0x1c5/0x200 [ 233.373196][T14640] mmap_region+0x10f7/0x1620 [ 233.377812][T14640] do_mmap+0x9b3/0xbe0 [ 233.381897][T14640] vm_mmap_pgoff+0x17a/0x2e0 [ 233.386512][T14640] ksys_mmap_pgoff+0xc2/0x310 [ 233.391290][T14640] x64_sys_call+0x14a3/0x3000 [ 233.395983][T14640] do_syscall_64+0xd2/0x200 [ 233.400501][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.406410][T14640] [ 233.408743][T14640] read to 0xffff888100173b00 of 8 bytes by task 14640 on cpu 0: [ 233.416386][T14640] mas_state_walk+0x485/0x650 [ 233.421086][T14640] mas_walk+0x60/0x150 [ 233.425183][T14640] lock_vma_under_rcu+0x95/0x170 [ 233.430146][T14640] do_user_addr_fault+0x233/0x1080 [ 233.435271][T14640] exc_page_fault+0x62/0xa0 [ 233.439806][T14640] asm_exc_page_fault+0x26/0x30 [ 233.444686][T14640] [ 233.447018][T14640] value changed: 0xffff88811a898601 -> 0xffff888100173b00 [ 233.454131][T14640] [ 233.456469][T14640] Reported by Kernel Concurrency Sanitizer on: [ 233.462633][T14640] CPU: 0 UID: 0 PID: 14640 Comm: syz.1.3816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 233.474029][T14640] Tainted: [W]=WARN [ 233.477844][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.487911][T14640] ================================================================== [ 233.501471][T14641] loop1: detected capacity change from 0 to 512 [ 233.518153][T14641] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 233.526243][T14641] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 233.535608][T14641] System zones: 0-1, 15-15, 18-18, 34-34 [ 233.541550][T14641] EXT4-fs (loop1): orphan cleanup on readonly fs [ 233.548331][T14641] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 233.562948][T14641] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 233.570199][T14641] EXT4-fs (loop1): 1 truncate cleaned up [ 233.584334][T14622] Buffer I/O error on dev loop4, logical block 128, lost async page write