last executing test programs: 24.713733454s ago: executing program 1 (id=586): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xffe}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sysvipc/msg\x00', 0x0, 0x0) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x86a, 0x0, 0x0) lseek(r2, 0xf5, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "193914", 0x48, 0x2f, 0x100, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0xffff}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x0, 0x6e]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x2, 0xc4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x4, 0x2, 0x3, 0xb, 0x0, 0xb}, &(0x7f00000000c0)=0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x60, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4800000, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000b, 0x110, r0, 0xdd207000) 24.282237226s ago: executing program 1 (id=592): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)=@ethtool_cmd={0x3, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x8, 0x0, 0x87, 0x0, 0x80000, 0x0, 0x1, 0x8, 0x0, 0x80000045, [0x2, 0x89ff]}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000010406000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000002000638000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d3076cf94cc54c66333b7cc27aa888d268d49148e42c922f253e49b1c0249432ebdb4ed002c11546aa1d9c68fd41e723c28a9151eca61e78c391cf563b9347f3ce7644dc896a6a588119eb1a78f4ca00afcf2281a2270e07644a8caf295c0916507799b3ec48e5a76ba3fc3114782ae0c5e836b8bcd76e5e2f31e5128335bf885f045e6c1ca133cb9c23ec097a16fcee08ba9c2ec800af47c388cac61674fd7be85d479fdf4365a052109cc5d9bad904fab20a1a1f314026ee1866b3b1502b5a60673c5332a1e28551af299569e605b13985aa3fae980cb772b20771d65c30be21ea1ce0ee0c852462046909269e2a5e9", @ANYRES32=r5], 0x58}}, 0x44000) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffed, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000ffffff7f00000000000000000000000000000000000000000a"], 0x16c}, 0x1, 0x0, 0x0, 0x2012851}, 0x90) 23.184978389s ago: executing program 1 (id=602): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.118077131s ago: executing program 1 (id=603): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002200a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x24000000) 23.117599801s ago: executing program 1 (id=604): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) unshare(0x28000600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_wakeup_irq', 0x3a34c0, 0x1) copy_file_range(r3, 0x0, r3, 0x0, 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000000)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40004100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x48, r9, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xba53}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3901b657}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7109b8a2}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c810}, 0x4044000) 22.94256481s ago: executing program 1 (id=606): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x601, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @empty}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x48}}, 0x40080c0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 22.899828547s ago: executing program 3 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000180)="f05dda0a9b678578b3692ad4192346f9c9c597cb001439913a29378fe815c7387cec93c7027bb54a77371878c8a3fd856f20cd74b043112140", 0x39, 0x8841, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x100}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={r6, 0x1, 0x8000, 0x100, 0x4, 0x2}, &(0x7f0000000280)=0x14) 22.774191097s ago: executing program 3 (id=608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x3000000, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 22.773707268s ago: executing program 3 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x6c00, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r2 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x324, &(0x7f0000000600)="$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") fcntl$dupfd(r2, 0x406, r2) 21.769445536s ago: executing program 3 (id=616): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0), 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2}, 0x1004880d) 21.724904403s ago: executing program 3 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@const={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e]}}, 0x0, 0x42, 0x0, 0x1}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x101002, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) bind$rxrpc(r5, &(0x7f00000000c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x24) r6 = syz_open_dev$evdev(&(0x7f0000004340), 0x1, 0x2a01) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$EVIOCSABS0(r6, 0x401845c0, &(0x7f0000000040)={0x2, 0x7, 0xaefd, 0x18, 0x5b, 0xae05}) 21.657968664s ago: executing program 3 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x13000000}, 0x0) 6.738648145s ago: executing program 32 (id=606): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000300)='rpc_pipefs\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x601, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_LOCAL={0x8, 0x7, @empty}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x48}}, 0x40080c0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5.485089764s ago: executing program 33 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x13000000}, 0x0) 4.801692719s ago: executing program 4 (id=746): r0 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtfilter={0x244, 0x2c, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xd, 0x4}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'bond_slave_0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_RATE={0x6, 0x5, {0xc2, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x1ac, 0x2, [@TCA_FLOW_ACT={0x1a0, 0x9, 0x0, 0x1, [@m_ife={0x19c, 0x4, 0x0, 0x0, {{0x8}, {0x84, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7c78b50, 0x6, 0x0, 0x6, 0x8}, 0x1}}, @TCA_IFE_METALST={0x4c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x80000003}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9625}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd9a}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf9}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3ff}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xfffffff8}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="4209baa51469"}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x4}]}, {0xf1, 0x6, "187c1bb2a970ae91d44fe9db37b92b8a01140314f8dc8ae724526883fa7256014d3101ab7e19f24e67037500d7f9924fb7ce3303348dce6e80304ff5a57a80b9cb6bc5498d204c9bdf7090b8bcf6b18101811bceec14f237a3eee003b0646f1f978efaf769474a78ef201e6e6af81f251cc6f8faf5b0f384d55c77a5aaadd219135782ed46179c0fbe82d4a37f9e4ff03b838a1d8e5b65f6a6069a0b6dd9791331afd2ce4dfc7988d23286a12b02479fdf63ad1f23b17f9584d224ba3c5d6e77edf3e20e701a80d542b442fb16869957b61005b7ff6d677c87dff523371f6f83a362eb68eb6886fe96eea84e39"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x1}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5800000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac008000200f6ff0200050005c05e776189eab556a705251e618294ff0051f60a84c9f4d4938037e786c6c953000000000000000000", 0x97}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') listen(r2, 0xffff) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000006c0)={r2, &(0x7f0000000100)='\x00', 0x100, &(0x7f0000000300)={@_ha_fsid={[0x3, 0x9]}, {0x3, 0x8, 0x8, 0x1}}, 0x8001, &(0x7f0000000340), &(0x7f0000000540)=0x2bbf}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r5, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000040)="e2641a1c807fc7956a9e53228efa17830d24a642fed1", &(0x7f0000000080)=""/50}, 0x20) 4.659776992s ago: executing program 4 (id=748): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x8000000000007, 0x0) read$watch_queue(r0, &(0x7f0000000080)=""/182, 0xb6) write$binfmt_script(r3, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0xa000001}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xc068, 0xf60e}, 0x90b2, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) write$P9_RLERRORu(r10, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$binfmt_misc(r10, &(0x7f00000001c0)="90ea", 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r10, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r11, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r12}, 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r13, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 4.233780134s ago: executing program 4 (id=750): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_getroute={0x24, 0x12, 0x1, 0x2, 0x0, {0x2, 0x20}, [@RTA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2a, 0x100, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34280}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0xc0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000300)=0x9) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x20, 0x1, 0xc, 0x5, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x66, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0x7d, 0x3, 0xf, [{@remote, 0x5}, {@rand_addr=0x64010100, 0x2}, {@multicast2}, {@multicast1, 0xff}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0x4, [{@loopback, 0x5}, {@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x4}]}, @end, @end, @lsrr={0x83, 0x13, 0xe0, [@empty, @local, @rand_addr=0x64010102, @remote]}]}}}}}) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x36e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x15, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000400)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x7, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r5, 0x1, r6, r7], &(0x7f0000000600)=[{0x0, 0x4, 0xa, 0x9}], 0x10, 0x9}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x3, {0x0, 0x0, 0x0, 0x0, 0x2821}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x5c}}, 0x80) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000000080)) 4.038268056s ago: executing program 4 (id=751): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x30, 0x48, 0x201, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1e422676b95b5a3b, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='exfat\x00', 0x40000, &(0x7f00000006c0)='^&{\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a320000000005000400000000001400078005001500200000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000700)) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$eJzs3c1vVFUbAPDnTqeF0vd925cYFRem0RBIlJYWMPixgD0h+LFz40gLQYaP0BotmlgS3JgYNy5IXLkQ/wslunVldOHCjStDgsaQGIzRa+7MnTK0M+20zPRi5/dLhrnnnJk555Y+Peeee+7cAPrWePZPKWJXRFxMIkabysqRF47XX3f7t3dPZo8k0vTlX5NI8rzG65P8eSR/81+jEd9+lcTOgZX1zi1cPlupVmcv5enJ+XMXJ+cWLu87c65yevb07PnpZ6YPHzp46PDU/vvav6Rp+9jVN94a/eD4q5998mcy9fmPx5M4Er+cqpc170e3jMd43EnT95bnZz/Xw92urCADS78ndyXLM3hglesRHoMR8UiMxkDT/+ZovP9ioY0DeipNIlKgTyXiH/pUYxzQOLbv7Di41ONRCbAZbh2N2tH/yvgv1+cGY6w2N7B72ftaTOltSFbHN18fv5o9ou083PYu1QY0W7yyLd9aHv9JLTbH8tjbcbt0zzxvNgI4kT9n+S9tsP7xZelezMMDrS1eiYhHW43/147/15ri//UN1i/+AQAAAAAAoHtuHI2Ip1ud/yvl5+a2xxO1839J/fzf93evEDzShfrXPv9XutmFaoAWbh2NeKHl+t+lNb5jA3nqv/XVgMmpM9XZ/RHxv4jYG4PbsvTUKnXs+3DntXZlzev/skdWf2MtYN6Om+Vt975npjJfuZ99BupuXYl4rNx+/U/W/yfN/X8u+3twscM6du6+fqJd2drxD/RK+mnEnpb9/91vzkhW/36Oydp4YLIxKljp8Xc++qJd/eIfipP1/ztWj/+xpPn7eubW9/lDEXFgoZy2K9/o+H8oeWWg8fmZtyvz85emIoaSYyvzp9fXZtiqGvHQiJcs/vc+ufr839L4vykOhyNiscM6H/575Kd2ZeMRaf6x+n/YZFn8z7To/4fb9v/r35i+PvZlu/o76/8P1vr0vXmO+T9YXacBWnQ7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODfqBQR/4mkNLG0XSpNTESMRMRDsaNUvTA3/9SpC2+en8nKavf/LzXu9DtaTyeN+/+PNaWnl6UPRMT/I+LjgeFaeuLkhepM0TsPAAAAAAAAAAAAAAAAAAAAD4iRNtf/Z34eKLp1QM+V82fxDv2nXHQDgMKIf+hf4h/6l/iH/tVB/N/ZjHYAm2+D/b/TBbAFGP9Dvxrs7GXbe90OoAj6fwAAAAAA2FJuPP/stSQiFp8brj0yQ3nZ0onB4aJaB/RSqegGAIWxhhf6l6U/0L86XPwLbGHJ0tYfaavy9qv/k940CAAAAAAAAAAAAABYYc+uGz+sef0/sCWVIo4U3QagGK7/h/7l+n/oX22O8R0TQB9Z6yr+DV3/75aBAAAAAAAAAAAAANBVcwuXz1YaNwGvVKuzl2o5Nrboxne/p+m63pWmxf1uDEZE4T+xQjaGmsNzMyqNiMUVOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPhnwAAAP//dKofJw==") io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) 3.35479675s ago: executing program 4 (id=755): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000090000000400000003000093010000000700000001000000ffffff8dbaa5255c622c7700040000000c000000f8ffffff0300000000305f612e5f5f5f"], 0x0, 0x51, 0x0, 0x1, 0x0, 0x4000000}, 0x28) 3.248694618s ago: executing program 4 (id=756): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) prlimit64(0x0, 0x2, &(0x7f0000000240)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0xa6a, 0x0, &(0x7f0000001340), 0x0, 0x0) r2 = syz_io_uring_setup(0x7623, &(0x7f0000000300)={0x0, 0xfffffffa, 0x100, 0x8, 0x3a5, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000015c0)='./file0\x00'}) io_uring_enter(r2, 0x7437, 0xa526, 0x41, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpgrp(r0) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000001600)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x41108, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x3}, 0x4580, 0xff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_setup(0x315d, &(0x7f0000000080)={0x0, 0xcfc9, 0x1042, 0x4, 0x1e6, 0x0, r1}, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90404, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x2}, 0x9101, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, r1, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) fstat(0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c666c7573682c646f74732c71756965742c74696d655f6f66667365743d3078303030303030303030303030303261302c646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d55544303646f733178666c6f7070792c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c636865636b3d7374726963742c652c000000000000"], 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.02209906s ago: executing program 2 (id=764): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_newaddrlabel={0x30, 0x48, 0x201, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x1e422676b95b5a3b, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)='exfat\x00', 0x40000, &(0x7f00000006c0)='^&{\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020601080000010000000000000000000900020073797a320000000005000400000000001400078005001500200000000800114000000000050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000700)) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) 931.018885ms ago: executing program 0 (id=765): r0 = syz_clone(0x2319500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) tkill(r0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) listen(r2, 0x3) ioctl$sock_ifreq(r1, 0x89b1, &(0x7f0000000000)={'macvtap0\x00', @ifru_names}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000000000000000020000002c000480280001800e000100696d0100646961746500000014e50280080001400000000008000280040001000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000d92a"], 0x80}}, 0x0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r4, &(0x7f0000003800)=[{&(0x7f0000000300)="94", 0x1}], 0x1, 0x0, 0x0, 0x3e) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfff7, 0xf, 0x81}, 0xc) listen(r5, 0x6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bond_slave_1\x00', 0x10) fchmodat(r4, &(0x7f0000000040)='./file0\x00', 0x180) socket$inet6_tcp(0xa, 0x1, 0x0) 736.964657ms ago: executing program 2 (id=766): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000084) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x100) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xfffffffffffffffc, 0x260c02) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000000)={0x9001, 0x6, 0xe1bd}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair(0xa, 0x1, 0x4ecc, &(0x7f0000000100)) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x701, 0x10000, 0xffdffffc, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044015}, 0x0) 641.982633ms ago: executing program 0 (id=767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="e97a083a82d1"}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="310288a8", 0x4}], 0x2) 500.507187ms ago: executing program 0 (id=768): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x45e, &(0x7f0000000b40)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x800000f0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@grpquota}, {@nodiscard}]}, 0x3, 0x453, &(0x7f0000000f80)="$eJzs281vG0UbAPBn7ST9bvJWfYF+CAIFUb6SJi2lBy4gkDgUCQkO5RiStCp1G9QEiVYRBIRKb6gSJy6IIxJ/ASe4IOBUiSvcUaUK5ULhZLT2buI4tlundlzq309ad2Z33Xme3R17dicOoG+Npi9JxM6I+C0ihqvVtTuMVv+5tbw4/ffy4nQS5fKbfyaV/f5aXpzOd83ftyOvDEQUPk3iQIN25y9dPjdVKs1ezOrjC+ffG5+/dPm5s+enzsyemb0weeLEsaMTLxyffL4jee5OY93/4dzBfa+9fe316VPX3vn52yTPvy6PDhlttfGJcrnDzfXWriiulJOBnoZCG4rVbhqDlf4/HMVYPXnD8eonPQ0O6KpyuVx+oPnmpTJwH0ui1xEAvRGF6hd9ev+bL5s2+LgH3HypegOU5n0rW6pbBvJDU7k32tWl9kcj4tTSP1+lS7R4DpF0qX0AoP98n45/nm00/itE7XOh3XH96tWd1fL/ImJPRByPiL0R8f+Iyr4PRsRDbbZfP0myfvxTuFFbK3d4IJSO/17M5rbWjv/y0V+MFLNaOgYcicHk9NnS7JFsTulwDG5J6xMt2vjhlV8/b7atdvyXLmn7+Vgwi+PGwJa175mZWpi6m5xr3fw4Yv9AXf4nozLizGcC0kO+LyL2b7CNs09/c7DZttvn30IH5pnKX0c8WT3/S7Hm/K9eaEnr+cnxrVGaPTKeXxXr/XL9yhvN2r+r/DsgPf/bG17/K/mPJLXztfPt/O9fPpW+Xvn9s6b3lBu9/oeStyrloWzdB1MLCxcnIoaSk9Wga9dPrr43r+f7p/kfPtS4/++J1SNxICK2ZvWHI+KRLPZHI+KxiDjU4ij89PLj7248/+5K859p6/yvFoaifk3jQvHcj9+taXSknfzT83+sUjqcrbmTz787iavdqxkAAAD+qwoRsTOSwthKuVAYG6v+Df/e2F4ozc0vPHN67v0LM9XfCIzEYCF/0jVc8zx0Irutz+uTdfWj2XPjL4rbKvWx6bnSTK+Thz63o0n/T/1R7HV0QNf5vRb0L/0f+pf+D/1L/4f+1aD/b+tFHMDma/T9/1EP4gA2X13/N+0HfcT9P/SvjfR/nxlwf2jZl4c2Lw5gU81vi9v/SF5BYV0hCvdEGApdKvT6kwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAz/g0AAP//YX7qlQ==") 358.97837ms ago: executing program 2 (id=769): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000040001e802c0004"], 0x54}}, 0x0) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) prctl$PR_SET_IO_FLUSHER(0x39, 0xd) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x11}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nodelalloc}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000001080)="$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") r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r4, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x04\x00\x00\x00\xb2 b\x00O\x03\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 186.048459ms ago: executing program 2 (id=770): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001e00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c00020000000000000000000900010000000000280003801c000380060001"], 0x5c}, 0x1, 0x0, 0x0, 0x30ea32fe53398b3d}, 0x0) 174.401861ms ago: executing program 0 (id=771): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) 159.495454ms ago: executing program 2 (id=772): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000200)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10, 0x0}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = gettid() recvmmsg(0xffffffffffffffff, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x40010022, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)) 5.895439ms ago: executing program 0 (id=773): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7, 0x0, {}, 0x4, 0x19dff}}}, 0x90) 5.088519ms ago: executing program 2 (id=774): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001cc0), 0x1, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x808719, &(0x7f0000000500)={[{@nogrpid}, {@nomblk_io_submit}, {@discard}, {@nolazytime}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@mblk_io_submit}, {@journal_checksum}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@i_version}, {@minixdf}, {@nolazytime}, {@dax_inode}, {@prjquota}, {@data_writeback}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3}}, {@resgid}], [], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffeffffffff, 0x38, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_config_ext={0x2, 0xf92e}, 0x12008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stack\x00') splice(r1, 0x0, r8, &(0x7f00000000c0)=0x2, 0x5, 0x8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r9, 0x4b2f, 0xb00000000) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000001740)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000840)={r10, 0x0, 0x0, [0xa4ed, 0xca2, 0x7, 0x9, 0x100000000], [0x9, 0xae4, 0x8, 0x2, 0x2, 0x200, 0x8, 0x6, 0x7c09, 0x6, 0x3, 0x2, 0x1000, 0x10, 0x1, 0x3, 0x80000001, 0x5, 0x3, 0x2, 0xd57, 0x8, 0x400000000000, 0x2, 0x1, 0x0, 0x100000000, 0x0, 0x6, 0xffff, 0x81, 0xc2, 0x100, 0x0, 0x8001, 0x3, 0xfffffffffffffff3, 0x1, 0x3, 0x100, 0x8, 0x5, 0x2, 0xa, 0x101, 0x1, 0x617e77a5, 0xfffffffffffffff3, 0x8000000000000000, 0x5c, 0xb87, 0x0, 0x9, 0x103e, 0x3fd, 0x4, 0xc5, 0x8, 0xfff, 0x6, 0x6, 0x7, 0x4, 0x6, 0x100, 0xfff, 0x5, 0x8, 0x7, 0x6, 0x5, 0x9, 0x9, 0x8000000000, 0x885d, 0x7fff, 0x80, 0x10, 0x2000000000007ff, 0x10000005d, 0x5, 0x102, 0x6, 0x3, 0x6, 0x1000, 0x3, 0x3, 0xb, 0x100000001, 0x2, 0x3ff, 0x8, 0x1, 0x4, 0x8, 0x8000, 0x0, 0x4, 0xfffffffffffff5f0, 0x80000001, 0x24, 0xd8, 0xfffffffffffffffd, 0xc, 0x7fdc, 0x4000032, 0xfffffffffffffffc, 0x6, 0x2, 0x7, 0xfffffffffffffffb, 0xf, 0x3, 0x4, 0x1d, 0x80, 0xc, 0xb, 0x1, 0x4b5]}) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x40) (async, rerun: 64) unshare(0x6a040000) (rerun: 64) write$binfmt_register(r0, &(0x7f0000001d00)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x10000, 0x3a, '', 0x3a, '*', 0x3a, './file0'}, 0x28) (async) syz_clone3(&(0x7f0000000180)={0x20000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x27}, 0x0, 0x0, &(0x7f0000000100)=""/49, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x58) 0s ago: executing program 0 (id=775): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x6, 0x1, 0xff, 0xfffe, 0x19}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="fdf7dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x800, 0x1000, 0x0, 0xa, 0x20}, {}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) kernel console output (not intermixed with test programs): ] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 57.137967][ T4306] isofs_fill_super: get root inode failed [ 57.626413][ T4319] loop1: detected capacity change from 0 to 1024 [ 57.672132][ T4319] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 57.681716][ T4319] System zones: 0-1, 3-36 [ 57.704843][ T4319] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.226: bad orphan inode 134217728 [ 57.717464][ T4319] loop1: lost filesystem error report for type 5 error -117 [ 57.735452][ T4319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.773371][ T4318] loop0: detected capacity change from 0 to 512 [ 57.859267][ T4318] EXT4-fs: Ignoring removed nobh option [ 57.949589][ T4318] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.012583][ T4311] xfrm0 speed is unknown, defaulting to 1000 [ 58.122599][ T4318] EXT4-fs (loop0): 1 truncate cleaned up [ 58.331449][ T4318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.244052][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.503538][ T4329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.598116][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.616564][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.694575][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 60.694590][ T28] audit: type=1400 audit(1776018600.450:263): avc: denied { read } for pid=4336 comm="syz.0.232" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.765331][ T4337] loop0: detected capacity change from 0 to 512 [ 60.773554][ T4339] process 'syz.1.233' launched './file1' with NULL argv: empty string added [ 60.787314][ T4339] loop1: detected capacity change from 0 to 512 [ 60.796762][ T28] audit: type=1400 audit(1776018600.515:264): avc: denied { open } for pid=4336 comm="syz.0.232" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.820755][ T4337] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 60.833813][ T28] audit: type=1400 audit(1776018600.524:265): avc: denied { watch } for pid=4338 comm="syz.1.233" path="/51/file1" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.856500][ T4337] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 60.867839][ T4339] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.896428][ T4337] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.232: Corrupt directory, running e2fsck is recommended [ 60.927188][ T28] audit: type=1400 audit(1776018600.534:266): avc: denied { execute_no_trans } for pid=4338 comm="syz.1.233" path="/51/file1" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.965394][ T4337] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 60.973799][ T4337] EXT4-fs error (device loop0): ext4_iget_extra_inode:5040: inode #15: comm syz.0.232: corrupted in-inode xattr: e_name out of bounds [ 60.976520][ T28] audit: type=1400 audit(1776018600.534:267): avc: denied { ioctl } for pid=4338 comm="syz.1.233" path="socket:[7692]" dev="sockfs" ino=7692 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 61.004253][ T4337] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.051714][ T4337] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.232: couldn't read orphan inode 15 (err -117) [ 61.061023][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 61.061046][ C0] EXT4-fs (loop0): initial error at time 1776018600: ext4_iget_extra_inode:5040: inode 15 [ 61.061084][ C0] EXT4-fs (loop0): last error at time 1776018600: ext4_iget_extra_inode:5040: inode 15 [ 61.109224][ T4337] loop0: lost filesystem error report for type 5 error -117 [ 61.110211][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.110474][ T4337] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.151678][ T28] audit: type=1400 audit(1776018600.870:268): avc: denied { write } for pid=4334 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.219448][ T4353] loop1: detected capacity change from 0 to 512 [ 61.230639][ T4337] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.277158][ T4337] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 61.291189][ T28] audit: type=1400 audit(1776018601.011:269): avc: denied { ioctl } for pid=4336 comm="syz.0.232" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.322406][ T4337] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.232: Corrupt directory, running e2fsck is recommended [ 61.370385][ T4365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 61.384546][ T4357] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 61.412399][ T4357] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 61.440416][ T4357] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.232: Corrupt directory, running e2fsck is recommended [ 61.462046][ T4365] loop3: detected capacity change from 0 to 1024 [ 61.513409][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.527568][ T4365] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 61.538498][ T28] audit: type=1400 audit(1776018601.235:270): avc: denied { read } for pid=4368 comm="syz.0.241" path="socket:[7737]" dev="sockfs" ino=7737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 61.582077][ T4365] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 61.661789][ T4365] EXT4-fs error (device loop3): ext4_get_journal_inode:5888: comm syz.3.240: inode #1: comm syz.3.240: iget: illegal inode # [ 61.676027][ T4365] loop3: lost filesystem error report for type 5 error -117 [ 61.677245][ T4365] EXT4-fs (loop3): no journal found [ 61.690046][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 61.690068][ C1] EXT4-fs (loop3): initial error at time 1776018601: ext4_get_journal_inode:5888 [ 61.690092][ C1] EXT4-fs (loop3): last error at time 1776018601: ext4_get_journal_inode:5888 [ 61.715574][ T4365] EXT4-fs (loop3): can't get journal size [ 61.732358][ T4365] EXT4-fs (loop3): failed to initialize system zone (-22) [ 61.739981][ T4365] EXT4-fs (loop3): mount failed [ 61.825636][ T4373] loop1: detected capacity change from 0 to 128 [ 63.212583][ T4403] loop3: detected capacity change from 0 to 512 [ 63.224271][ T4403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.276094][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.358642][ T4413] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 63.377945][ T4413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.385851][ T4413] bond1: (slave bond2): making interface the new active one [ 63.393906][ T4413] bond1: (slave bond2): Enslaving as an active interface with an up link [ 63.408951][ T4413] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 63.418903][ T4413] netlink: 28 bytes leftover after parsing attributes in process `syz.3.255'. [ 63.428598][ T4413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.441060][ T4413] vlan2: entered promiscuous mode [ 63.446320][ T4413] bond1: entered promiscuous mode [ 63.451538][ T4413] bond2: entered promiscuous mode [ 63.532919][ T28] audit: type=1400 audit(1776018603.106:271): avc: denied { block_suspend } for pid=4418 comm="syz.3.257" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.631952][ T4425] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 63.643100][ T4425] bond3 (unregistering): Released all slaves [ 64.493212][ T28] audit: type=1400 audit(1776018604.004:272): avc: denied { getopt } for pid=4431 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.534597][ T4359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 64.591770][ T4442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.263'. [ 64.698552][ T4443] loop1: detected capacity change from 0 to 512 [ 64.725873][ T4443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.821351][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.895995][ T4460] loop0: detected capacity change from 0 to 1024 [ 64.904447][ T4460] EXT4-fs: Ignoring removed bh option [ 64.910219][ T4460] EXT4-fs: inline encryption not supported [ 64.926714][ T4460] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.960567][ T4460] EXT4-fs (loop0): too many log groups per flexible block group [ 64.983575][ T4460] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 64.994912][ T4460] EXT4-fs (loop0): mount failed [ 64.997351][ T4465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.271'. [ 65.280645][ T4483] 9p: Could not find request transport: fd0x000000000000000a [ 65.361324][ T4497] loop1: detected capacity change from 0 to 512 [ 65.368781][ T4497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 65.396813][ T4497] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.285: bg 0: block 142: padding at end of block bitmap is not set [ 65.438714][ T4497] loop1: lost filesystem error report for type 5 error -117 [ 65.438887][ T4497] EXT4-fs (loop1): Remounting filesystem read-only [ 65.452836][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 65.452863][ C0] EXT4-fs (loop1): initial error at time 1776018604: ext4_validate_block_bitmap:441 [ 65.452889][ C0] EXT4-fs (loop1): last error at time 1776018604: ext4_validate_block_bitmap:441 [ 65.486578][ T4497] EXT4-fs (loop1): 1 truncate cleaned up [ 65.507341][ T4497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.589602][ T4503] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 65.613206][ T4503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.646819][ T4483] loop3: detected capacity change from 0 to 512 [ 65.671453][ T4503] ip6erspan0: entered promiscuous mode [ 65.689833][ T4503] bond1: (slave ip6erspan0): making interface the new active one [ 65.729529][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.755246][ T4503] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 65.928155][ T4509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 66.088435][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 66.088509][ T28] audit: type=1400 audit(1776018605.491:276): avc: denied { bind } for pid=4512 comm="syz.1.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.401468][ T4483] ------------[ cut here ]------------ [ 66.407933][ T4483] EA inode 11 i_nlink=2 [ 66.408106][ T4483] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.3.274/4483 [ 66.429221][ T4483] Modules linked in: [ 66.436221][ T4483] CPU: 0 UID: 0 PID: 4483 Comm: syz.3.274 Not tainted syzkaller #0 PREEMPT(full) [ 66.446452][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 66.458176][ T4483] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 66.466172][ T4483] Code: 84 2f 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f f4 dd 03 66 66 66 66 66 66 2e [ 66.488477][ T4483] RSP: 0018:ffffc90011cf7778 EFLAGS: 00010246 [ 66.495963][ T4483] RAX: ffff888104d7ef48 RBX: ffff88811ad15788 RCX: ffffffff81c02b58 [ 66.505528][ T4483] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd80 [ 66.515612][ T4483] RBP: 000000000000000b R08: 000188811ad1573b R09: 0000000000000000 [ 66.528792][ T4483] R10: ffffc90011cf76a8 R11: 0001c90011cf76a8 R12: ffff88811ad15738 [ 66.537927][ T4483] R13: ffffffff871dcd80 R14: ffff88811ad156f0 R15: 0000000000000001 [ 66.546741][ T4483] FS: 00007ff1b932d6c0(0000) GS:ffff8882ae8d7000(0000) knlGS:0000000000000000 [ 66.557091][ T4483] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.566026][ T4483] CR2: 0000000034747865 CR3: 000000011ba6c000 CR4: 00000000003506f0 [ 66.575679][ T4483] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 66.585848][ T4483] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 66.594978][ T4483] Call Trace: [ 66.599595][ T4483] [ 66.603806][ T4483] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 66.611024][ T4483] ? errseq_check+0x2c/0x50 [ 66.617262][ T4483] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 66.623844][ T4483] ? ext4_truncate+0x92b/0xb00 [ 66.629221][ T4483] ext4_evict_inode+0xac1/0xe40 [ 66.635868][ T4483] ? __pfx_ext4_evict_inode+0x10/0x10 [ 66.642221][ T4483] evict+0x2af/0x510 [ 66.646889][ T4483] ? _raw_spin_lock+0x5f/0xa0 [ 66.651991][ T4483] iput+0x41a/0x580 [ 66.657368][ T4483] ext4_process_orphan+0x1a9/0x1c0 [ 66.663121][ T4483] ext4_orphan_cleanup+0x6a8/0xa00 [ 66.669345][ T4483] ext4_fill_super+0x3414/0x37c0 [ 66.675212][ T4483] ? set_blocksize+0x14c/0x270 [ 66.681561][ T4483] ? setup_bdev_super+0x30e/0x370 [ 66.687910][ T4483] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.695075][ T4483] get_tree_bdev_flags+0x291/0x300 [ 66.701915][ T4483] ? __pfx_ext4_fill_super+0x10/0x10 [ 66.708888][ T4483] get_tree_bdev+0x1f/0x30 [ 66.714498][ T4483] ext4_get_tree+0x1c/0x30 [ 66.720002][ T4483] vfs_get_tree+0x57/0x1d0 [ 66.726057][ T4483] do_new_mount+0x288/0x8d0 [ 66.731872][ T4483] path_mount+0x4d0/0xbc0 [ 66.737708][ T4483] __se_sys_mount+0x28c/0x2e0 [ 66.743866][ T4483] __x64_sys_mount+0x67/0x80 [ 66.749168][ T4483] x64_sys_call+0x2d61/0x3020 [ 66.755124][ T4483] do_syscall_64+0x12c/0x370 [ 66.761633][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.769183][ T4483] RIP: 0033:0x7ff1ba91da8a [ 66.774111][ T4483] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.795514][ T4483] RSP: 002b:00007ff1b932ce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.805412][ T4483] RAX: ffffffffffffffda RBX: 00007ff1b932cee0 RCX: 00007ff1ba91da8a [ 66.815151][ T4483] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007ff1b932cea0 [ 66.824419][ T4483] RBP: 00002000000009c0 R08: 00007ff1b932cee0 R09: 0000000000800718 [ 66.833604][ T4483] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 66.842859][ T4483] R13: 00007ff1b932cea0 R14: 000000000000048d R15: 0000200000000200 [ 66.851999][ T4483] [ 66.855488][ T4483] ---[ end trace 0000000000000000 ]--- [ 66.867471][ T4483] EXT4-fs (loop3): 1 orphan inode deleted [ 66.953524][ T28] audit: type=1400 audit(1776018606.305:277): avc: denied { create } for pid=4557 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.974435][ T28] audit: type=1400 audit(1776018606.305:278): avc: denied { setopt } for pid=4557 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.995436][ T28] audit: type=1400 audit(1776018606.305:279): avc: denied { write } for pid=4557 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.003156][ T4483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.210904][ T4483] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.910808][ T4581] loop0: detected capacity change from 0 to 4096 [ 67.937791][ T4581] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.973478][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.030964][ T4589] netlink: 'syz.0.313': attribute type 1 has an invalid length. [ 68.056107][ T4589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.064760][ T4589] bond1: (slave bond2): making interface the new active one [ 68.072907][ T4589] bond1: (slave bond2): Enslaving as an active interface with an up link [ 68.089031][ T4589] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 68.099560][ T4589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 68.109271][ T4589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.122764][ T4589] vlan2: entered promiscuous mode [ 68.128074][ T4589] bond1: entered promiscuous mode [ 68.133716][ T4589] bond2: entered promiscuous mode [ 68.167214][ T1033] kernel read not supported for file /194/net/fib_triestat (pid: 1033 comm: kworker/0:2) [ 68.209360][ T4594] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.242129][ T4604] loop1: detected capacity change from 0 to 512 [ 68.289922][ T4604] EXT4-fs (loop1): unable to read superblock [ 68.291526][ T4610] loop0: detected capacity change from 0 to 2048 [ 68.332435][ T4610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.348178][ T28] audit: type=1400 audit(1776018607.615:280): avc: denied { connect } for pid=4616 comm="syz.2.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 68.461324][ T4625] netlink: 'syz.2.327': attribute type 1 has an invalid length. [ 68.469672][ T28] audit: type=1400 audit(1776018607.727:281): avc: denied { read } for pid=4609 comm="syz.0.321" name="file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 68.498637][ T4625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 68.514681][ T4625] bond3: (slave geneve2): making interface the new active one [ 68.524359][ T4625] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 68.538598][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.572918][ T4633] loop0: detected capacity change from 0 to 256 [ 68.603151][ T4633] FAT-fs (loop0): Directory bread(block 64) failed [ 68.610806][ T4633] FAT-fs (loop0): Directory bread(block 65) failed [ 68.617607][ T4633] FAT-fs (loop0): Directory bread(block 66) failed [ 68.624244][ T4633] FAT-fs (loop0): Directory bread(block 67) failed [ 68.631181][ T4633] FAT-fs (loop0): Directory bread(block 68) failed [ 68.637853][ T4633] FAT-fs (loop0): Directory bread(block 69) failed [ 68.644578][ T4633] FAT-fs (loop0): Directory bread(block 70) failed [ 68.651334][ T4633] FAT-fs (loop0): Directory bread(block 71) failed [ 68.658304][ T4633] FAT-fs (loop0): Directory bread(block 72) failed [ 68.664907][ T4633] FAT-fs (loop0): Directory bread(block 73) failed [ 68.678146][ T28] audit: type=1400 audit(1776018607.923:282): avc: denied { mount } for pid=4631 comm="syz.0.328" name="/" dev="ramfs" ino=8125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 68.700797][ T28] audit: type=1400 audit(1776018607.923:283): avc: denied { watch watch_reads } for pid=4631 comm="syz.0.328" path="/" dev="ramfs" ino=8125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 68.754694][ T4640] loop0: detected capacity change from 0 to 512 [ 68.762239][ T4640] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.788340][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.802004][ T4640] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.059536][ T4650] loop3: detected capacity change from 0 to 512 [ 69.077367][ T4650] EXT4-fs: Ignoring removed nobh option [ 69.085007][ T4650] EXT4-fs: quotafile must be on filesystem root [ 69.148382][ T4652] loop1: detected capacity change from 0 to 512 [ 69.156877][ T4652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.177782][ T4654] netlink: 96 bytes leftover after parsing attributes in process `syz.3.332'. [ 69.187653][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.209936][ T4656] loop1: detected capacity change from 0 to 512 [ 69.217233][ T4656] EXT4-fs: Ignoring removed nobh option [ 69.224657][ T4656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.236959][ T4656] EXT4-fs (loop1): 1 truncate cleaned up [ 69.243377][ T4656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.493427][ T4534] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.551015][ T28] audit: type=1400 audit(1776018608.728:284): avc: denied { map } for pid=4659 comm="syz.4.335" path="socket:[8884]" dev="sockfs" ino=8884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 69.575061][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.577421][ T28] audit: type=1400 audit(1776018608.756:285): avc: denied { write } for pid=4664 comm="syz.3.337" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 69.585574][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.716505][ T4679] syzkaller1: entered promiscuous mode [ 69.725602][ T4679] syzkaller1: entered allmulticast mode [ 69.737972][ T4683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.344'. [ 69.768896][ T4683] netlink: 64 bytes leftover after parsing attributes in process `syz.2.344'. [ 69.782461][ T4690] loop4: detected capacity change from 0 to 512 [ 69.791730][ T4690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.802532][ T4680] loop3: detected capacity change from 0 to 8192 [ 69.803483][ T4690] EXT4-fs error (device loop4): __ext4_iget:5393: inode #16: block 8: comm syz.4.347: invalid block [ 69.822867][ T4690] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 69.830610][ T4690] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.347: couldn't read orphan inode 16 (err -117) [ 69.840065][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 69.840092][ C0] EXT4-fs (loop4): initial error at time 1776018608: __ext4_iget:5393: inode 16: block 8 [ 69.840145][ C0] EXT4-fs (loop4): last error at time 1776018608: __ext4_iget:5393: inode 16: block 8 [ 69.937839][ T4697] netlink: 'syz.0.346': attribute type 36 has an invalid length. [ 69.952546][ T4697] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 69.962698][ T4697] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 70.008655][ T4697] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 70.048657][ T4690] loop4: lost filesystem error report for type 5 error -117 [ 70.049873][ T4698] usb usb7: check_ctrlrecip: process 4698 (syz.3.343) requesting ep 01 but needs 81 [ 70.109998][ T4690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.228213][ T4702] siw: device registration error -23 [ 70.253054][ T4704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 70.376478][ T4698] usb usb7: usbfs: process 4698 (syz.3.343) did not claim interface 0 before use [ 70.397939][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.532586][ T3312] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 70.542076][ T3312] FAT-fs (loop3): Filesystem has been set read-only [ 70.564999][ T4708] FAULT_INJECTION: forcing a failure. [ 70.564999][ T4708] name failslab, interval 1, probability 0, space 0, times 0 [ 70.580999][ T4708] CPU: 0 UID: 0 PID: 4708 Comm: syz.4.352 Tainted: G W syzkaller #0 PREEMPT(full) [ 70.581038][ T4708] Tainted: [W]=WARN [ 70.581046][ T4708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 70.581059][ T4708] Call Trace: [ 70.581068][ T4708] [ 70.581128][ T4708] __dump_stack+0x1d/0x30 [ 70.581225][ T4708] dump_stack_lvl+0x95/0xd0 [ 70.581255][ T4708] dump_stack+0x15/0x1b [ 70.581342][ T4708] should_fail_ex+0x263/0x280 [ 70.581370][ T4708] should_failslab+0x8c/0xb0 [ 70.581391][ T4708] kmem_cache_alloc_noprof+0x66/0x400 [ 70.581412][ T4708] ? do_fcntl_add_lease+0x48/0x2b0 [ 70.581468][ T4708] do_fcntl_add_lease+0x48/0x2b0 [ 70.581556][ T4708] fcntl_setlease+0x14c/0x210 [ 70.581587][ T4708] do_fcntl+0x5de/0xf80 [ 70.581603][ T4708] ? __fget_files+0x184/0x1c0 [ 70.581625][ T4708] ? mutex_lock+0x57/0x90 [ 70.581727][ T4708] __se_sys_fcntl+0xb1/0x120 [ 70.581764][ T4708] __x64_sys_fcntl+0x43/0x50 [ 70.581886][ T4708] x64_sys_call+0x2844/0x3020 [ 70.581919][ T4708] do_syscall_64+0x12c/0x370 [ 70.581951][ T4708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.582023][ T4708] RIP: 0033:0x7f0189d2c819 [ 70.582039][ T4708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.582072][ T4708] RSP: 002b:00007f018877f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 70.582096][ T4708] RAX: ffffffffffffffda RBX: 00007f0189fa5fa0 RCX: 00007f0189d2c819 [ 70.582158][ T4708] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 70.582172][ T4708] RBP: 00007f018877f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.582188][ T4708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.582203][ T4708] R13: 00007f0189fa6038 R14: 00007f0189fa5fa0 R15: 00007fff1a76d898 [ 70.582225][ T4708] [ 70.847408][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 70.872253][ T4716] netlink: 200 bytes leftover after parsing attributes in process `syz.4.355'. [ 70.879128][ T4720] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.900069][ T4720] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 70.917879][ T4720] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.356: Corrupt directory, running e2fsck is recommended [ 70.946758][ T4720] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 70.955554][ T4720] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.356: corrupted in-inode xattr: e_name out of bounds [ 70.975269][ T4720] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 70.975773][ T4720] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.356: couldn't read orphan inode 15 (err -117) [ 70.985055][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 70.985081][ C0] EXT4-fs (loop3): initial error at time 1776018610: ext4_iget_extra_inode:5040: inode 15 [ 70.985116][ C0] EXT4-fs (loop3): last error at time 1776018610: ext4_iget_extra_inode:5040: inode 15 [ 71.035343][ T4720] loop3: lost filesystem error report for type 5 error -117 [ 71.035806][ T4720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.069721][ T4720] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.072058][ T4729] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 71.081426][ T4720] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 71.081449][ T4720] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.356: Corrupt directory, running e2fsck is recommended [ 71.116304][ T4729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 71.125358][ T4729] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 71.164888][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.210758][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 71.236746][ T4735] xt_policy: output policy not valid in PREROUTING and INPUT [ 71.257069][ T4744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.364'. [ 71.369107][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.376561][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.468819][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 71.468838][ T28] audit: type=1400 audit(1776018610.533:296): avc: denied { getopt } for pid=4741 comm="syz.0.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.491765][ T4745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.505326][ T4745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.546268][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 71.553229][ T35] syz1: Port: 1 Link DOWN [ 71.558179][ T50] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.567856][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.594135][ T50] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.603407][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.618518][ T4764] EXT4-fs: Ignoring removed nobh option [ 71.628190][ T35] xfrm0 speed is unknown, defaulting to 1000 [ 71.634730][ T50] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.639471][ T4764] ext4: Unknown parameter 'noacl' [ 71.671235][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.697473][ T4767] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 71.714078][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 71.733905][ T4767] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 71.752425][ T50] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.767113][ T4769] 9p: Bad value for 'wfdno' [ 71.770118][ T28] audit: type=1400 audit(1776018610.795:297): avc: denied { ioctl } for pid=4746 comm="syz.4.367" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.806511][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.835613][ T4772] EXT4-fs: Ignoring removed bh option [ 71.844086][ T4772] EXT4-fs: inline encryption not supported [ 71.934607][ T4772] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.937324][ T28] audit: type=1400 audit(1776018610.804:298): avc: denied { associate } for pid=4746 comm="syz.4.367" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.966253][ T4772] EXT4-fs error (device loop3): ext4_quota_enable:7213: comm syz.3.374: Bad quota inum: 131071, type: 0 [ 71.970719][ T28] audit: type=1400 audit(1776018610.804:299): avc: denied { append } for pid=4746 comm="syz.4.367" name="pfkey" dev="proc" ino=4026532965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 71.983244][ T4772] loop3: lost filesystem error report for type 5 error -117 [ 72.015479][ T4772] EXT4-fs (loop3): Remounting filesystem read-only [ 72.029606][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 72.029642][ C0] EXT4-fs (loop3): initial error at time 1776018611: ext4_quota_enable:7213 [ 72.029683][ C0] EXT4-fs (loop3): last error at time 1776018611: ext4_quota_enable:7213 [ 72.178490][ T4772] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=131071). Please run e2fsck to fix. [ 72.197288][ T4772] EXT4-fs (loop3): mount failed [ 72.202446][ T28] audit: type=1400 audit(1776018610.935:300): avc: denied { bind } for pid=4768 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.226133][ T28] audit: type=1400 audit(1776018610.982:301): avc: denied { create } for pid=4781 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.246424][ T28] audit: type=1400 audit(1776018610.982:302): avc: denied { create } for pid=4781 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 72.267364][ T28] audit: type=1400 audit(1776018610.982:303): avc: denied { getopt } for pid=4781 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.347818][ T28] audit: type=1400 audit(1776018611.001:304): avc: denied { override_creds } for pid=4768 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.502156][ T4795] netlink: 'syz.1.380': attribute type 93 has an invalid length. [ 72.661252][ T28] audit: type=1400 audit(1776018611.646:305): avc: denied { map } for pid=4799 comm="syz.3.382" path="/dev/ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 72.692475][ T4807] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.797497][ T4817] xfrm0 speed is unknown, defaulting to 1000 [ 72.992480][ T4822] 9p: Could not find request transport: fd0x000000000000000a [ 73.589976][ T4836] set_capacity_and_notify: 7 callbacks suppressed [ 73.589998][ T4836] loop0: detected capacity change from 0 to 128 [ 73.651727][ T4836] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.701753][ T4836] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 74.099490][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.408345][ T4863] loop0: detected capacity change from 0 to 128 [ 74.447171][ T4842] loop1: detected capacity change from 0 to 512 [ 74.486540][ T4842] EXT4-fs: Ignoring removed bh option [ 74.494829][ T4842] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.608746][ T4842] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 74.695343][ T4842] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 74.736456][ T4842] EXT4-fs (loop1): orphan cleanup on readonly fs [ 74.791079][ T4842] EXT4-fs error (device loop1): ext4_acquire_dquot:7026: comm syz.1.393: Failed to acquire dquot type 1 [ 74.812850][ T4842] loop1: lost filesystem error report for type 5 error -5 [ 74.814588][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 74.830971][ C1] EXT4-fs (loop1): last error at time 1776018613: ext4_acquire_dquot:7026 [ 74.862558][ T4842] EXT4-fs (loop1): Remounting filesystem read-only [ 74.872218][ T4842] EXT4-fs (loop1): 1 orphan inode deleted [ 74.928535][ T4842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.048605][ T4842] syz.1.393 (4842) used greatest stack depth: 9288 bytes left [ 75.057686][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.387521][ T4882] loop4: detected capacity change from 0 to 1024 [ 75.474644][ T4884] FAULT_INJECTION: forcing a failure. [ 75.474644][ T4884] name failslab, interval 1, probability 0, space 0, times 0 [ 75.527969][ T4884] CPU: 0 UID: 0 PID: 4884 Comm: syz.1.408 Tainted: G W syzkaller #0 PREEMPT(full) [ 75.528007][ T4884] Tainted: [W]=WARN [ 75.528016][ T4884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 75.528028][ T4884] Call Trace: [ 75.528036][ T4884] [ 75.528091][ T4884] __dump_stack+0x1d/0x30 [ 75.528130][ T4884] dump_stack_lvl+0x95/0xd0 [ 75.528213][ T4884] dump_stack+0x15/0x1b [ 75.528239][ T4884] should_fail_ex+0x263/0x280 [ 75.528270][ T4884] ? __se_sys_memfd_create+0x1df/0x3b0 [ 75.528364][ T4884] should_failslab+0x8c/0xb0 [ 75.528385][ T4884] __kmalloc_cache_noprof+0x5f/0x410 [ 75.528411][ T4884] ? fput+0x8f/0xc0 [ 75.528489][ T4884] __se_sys_memfd_create+0x1df/0x3b0 [ 75.528582][ T4884] __x64_sys_memfd_create+0x31/0x40 [ 75.528654][ T4884] x64_sys_call+0x1f22/0x3020 [ 75.528679][ T4884] do_syscall_64+0x12c/0x370 [ 75.528741][ T4884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.528761][ T4884] RIP: 0033:0x7fdb16e4c819 [ 75.528859][ T4884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.528880][ T4884] RSP: 002b:00007fdb158a6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 75.528902][ T4884] RAX: ffffffffffffffda RBX: 0000000000000453 RCX: 00007fdb16e4c819 [ 75.528918][ T4884] RDX: 00007fdb158a6ee0 RSI: 0000000000000000 RDI: 00007fdb16ee2e71 [ 75.528934][ T4884] RBP: 0000200000000f80 R08: 00000000ffffffff R09: 0000000000000000 [ 75.528950][ T4884] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000300 [ 75.529041][ T4884] R13: 00007fdb158a6ee0 R14: 00007fdb158a6ea0 R15: 0000200000000b40 [ 75.529057][ T4884] [ 75.743400][ T4886] loop1: detected capacity change from 0 to 128 [ 75.898725][ T4882] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 75.907986][ T4882] System zones: 0-1, 3-36 [ 75.936391][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.403: bad orphan inode 134217728 [ 75.949252][ T4882] loop4: lost filesystem error report for type 5 error -117 [ 75.966118][ T4882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.071166][ T4886] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.141911][ T4894] loop0: detected capacity change from 0 to 512 [ 76.149261][ T4894] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.161668][ T4886] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 76.453569][ T4894] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #14: comm syz.0.407: invalid orphan symlink nlink 1 [ 76.476210][ T4899] FAT-fs (loop5): unable to read boot sector [ 76.543878][ T4894] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 76.544231][ T4894] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.407: couldn't read orphan inode 14 (err -117) [ 76.553578][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 76.553599][ C0] EXT4-fs (loop0): initial error at time 1776018615: ext4_orphan_get:1397: inode 14 [ 76.553653][ C0] EXT4-fs (loop0): last error at time 1776018615: ext4_orphan_get:1397: inode 14 [ 76.774774][ T3311] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.805748][ T4894] loop0: lost filesystem error report for type 5 error -117 [ 76.806550][ T4894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.001165][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.017825][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.138695][ T4915] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 77.492814][ T4924] loop4: detected capacity change from 0 to 128 [ 77.504667][ T4915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 79.368608][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 79.368624][ T28] audit: type=1400 audit(1776018617.474:312): avc: denied { read } for pid=4922 comm="syz.1.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.373837][ T4930] __nla_validate_parse: 15 callbacks suppressed [ 80.373854][ T4930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 80.932772][ T4932] xt_hashlimit: size too large, truncated to 1048576 [ 80.964043][ T4939] loop1: detected capacity change from 0 to 736 [ 81.063588][ T4944] loop4: detected capacity change from 0 to 256 [ 81.105505][ T4945] 9p: Could not find request transport: fd0x000000000000000a [ 81.154663][ T4945] loop0: detected capacity change from 0 to 512 [ 81.249918][ T4939] rock: directory entry would overflow storage [ 81.322568][ T4945] EXT4-fs (loop0): 1 orphan inode deleted [ 81.336754][ T4945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.358918][ T4945] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.377958][ T4939] rock: sig=0x3b10, size=4, remaining=3 [ 81.414256][ T28] audit: type=1400 audit(1776018619.831:313): avc: denied { mount } for pid=4938 comm="syz.1.424" name="/" dev="loop1" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 81.554119][ T28] audit: type=1400 audit(1776018619.962:314): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 81.606262][ T4953] loop3: detected capacity change from 0 to 2048 [ 81.643104][ T4953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.703572][ T28] audit: type=1400 audit(1776018620.102:315): avc: denied { remove_name } for pid=4952 comm="syz.3.426" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.745216][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.851333][ T4965] loop4: detected capacity change from 0 to 1024 [ 81.859993][ T4965] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.871722][ T4965] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 81.883598][ T4965] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.431: inode #1: comm syz.4.431: iget: illegal inode # [ 81.897773][ T4965] loop4: lost filesystem error report for type 5 error -117 [ 81.898189][ T4965] EXT4-fs (loop4): no journal found [ 81.905717][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 81.905738][ C0] EXT4-fs (loop4): initial error at time 1776018620: ext4_get_journal_inode:5888 [ 81.905774][ C0] EXT4-fs (loop4): last error at time 1776018620: ext4_get_journal_inode:5888 [ 81.936596][ T4965] EXT4-fs (loop4): can't get journal size [ 81.943492][ T4965] EXT4-fs (loop4): failed to initialize system zone (-22) [ 81.954466][ T4965] EXT4-fs (loop4): mount failed [ 82.022271][ T4987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.441'. [ 82.031301][ T4987] netlink: 64 bytes leftover after parsing attributes in process `syz.3.441'. [ 82.188836][ T4996] loop4: detected capacity change from 0 to 512 [ 82.745710][ T4996] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.812823][ T4996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.827962][ T4996] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.843384][ T5003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.444'. [ 82.865540][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.901439][ T5003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.926070][ T5003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.938647][ T5002] loop1: detected capacity change from 0 to 512 [ 83.015160][ T5003] bond0 (unregistering): Released all slaves [ 83.035718][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 83.106035][ T5012] loop4: detected capacity change from 0 to 2048 [ 83.121672][ T5014] loop3: detected capacity change from 0 to 2048 [ 83.154512][ T5014] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 83.155441][ T3304] udevd[3304]: incorrect ext4 checksum on /dev/loop3 [ 83.172929][ T5012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.238626][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.239645][ T5020] loop3: detected capacity change from 0 to 1024 [ 83.256775][ T5020] EXT4-fs: Ignoring removed orlov option [ 83.294600][ T5020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.396042][ T5027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.436961][ T5027] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.452: bad orphan inode 32 [ 83.464969][ T5027] loop4: lost filesystem error report for type 5 error -117 [ 83.465186][ T5027] ext4_test_bit(bit=31, block=4) = 0 [ 83.478136][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 83.478161][ C0] EXT4-fs (loop4): initial error at time 1776018621: ext4_orphan_get:1423 [ 83.478196][ C0] EXT4-fs (loop4): last error at time 1776018621: ext4_orphan_get:1423 [ 83.502693][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.576617][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.638730][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.708407][ T5033] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.721179][ T5031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.848378][ T5033] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.927770][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.400042][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.618177][ T5054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.666070][ T5058] xfrm0 speed is unknown, defaulting to 1000 [ 84.706096][ T28] audit: type=1400 audit(1776018622.908:316): avc: denied { rename } for pid=5052 comm="syz.0.463" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.760452][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.801104][ T28] audit: type=1400 audit(1776018622.908:317): avc: denied { unlink } for pid=5052 comm="syz.0.463" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.844029][ T5064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.910140][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.923915][ T5071] netlink: 'syz.0.466': attribute type 11 has an invalid length. [ 85.177916][ T5082] 9p: Could not find request transport: fd0x000000000000000a [ 85.261292][ T5085] EXT4-fs (loop1): 1 orphan inode deleted [ 85.267645][ T5085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.281230][ T5085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.493214][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 85.510229][ T28] audit: type=1326 audit(1776018879.666:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.547986][ T28] audit: type=1326 audit(1776018879.666:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.582877][ T28] audit: type=1326 audit(1776018879.666:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.611532][ T28] audit: type=1326 audit(1776018879.666:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.644922][ T5098] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 85.666515][ T28] audit: type=1326 audit(1776018879.666:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.672751][ T5098] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 85.700964][ T5098] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.474: Corrupt directory, running e2fsck is recommended [ 85.709999][ T28] audit: type=1326 audit(1776018879.666:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.745822][ T28] audit: type=1326 audit(1776018879.666:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.751669][ T5098] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 85.773786][ T28] audit: type=1326 audit(1776018879.666:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.801878][ T5098] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.474: corrupted in-inode xattr: e_name out of bounds [ 85.809707][ T28] audit: type=1326 audit(1776018879.666:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5092 comm="syz.2.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 85.844680][ T5098] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.845106][ T5098] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.474: couldn't read orphan inode 15 (err -117) [ 85.854446][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 85.854466][ C0] EXT4-fs (loop3): initial error at time 1776018879: ext4_iget_extra_inode:5040: inode 15 [ 85.854504][ C0] EXT4-fs (loop3): last error at time 1776018879: ext4_iget_extra_inode:5040: inode 15 [ 85.897264][ T5098] loop3: lost filesystem error report for type 5 error -117 [ 85.897810][ T5098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.980709][ T5104] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 85.998182][ T5104] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 86.008673][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.020100][ T5104] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.476: inode #1: comm syz.0.476: iget: illegal inode # [ 86.037041][ T5104] loop0: lost filesystem error report for type 5 error -117 [ 86.039399][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 86.053317][ C1] EXT4-fs (loop0): initial error at time 1776018880: ext4_get_journal_inode:5888 [ 86.062498][ C1] EXT4-fs (loop0): last error at time 1776018880: ext4_get_journal_inode:5888 [ 86.072000][ T5104] EXT4-fs (loop0): no journal found [ 86.074791][ T5108] EXT4-fs: Ignoring removed bh option [ 86.077425][ T5104] EXT4-fs (loop0): can't get journal size [ 86.092821][ T5104] EXT4-fs (loop0): failed to initialize system zone (-22) [ 86.106400][ T5104] EXT4-fs (loop0): mount failed [ 86.109797][ T5106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.124273][ T5108] EXT4-fs: inline encryption not supported [ 86.131895][ T5108] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (20329!=35945) [ 86.143543][ T5108] EXT4-fs (loop3): group descriptors corrupted! [ 86.185336][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.646772][ T5140] set_capacity_and_notify: 11 callbacks suppressed [ 86.646885][ T5140] loop4: detected capacity change from 0 to 128 [ 88.234352][ T5168] loop4: detected capacity change from 0 to 128 [ 88.257732][ T5168] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.304046][ T5168] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.398513][ T5172] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 88.448404][ T5175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.466356][ T5175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.482243][ T5172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.506959][ T5172] bond0: (slave bond3): making interface the new active one [ 88.517399][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.528799][ T5172] bond0: (slave bond3): Enslaving as an active interface with an up link [ 88.544869][ T5175] loop3: detected capacity change from 0 to 512 [ 88.551893][ T5175] ext4: Unknown parameter 'func' [ 88.587407][ T5185] netlink: 28 bytes leftover after parsing attributes in process `syz.1.499'. [ 88.598485][ T5179] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 88.610692][ T5185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.659130][ T5187] loop4: detected capacity change from 0 to 512 [ 88.675058][ T5172] vlan2: entered promiscuous mode [ 88.684041][ T5187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.694401][ T5172] bond0: entered promiscuous mode [ 88.699563][ T5172] bond3: entered promiscuous mode [ 88.723258][ T5187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.503: bg 0: block 142: padding at end of block bitmap is not set [ 88.740341][ T5187] loop4: lost filesystem error report for type 5 error -117 [ 88.743433][ T5187] EXT4-fs (loop4): Remounting filesystem read-only [ 88.747563][ T5190] loop0: detected capacity change from 0 to 512 [ 88.750979][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 88.764253][ T5190] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.770375][ C1] EXT4-fs (loop4): initial error at time 1776018882: ext4_validate_block_bitmap:441 [ 88.770404][ C1] EXT4-fs (loop4): last error at time 1776018882: ext4_validate_block_bitmap:441 [ 88.799701][ T5187] EXT4-fs (loop4): 1 truncate cleaned up [ 88.806050][ T5187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.838155][ T5190] EXT4-fs (loop0): 1 orphan inode deleted [ 88.847497][ T5190] EXT4-fs (loop0): 1 truncate cleaned up [ 88.867311][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.868762][ T5190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.900502][ T5195] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 88.925441][ T5195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 88.947109][ T5195] vlan2: entered allmulticast mode [ 88.954955][ T5195] bond4: entered allmulticast mode [ 88.966013][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.051009][ T5206] loop0: detected capacity change from 0 to 736 [ 89.072744][ T5206] rock: directory entry would overflow storage [ 89.081763][ T5206] rock: sig=0x3b10, size=4, remaining=3 [ 89.214958][ T5216] loop4: detected capacity change from 0 to 512 [ 89.231541][ T5216] EXT4-fs (loop4): 1 orphan inode deleted [ 89.238229][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.251913][ T5216] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.271171][ T5212] 9p: Could not find request transport: fd0x000000000000000a [ 89.329280][ T5219] loop0: detected capacity change from 0 to 512 [ 89.611087][ T5238] loop0: detected capacity change from 0 to 512 [ 89.635607][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.729620][ T5238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.758249][ T5238] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.868070][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.940550][ T5248] netlink: 'syz.1.522': attribute type 10 has an invalid length. [ 89.987558][ T5248] team0: Device vxcan1 is of different type [ 90.022743][ T5251] Illegal XDP return value 514 on prog (id 95) dev syzkaller1, expect packet loss! [ 90.045825][ T5250] loop0: detected capacity change from 0 to 736 [ 90.111767][ T5250] rock: directory entry would overflow storage [ 90.134301][ T5250] rock: sig=0x3b10, size=4, remaining=3 [ 90.299991][ T5259] xt_hashlimit: size too large, truncated to 1048576 [ 92.599187][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 92.701534][ T5270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 92.709969][ T5270] System zones: 0-1, 3-36 [ 92.716752][ T5270] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.527: bad orphan inode 134217728 [ 92.727997][ T5270] loop3: lost filesystem error report for type 5 error -117 [ 92.729743][ T5270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.365685][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.372567][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.379645][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.386431][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.393211][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.400048][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.406794][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.413620][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.420361][ T5275] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 93.489761][ T5279] set_capacity_and_notify: 1 callbacks suppressed [ 93.489801][ T5279] loop0: detected capacity change from 0 to 512 [ 93.532155][ T5279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.547831][ T5279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.563096][ T5279] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.854142][ T5286] loop1: detected capacity change from 0 to 1024 [ 93.944646][ T5286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.055853][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.105962][ T5293] loop3: detected capacity change from 0 to 736 [ 94.134599][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.158344][ T5293] rock: directory entry would overflow storage [ 94.174730][ T5293] rock: sig=0x3b10, size=4, remaining=3 [ 94.209976][ T5298] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 94.274485][ T5298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 94.293567][ T5304] loop3: detected capacity change from 0 to 512 [ 94.315663][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.316212][ T5298] bond4: (slave bond5): making interface the new active one [ 94.346018][ T5304] EXT4-fs (loop3): #clusters per group too big: 16531456 [ 94.357186][ T5298] bond4: (slave bond5): Enslaving as an active interface with an up link [ 94.394348][ T5298] netlink: 28 bytes leftover after parsing attributes in process `syz.0.537'. [ 94.448596][ T5298] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.477638][ T5314] xt_hashlimit: size too large, truncated to 1048576 [ 94.490606][ T5305] vlan2: entered promiscuous mode [ 94.576014][ T5305] bond4: entered promiscuous mode [ 94.588806][ T5305] bond5: entered promiscuous mode [ 94.995433][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 94.995449][ T28] audit: type=1400 audit(1776018888.534:341): avc: denied { create } for pid=5322 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.067354][ T28] audit: type=1400 audit(1776018888.571:342): avc: denied { ioctl } for pid=5322 comm="syz.0.545" path="socket:[10022]" dev="sockfs" ino=10022 ioctlcmd=0x4945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.549287][ T5334] loop3: detected capacity change from 0 to 1024 [ 95.698287][ T5334] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 95.707773][ T5334] System zones: 0-1, 3-36 [ 95.727037][ T5334] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.546: bad orphan inode 134217728 [ 95.739078][ T5334] loop3: lost filesystem error report for type 5 error -117 [ 95.753401][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.974267][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 96.079608][ T5316] loop1: detected capacity change from 0 to 1024 [ 96.237764][ T5338] Cannot find add_set index 3 as target [ 96.363902][ T5347] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 96.455223][ T5347] 8021q: adding VLAN 0 to HW filter on device bond6 [ 96.609971][ T5352] bond6: (slave geneve2): making interface the new active one [ 96.658632][ T5352] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 96.806999][ T5354] loop0: detected capacity change from 0 to 128 [ 96.859787][ T5354] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.932000][ T5354] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.065196][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.136911][ T5358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5358 comm=syz.2.552 [ 97.240959][ T5362] xfrm0 speed is unknown, defaulting to 1000 [ 97.834890][ T5375] loop3: detected capacity change from 0 to 256 [ 97.872809][ T28] audit: type=1400 audit(1776018891.218:343): avc: denied { write } for pid=5374 comm="syz.3.558" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 98.059884][ T5386] loop1: detected capacity change from 0 to 256 [ 98.551735][ T5407] loop1: detected capacity change from 0 to 128 [ 99.340354][ T5422] loop1: detected capacity change from 0 to 256 [ 99.423463][ T28] audit: type=1400 audit(1776018892.668:344): avc: denied { getopt } for pid=5423 comm="syz.1.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 99.474544][ T5429] FAULT_INJECTION: forcing a failure. [ 99.474544][ T5429] name failslab, interval 1, probability 0, space 0, times 0 [ 99.510265][ T5429] CPU: 0 UID: 0 PID: 5429 Comm: syz.3.576 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.510303][ T5429] Tainted: [W]=WARN [ 99.510312][ T5429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.510326][ T5429] Call Trace: [ 99.510333][ T5429] [ 99.510351][ T5429] __dump_stack+0x1d/0x30 [ 99.510384][ T5429] dump_stack_lvl+0x95/0xd0 [ 99.510407][ T5429] dump_stack+0x15/0x1b [ 99.510453][ T5429] should_fail_ex+0x263/0x280 [ 99.510485][ T5429] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 99.510515][ T5429] should_failslab+0x8c/0xb0 [ 99.510561][ T5429] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 99.510591][ T5429] ? shmem_alloc_inode+0x34/0x50 [ 99.510641][ T5429] ? kstrtouint+0x76/0xc0 [ 99.510669][ T5429] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 99.510781][ T5429] shmem_alloc_inode+0x34/0x50 [ 99.510826][ T5429] alloc_inode+0x40/0x170 [ 99.510853][ T5429] new_inode+0x1d/0xe0 [ 99.510907][ T5429] shmem_get_inode+0x246/0x750 [ 99.510941][ T5429] __shmem_file_setup+0x112/0x210 [ 99.510971][ T5429] shmem_file_setup+0x3b/0x50 [ 99.511057][ T5429] memfd_alloc_file+0x4e/0x300 [ 99.511146][ T5429] __se_sys_memfd_create+0x2e1/0x3b0 [ 99.511255][ T5429] __x64_sys_memfd_create+0x31/0x40 [ 99.511356][ T5429] x64_sys_call+0x1f22/0x3020 [ 99.511385][ T5429] do_syscall_64+0x12c/0x370 [ 99.511411][ T5429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.511430][ T5429] RIP: 0033:0x7ff1ba91c819 [ 99.511446][ T5429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.511548][ T5429] RSP: 002b:00007ff1b936ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 99.511572][ T5429] RAX: ffffffffffffffda RBX: 0000000000000453 RCX: 00007ff1ba91c819 [ 99.511597][ T5429] RDX: 00007ff1b936eee0 RSI: 0000000000000000 RDI: 00007ff1ba9b2e71 [ 99.511610][ T5429] RBP: 0000200000000f80 R08: 00000000ffffffff R09: 0000000000000000 [ 99.511623][ T5429] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000300 [ 99.511696][ T5429] R13: 00007ff1b936eee0 R14: 00007ff1b936eea0 R15: 0000200000000b40 [ 99.511725][ T5429] [ 99.534489][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 99.685277][ T5434] netlink: 6 bytes leftover after parsing attributes in process `syz.1.577'. [ 99.846060][ T5443] loop3: detected capacity change from 0 to 512 [ 99.865824][ T5443] EXT4-fs: Ignoring removed nobh option [ 99.897121][ T5443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 99.934643][ T5443] EXT4-fs (loop3): 1 truncate cleaned up [ 99.979699][ T5443] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.582: invalid fast symlink length 39 [ 100.017657][ T5443] EXT4-fs (loop3): Remounting filesystem read-only [ 100.056798][ T28] audit: type=1400 audit(1776018893.276:345): avc: denied { mounton } for pid=5442 comm="syz.3.582" path="/114/file2/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.177677][ T5445] loop1: detected capacity change from 0 to 512 [ 100.241654][ T5445] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 100.302986][ T5445] EXT4-fs (loop1): 1 truncate cleaned up [ 100.590028][ T5456] loop4: detected capacity change from 0 to 128 [ 101.149411][ T5464] tipc: Enabling of bearer rejected, failed to enable media [ 101.187220][ T5471] netlink: 'syz.3.591': attribute type 1 has an invalid length. [ 101.218345][ T5471] 8021q: adding VLAN 0 to HW filter on device bond4 [ 101.228860][ T5471] bond3: (slave bond4): making interface the new active one [ 101.237074][ T5471] bond3: (slave bond4): Enslaving as an active interface with an up link [ 101.262706][ T5471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.591'. [ 101.333398][ T5471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.336389][ T5483] loop4: detected capacity change from 0 to 764 [ 101.411236][ T5487] loop3: detected capacity change from 0 to 512 [ 101.431987][ T5483] rock: directory entry would overflow storage [ 101.477339][ T5483] rock: sig=0x5245, size=8, remaining=5 [ 101.503224][ T28] audit: type=1400 audit(1776018894.623:346): avc: denied { bind } for pid=5465 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.543981][ T5487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.574419][ T5488] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 101.578454][ T28] audit: type=1400 audit(1776018894.642:347): avc: denied { connect } for pid=5465 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.584956][ T5487] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #14: comm syz.3.594: invalid orphan symlink nlink 1 [ 101.616631][ T28] audit: type=1400 audit(1776018894.642:348): avc: denied { getopt } for pid=5465 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.641261][ T5488] netlink: 68 bytes leftover after parsing attributes in process `syz.1.592'. [ 101.655205][ T5487] loop3: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 101.655568][ T5487] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.594: couldn't read orphan inode 14 (err -117) [ 101.665004][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 101.665029][ C0] EXT4-fs (loop3): initial error at time 1776018894: ext4_orphan_get:1397: inode 14 [ 101.665101][ C0] EXT4-fs (loop3): last error at time 1776018894: ext4_orphan_get:1397: inode 14 [ 101.666575][ T28] audit: type=1400 audit(1776018894.763:349): avc: denied { remount } for pid=5481 comm="syz.4.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 101.690160][ T5487] loop3: lost filesystem error report for type 5 error -117 [ 101.724915][ T5487] EXT4-fs mount: 5 callbacks suppressed [ 101.724944][ T5487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.836038][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.868912][ T28] audit: type=1326 audit(1776018894.941:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 101.929641][ T28] audit: type=1326 audit(1776018894.941:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 101.954443][ T28] audit: type=1326 audit(1776018894.941:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 101.980381][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 101.988316][ T28] audit: type=1326 audit(1776018894.941:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 102.047430][ T5504] netlink: 128 bytes leftover after parsing attributes in process `syz.4.599'. [ 102.049169][ T28] audit: type=1326 audit(1776018894.941:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 102.100925][ T5504] net_ratelimit: 55 callbacks suppressed [ 102.100946][ T5504] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 102.108354][ T28] audit: type=1326 audit(1776018894.941:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5493 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f0189d2c819 code=0x7ffc0000 [ 102.153472][ T5506] loop3: detected capacity change from 0 to 2048 [ 102.205572][ T5506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.225639][ T5504] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 102.281962][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.391215][ T5518] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 102.437827][ T5520] loop3: detected capacity change from 0 to 2048 [ 102.448222][ T5518] bond5: (slave bridge1): Enslaving as a backup interface with an up link [ 102.500372][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.539859][ T5518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5518 comm=syz.1.604 [ 102.610914][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.819050][ T5531] loop3: detected capacity change from 0 to 128 [ 103.857179][ T5556] netlink: 84 bytes leftover after parsing attributes in process `syz.2.622'. [ 104.080207][ T5571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.627'. [ 104.102107][ T5571] netlink: 64 bytes leftover after parsing attributes in process `syz.0.627'. [ 104.480334][ T5578] loop4: detected capacity change from 0 to 512 [ 104.523931][ T5578] EXT4-fs: Ignoring removed nobh option [ 104.601000][ T5578] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.688104][ T5578] EXT4-fs (loop4): 1 truncate cleaned up [ 104.694432][ T5578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.726955][ T5582] xt_hashlimit: size too large, truncated to 1048576 [ 104.784664][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.841354][ T5585] netlink: 'syz.4.631': attribute type 3 has an invalid length. [ 104.896156][ T5586] syzkaller0: entered promiscuous mode [ 105.202024][ T5608] loop0: detected capacity change from 0 to 256 [ 105.307372][ T5613] loop4: detected capacity change from 0 to 1024 [ 105.415886][ T5613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.464809][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.108827][ T5639] loop4: detected capacity change from 0 to 512 [ 106.180762][ T5639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 106.259618][ T5639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.373281][ T5639] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.485983][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 106.534750][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.718970][ T5663] loop4: detected capacity change from 0 to 736 [ 106.815262][ T5663] rock: directory entry would overflow storage [ 106.821653][ T5663] rock: sig=0x3b10, size=4, remaining=3 [ 106.908424][ T5663] netlink: 64 bytes leftover after parsing attributes in process `syz.4.657'. [ 107.008080][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 107.008112][ T28] audit: type=1400 audit(1776018899.768:392): avc: denied { map } for pid=5662 comm="syz.4.657" path="socket:[11607]" dev="sockfs" ino=11607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.083530][ T5670] loop4: detected capacity change from 0 to 736 [ 107.124256][ T5670] rock: directory entry would overflow storage [ 107.130900][ T5670] rock: sig=0x3b10, size=4, remaining=3 [ 107.137237][ T28] audit: type=1400 audit(1776018899.768:393): avc: denied { read } for pid=5662 comm="syz.4.657" path="socket:[11607]" dev="sockfs" ino=11607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 107.175472][ T5670] FAULT_INJECTION: forcing a failure. [ 107.175472][ T5670] name failslab, interval 1, probability 0, space 0, times 0 [ 107.193912][ T5670] CPU: 0 UID: 0 PID: 5670 Comm: syz.4.660 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.193976][ T5670] Tainted: [W]=WARN [ 107.193984][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.193998][ T5670] Call Trace: [ 107.194007][ T5670] [ 107.194017][ T5670] __dump_stack+0x1d/0x30 [ 107.194114][ T5670] dump_stack_lvl+0x95/0xd0 [ 107.194143][ T5670] dump_stack+0x15/0x1b [ 107.194168][ T5670] should_fail_ex+0x263/0x280 [ 107.194269][ T5670] should_failslab+0x8c/0xb0 [ 107.194430][ T5670] kmem_cache_alloc_noprof+0x66/0x400 [ 107.194467][ T5670] ? do_getname+0x2e/0x1c0 [ 107.194491][ T5670] do_getname+0x2e/0x1c0 [ 107.194535][ T5670] getname_flags+0x1d/0x30 [ 107.194559][ T5670] do_sys_openat2+0x60/0x130 [ 107.194590][ T5670] __x64_sys_open+0xe6/0x110 [ 107.194620][ T5670] x64_sys_call+0x14b9/0x3020 [ 107.194700][ T5670] do_syscall_64+0x12c/0x370 [ 107.194726][ T5670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.194750][ T5670] RIP: 0033:0x7f0189d2c819 [ 107.194769][ T5670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.194825][ T5670] RSP: 002b:00007f018877f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 107.194850][ T5670] RAX: ffffffffffffffda RBX: 00007f0189fa5fa0 RCX: 00007f0189d2c819 [ 107.194867][ T5670] RDX: 00000000000000dc RSI: 000000000004827e RDI: 0000200000000200 [ 107.194883][ T5670] RBP: 00007f018877f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.194967][ T5670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.194979][ T5670] R13: 00007f0189fa6038 R14: 00007f0189fa5fa0 R15: 00007fff1a76d898 [ 107.195000][ T5670] [ 107.413956][ T5653] syz.0.655 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 107.431387][ T5653] CPU: 0 UID: 0 PID: 5653 Comm: syz.0.655 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.431422][ T5653] Tainted: [W]=WARN [ 107.431429][ T5653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.431512][ T5653] Call Trace: [ 107.431521][ T5653] [ 107.431531][ T5653] __dump_stack+0x1d/0x30 [ 107.431593][ T5653] dump_stack_lvl+0x95/0xd0 [ 107.431614][ T5653] dump_stack+0x15/0x1b [ 107.431638][ T5653] dump_header+0x80/0x240 [ 107.431664][ T5653] oom_kill_process+0x295/0x350 [ 107.431723][ T5653] out_of_memory+0x97d/0xb80 [ 107.431750][ T5653] try_charge_memcg+0x62e/0xa10 [ 107.431794][ T5653] obj_cgroup_charge_pages+0x23/0xc0 [ 107.431881][ T5653] __memcg_kmem_charge_page+0x9e/0x170 [ 107.431915][ T5653] __alloc_frozen_pages_noprof+0x18a/0x360 [ 107.431953][ T5653] alloc_pages_mpol+0xb3/0x260 [ 107.432052][ T5653] alloc_pages_noprof+0x8f/0x140 [ 107.432086][ T5653] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 107.432127][ T5653] __kvmalloc_node_noprof+0x3d4/0x650 [ 107.432227][ T5653] ? futex_hash_allocate+0x190/0x9d0 [ 107.432260][ T5653] ? futex_hash_allocate+0x190/0x9d0 [ 107.432345][ T5653] futex_hash_allocate+0x190/0x9d0 [ 107.432380][ T5653] ? cap_task_prctl+0x13f/0x6e0 [ 107.432461][ T5653] futex_hash_prctl+0xd8/0xf0 [ 107.432487][ T5653] __se_sys_prctl+0x4f4/0x1400 [ 107.432648][ T5653] __x64_sys_prctl+0x67/0x80 [ 107.432679][ T5653] x64_sys_call+0x2533/0x3020 [ 107.432737][ T5653] do_syscall_64+0x12c/0x370 [ 107.432839][ T5653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.432866][ T5653] RIP: 0033:0x7fed1a4bc819 [ 107.432883][ T5653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.432903][ T5653] RSP: 002b:00007fed18ef6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 107.432928][ T5653] RAX: ffffffffffffffda RBX: 00007fed1a736090 RCX: 00007fed1a4bc819 [ 107.432945][ T5653] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 107.432986][ T5653] RBP: 00007fed1a552c91 R08: 0000000000000000 R09: 0000000000000000 [ 107.433002][ T5653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.433017][ T5653] R13: 00007fed1a736128 R14: 00007fed1a736090 R15: 00007fffcf574778 [ 107.433037][ T5653] [ 107.433046][ T5653] memory: usage 307200kB, limit 307200kB, failcnt 491 [ 107.774945][ T5675] 9p: Could not find request transport: fd0x000000000000000a [ 107.807915][ T5653] memory+swap: usage 307312kB, limit 9007199254740988kB, failcnt 0 [ 107.815874][ T5653] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 107.891099][ T5653] Memory cgroup stats for /syz0: [ 107.891432][ T5653] cache 8192 [ 107.899796][ T5653] rss 4096 [ 107.934208][ T5653] shmem 0 [ 107.937482][ T5653] mapped_file 4096 [ 107.941598][ T5653] dirty 0 [ 107.997965][ T5653] writeback 0 [ 108.001344][ T5653] workingset_refault_anon 39 [ 108.005938][ T5653] workingset_refault_file 254 [ 108.051412][ T5653] swap 114688 [ 108.054931][ T5653] swapcached 290816 [ 108.058766][ T5653] pgpgin 69681 [ 108.060597][ T5675] loop4: detected capacity change from 0 to 512 [ 108.111148][ T5653] pgpgout 69672 [ 108.114999][ T5653] pgfault 84012 [ 108.125734][ T5653] pgmajfault 27 [ 108.138633][ T5653] inactive_anon 16384 [ 108.142701][ T5653] active_anon 0 [ 108.146184][ T5653] inactive_file 20480 [ 108.201043][ T5653] active_file 0 [ 108.215409][ T5653] unevictable 0 [ 108.227088][ T5675] EXT4-fs (loop4): 1 orphan inode deleted [ 108.237055][ T5653] hierarchical_memory_limit 314572800 [ 108.242643][ T5653] hierarchical_memsw_limit 9223372036854771712 [ 108.250945][ T5675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.277446][ T5653] total_cache 8192 [ 108.281290][ T5653] total_rss 4096 [ 108.285049][ T5653] total_shmem 0 [ 108.288761][ T5653] total_mapped_file 4096 [ 108.293035][ T5653] total_dirty 0 [ 108.296541][ T5653] total_writeback 0 [ 108.308776][ T5653] total_workingset_refault_anon 39 [ 108.314012][ T5653] total_workingset_refault_file 254 [ 108.328063][ T5675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.347376][ T5653] total_swap 114688 [ 108.373661][ T5653] total_swapcached 290816 [ 108.378132][ T5653] total_pgpgin 69681 [ 108.382319][ T5653] total_pgpgout 69672 [ 108.391187][ T5653] total_pgfault 84012 [ 108.404235][ T5653] total_pgmajfault 27 [ 108.408274][ T5653] total_inactive_anon 16384 [ 108.555179][ T5653] total_active_anon 0 [ 108.559303][ T5653] total_inactive_file 20480 [ 108.563928][ T5653] total_active_file 0 [ 108.568261][ T5653] total_unevictable 0 [ 108.572260][ T5653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.655,pid=5651,uid=0 [ 108.587089][ T5653] Memory cgroup out of memory: Killed process 5653 (syz.0.655) total-vm:90456kB, anon-rss:1248kB, file-rss:21636kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 108.647653][ T5653] syz.0.655 (5653) used greatest stack depth: 9016 bytes left [ 108.946956][ T5679] loop0: detected capacity change from 0 to 1024 [ 108.976046][ T5679] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 109.002043][ T5679] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 109.022132][ T5679] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.662: inode #1: comm syz.0.662: iget: illegal inode # [ 109.048186][ T5679] loop0: lost filesystem error report for type 5 error -117 [ 109.049379][ T5679] EXT4-fs (loop0): no journal found [ 109.056993][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.057025][ C1] EXT4-fs (loop0): initial error at time 1776018901: ext4_get_journal_inode:5888 [ 109.057052][ C1] EXT4-fs (loop0): last error at time 1776018901: ext4_get_journal_inode:5888 [ 109.120093][ T5679] EXT4-fs (loop0): can't get journal size [ 109.136218][ T5679] EXT4-fs (loop0): failed to initialize system zone (-22) [ 109.156569][ T5679] EXT4-fs (loop0): mount failed [ 109.162751][ T5660] syz.2.659 (5660) used greatest stack depth: 7984 bytes left [ 109.388281][ T28] audit: type=1400 audit(1776018902.003:394): avc: denied { map } for pid=5685 comm="syz.0.665" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 109.480138][ T5686] xfrm0 speed is unknown, defaulting to 1000 [ 109.804171][ T5694] xt_hashlimit: size too large, truncated to 1048576 [ 109.828635][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 109.859617][ T28] audit: type=1400 audit(1776018902.424:395): avc: denied { setopt } for pid=5691 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.181252][ T5705] loop0: detected capacity change from 0 to 1024 [ 110.228128][ T5705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.312954][ T5712] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 110.317899][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.340169][ T5712] 8021q: adding VLAN 0 to HW filter on device bond4 [ 110.443963][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 110.453362][ T5722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.675'. [ 110.478778][ T5718] xfrm0 speed is unknown, defaulting to 1000 [ 110.744524][ T5729] xfrm0 speed is unknown, defaulting to 1000 [ 110.853420][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 110.916555][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 110.936762][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 110.979530][ T5734] loop0: detected capacity change from 0 to 512 [ 111.046683][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 111.130613][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 111.164785][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 111.243370][ T28] audit: type=1400 audit(1776018903.734:396): avc: denied { read } for pid=5739 comm="syz.4.681" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.322573][ T28] audit: type=1400 audit(1776018903.734:397): avc: denied { open } for pid=5739 comm="syz.4.681" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.386882][ T28] audit: type=1400 audit(1776018903.734:398): avc: denied { ioctl } for pid=5739 comm="syz.4.681" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 111.431356][ T5746] netlink: 'syz.4.683': attribute type 1 has an invalid length. [ 111.460665][ T28] audit: type=1400 audit(1776018903.781:399): avc: denied { create } for pid=5743 comm="syz.4.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.552038][ T5746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.560282][ T5746] bond2: (slave bond3): making interface the new active one [ 111.568289][ T5746] bond2: (slave bond3): Enslaving as an active interface with an up link [ 111.595694][ T5751] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 111.692434][ T5746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.763864][ T28] audit: type=1400 audit(1776018904.192:400): avc: denied { getopt } for pid=5747 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.899526][ T5746] vlan2: entered promiscuous mode [ 111.941073][ T5746] bond2: entered promiscuous mode [ 111.976022][ T5746] bond3: entered promiscuous mode [ 112.575257][ T5772] loop4: detected capacity change from 0 to 1024 [ 112.633451][ T5772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.669855][ T5779] __nla_validate_parse: 4 callbacks suppressed [ 112.669875][ T5779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.693'. [ 112.710277][ T28] audit: type=1400 audit(1776018905.100:401): avc: denied { connect } for pid=5771 comm="syz.4.692" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.772570][ T5779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5779 comm=syz.0.693 [ 112.798219][ T28] audit: type=1400 audit(1776018905.100:402): avc: denied { write } for pid=5771 comm="syz.4.692" laddr=fe80::10 lport=255 faddr=fe80::bb fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 112.798354][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.360130][ T28] audit: type=1400 audit(1776018905.717:403): avc: denied { connect } for pid=5783 comm="syz.0.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.369091][ T5787] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 113.397190][ T5787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.412808][ T5790] netlink: 52 bytes leftover after parsing attributes in process `syz.0.696'. [ 113.487125][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'. [ 113.716634][ T5809] loop4: detected capacity change from 0 to 2048 [ 113.843023][ T5809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.951017][ T5816] loop0: detected capacity change from 0 to 1764 [ 114.007507][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.045397][ T5816] ISOFS: Logical zone size(512) < hardware blocksize(1024) [ 114.305443][ T28] audit: type=1400 audit(1776018906.596:404): avc: denied { allowed } for pid=5820 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 114.344925][ T5822] loop4: detected capacity change from 0 to 1024 [ 114.382913][ T5824] loop0: detected capacity change from 0 to 1024 [ 114.401959][ T5824] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.416407][ T5822] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.443274][ T5822] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 114.453656][ T5824] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 114.477397][ T5822] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.708: inode #1: comm syz.4.708: iget: illegal inode # [ 114.498254][ T5824] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.709: inode #1: comm syz.0.709: iget: illegal inode # [ 114.527532][ T5822] loop4: lost filesystem error report for type 5 error -117 [ 114.528343][ T5822] EXT4-fs (loop4): no journal found [ 114.536032][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 114.536052][ C0] EXT4-fs (loop4): initial error at time 1776018906: ext4_get_journal_inode:5888 [ 114.536079][ C0] EXT4-fs (loop4): last error at time 1776018906: ext4_get_journal_inode:5888 [ 114.538026][ T5826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 114.542569][ T5824] loop0: lost filesystem error report for type 5 error -117 [ 114.559269][ T5826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 114.567178][ T5822] EXT4-fs (loop4): can't get journal size [ 114.599968][ T5824] EXT4-fs (loop0): no journal found [ 114.605459][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 114.605475][ C0] EXT4-fs (loop0): initial error at time 1776018906: ext4_get_journal_inode:5888 [ 114.605496][ C0] EXT4-fs (loop0): last error at time 1776018906: ext4_get_journal_inode:5888 [ 114.608069][ T5826] netlink: 52 bytes leftover after parsing attributes in process `syz.2.699'. [ 114.613738][ T5824] EXT4-fs (loop0): can't get journal size [ 114.645896][ T5822] EXT4-fs (loop4): failed to initialize system zone (-22) [ 114.653897][ T5822] EXT4-fs (loop4): mount failed [ 114.659383][ T5824] EXT4-fs (loop0): failed to initialize system zone (-22) [ 114.677666][ T5824] EXT4-fs (loop0): mount failed [ 114.864993][ T5836] netlink: 14 bytes leftover after parsing attributes in process `syz.2.712'. [ 114.907054][ T5838] loop4: detected capacity change from 0 to 256 [ 114.934376][ T5838] FAULT_INJECTION: forcing a failure. [ 114.934376][ T5838] name failslab, interval 1, probability 0, space 0, times 0 [ 114.973828][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.4.713 Tainted: G W syzkaller #0 PREEMPT(full) [ 114.973879][ T5838] Tainted: [W]=WARN [ 114.973886][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.973931][ T5838] Call Trace: [ 114.973939][ T5838] [ 114.973948][ T5838] __dump_stack+0x1d/0x30 [ 114.974030][ T5838] dump_stack_lvl+0x95/0xd0 [ 114.974054][ T5838] dump_stack+0x15/0x1b [ 114.974075][ T5838] should_fail_ex+0x263/0x280 [ 114.974176][ T5838] should_failslab+0x8c/0xb0 [ 114.974265][ T5838] kmem_cache_alloc_noprof+0x66/0x400 [ 114.974293][ T5838] ? do_getname+0x2e/0x1c0 [ 114.974318][ T5838] do_getname+0x2e/0x1c0 [ 114.974340][ T5838] getname_flags+0x1d/0x30 [ 114.974365][ T5838] do_sys_openat2+0x60/0x130 [ 114.974473][ T5838] __x64_sys_openat+0xf2/0x120 [ 114.974501][ T5838] x64_sys_call+0x1e39/0x3020 [ 114.974618][ T5838] do_syscall_64+0x12c/0x370 [ 114.974673][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.974706][ T5838] RIP: 0033:0x7f0189d2c819 [ 114.974723][ T5838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.974757][ T5838] RSP: 002b:00007f018877f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.974822][ T5838] RAX: ffffffffffffffda RBX: 00007f0189fa5fa0 RCX: 00007f0189d2c819 [ 114.974958][ T5838] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 114.974975][ T5838] RBP: 00007f018877f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.974990][ T5838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.975005][ T5838] R13: 00007f0189fa6038 R14: 00007f0189fa5fa0 R15: 00007fff1a76d898 [ 114.975026][ T5838] [ 115.216199][ T5845] loop0: detected capacity change from 0 to 256 [ 115.261014][ T28] audit: type=1326 audit(1776018907.494:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.277103][ T5847] xfrm0 speed is unknown, defaulting to 1000 [ 115.333847][ T28] audit: type=1326 audit(1776018907.494:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.348605][ T5849] loop0: detected capacity change from 0 to 2048 [ 115.482884][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.486250][ T28] audit: type=1326 audit(1776018907.494:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.519055][ T28] audit: type=1326 audit(1776018907.494:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.544623][ T28] audit: type=1326 audit(1776018907.494:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.595491][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.664120][ T28] audit: type=1326 audit(1776018907.494:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5846 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21501fc819 code=0x7ffc0000 [ 115.714764][ T5861] loop0: detected capacity change from 0 to 256 [ 116.005453][ T5847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.113111][ T3785] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.165446][ T3785] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.186797][ T3785] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.195983][ T5869] FAULT_INJECTION: forcing a failure. [ 116.195983][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 116.240457][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.0.722 Tainted: G W syzkaller #0 PREEMPT(full) [ 116.240533][ T5869] Tainted: [W]=WARN [ 116.240540][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 116.240551][ T5869] Call Trace: [ 116.240559][ T5869] [ 116.240569][ T5869] __dump_stack+0x1d/0x30 [ 116.240648][ T5869] dump_stack_lvl+0x95/0xd0 [ 116.240671][ T5869] dump_stack+0x15/0x1b [ 116.240691][ T5869] should_fail_ex+0x263/0x280 [ 116.240721][ T5869] should_failslab+0x8c/0xb0 [ 116.240822][ T5869] kmem_cache_alloc_noprof+0x66/0x400 [ 116.240899][ T5869] ? security_inode_alloc+0x37/0x100 [ 116.240934][ T5869] security_inode_alloc+0x37/0x100 [ 116.240966][ T5869] inode_init_always_gfp+0x4b7/0x500 [ 116.241070][ T5869] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 116.241106][ T5869] alloc_inode+0x58/0x170 [ 116.241178][ T5869] new_inode+0x1d/0xe0 [ 116.241201][ T5869] shmem_get_inode+0x246/0x750 [ 116.241235][ T5869] __shmem_file_setup+0x112/0x210 [ 116.241266][ T5869] shmem_file_setup+0x3b/0x50 [ 116.241294][ T5869] memfd_alloc_file+0x4e/0x300 [ 116.241330][ T5869] __se_sys_memfd_create+0x2e1/0x3b0 [ 116.241404][ T5869] __x64_sys_memfd_create+0x31/0x40 [ 116.241434][ T5869] x64_sys_call+0x1f22/0x3020 [ 116.241463][ T5869] do_syscall_64+0x12c/0x370 [ 116.241506][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.241527][ T5869] RIP: 0033:0x7fed1a4bc819 [ 116.241548][ T5869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.241570][ T5869] RSP: 002b:00007fed18f16e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 116.241593][ T5869] RAX: ffffffffffffffda RBX: 0000000000000453 RCX: 00007fed1a4bc819 [ 116.241702][ T5869] RDX: 00007fed18f16ee0 RSI: 0000000000000000 RDI: 00007fed1a552e71 [ 116.241719][ T5869] RBP: 0000200000000f80 R08: 00000000ffffffff R09: 0000000000000000 [ 116.241734][ T5869] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000300 [ 116.241749][ T5869] R13: 00007fed18f16ee0 R14: 00007fed18f16ea0 R15: 0000200000000b40 [ 116.241770][ T5869] [ 116.244779][ T3785] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.516478][ T5882] set_capacity_and_notify: 1 callbacks suppressed [ 116.516564][ T5882] loop4: detected capacity change from 0 to 512 [ 116.538845][ T5882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.572446][ T5882] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.727: bg 0: block 142: padding at end of block bitmap is not set [ 116.614662][ T5882] loop4: lost filesystem error report for type 5 error -117 [ 116.614893][ T5882] EXT4-fs (loop4): Remounting filesystem read-only [ 116.629154][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 116.629171][ C1] EXT4-fs (loop4): initial error at time 1776018908: ext4_validate_block_bitmap:441 [ 116.629192][ C1] EXT4-fs (loop4): last error at time 1776018908: ext4_validate_block_bitmap:441 [ 116.772861][ T5882] EXT4-fs (loop4): 1 truncate cleaned up [ 116.796888][ T5882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.892835][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.150002][ T5894] loop4: detected capacity change from 0 to 512 [ 117.170195][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.605883][ T5873] loop0: detected capacity change from 0 to 1024 [ 117.965868][ T5873] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 118.032409][ T5873] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 118.084253][ T5873] EXT4-fs error (device loop0): ext4_get_journal_inode:5888: comm syz.0.724: inode #1: comm syz.0.724: iget: illegal inode # [ 118.155866][ T5873] loop0: lost filesystem error report for type 5 error -117 [ 118.159439][ T5873] EXT4-fs (loop0): no journal found [ 118.167438][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 118.167521][ C0] EXT4-fs (loop0): initial error at time 1776018910: ext4_get_journal_inode:5888 [ 118.167624][ C0] EXT4-fs (loop0): last error at time 1776018910: ext4_get_journal_inode:5888 [ 118.290782][ T5873] EXT4-fs (loop0): can't get journal size [ 118.333968][ T5873] EXT4-fs (loop0): failed to initialize system zone (-22) [ 118.368663][ T5873] EXT4-fs (loop0): mount failed [ 118.796325][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.038456][ T5916] loop4: detected capacity change from 0 to 8192 [ 119.171737][ T3304] loop4: p3 p4[EZD] [ 119.182100][ T3304] loop4: p3 start 458783 is beyond EOD, truncated [ 119.191681][ T3304] loop4: p4 size 65536 extends beyond EOD, truncated [ 119.230113][ T5916] loop4: p3 p4[EZD] [ 119.234021][ T3805] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.251315][ T5916] loop4: p3 start 458783 is beyond EOD, truncated [ 119.276550][ T5916] loop4: p4 size 65536 extends beyond EOD, truncated [ 119.299429][ T5912] xfrm0 speed is unknown, defaulting to 1000 [ 119.334273][ T3805] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.469666][ T3805] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.503290][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 119.564858][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 119.602395][ T5927] loop4: detected capacity change from 0 to 512 [ 119.634531][ T3805] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.645749][ T5927] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 119.668135][ T5927] EXT4-fs (loop4): 1 truncate cleaned up [ 119.686939][ T5927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.812238][ T3805] bridge_slave_1: left allmulticast mode [ 119.817968][ T3805] bridge_slave_1: left promiscuous mode [ 119.823985][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.844442][ T3805] bridge_slave_0: left allmulticast mode [ 119.850884][ T3805] bridge_slave_0: left promiscuous mode [ 119.864878][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.013798][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.060832][ T3805] bond0 (unregistering): (slave gretap1): Releasing backup interface [ 120.105409][ T3805] bond2 (unregistering): (slave geneve2): Releasing active interface [ 120.144636][ T3805] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 120.220019][ T3805] bond1 (unregistering): Released all slaves [ 120.231221][ T3805] bond2 (unregistering): Released all slaves [ 120.250069][ T5942] loop0: detected capacity change from 0 to 2048 [ 120.262028][ T3805] bond0 (unregistering): (slave bond3): Releasing backup interface [ 120.270161][ T3805] bond3 (unregistering): left promiscuous mode [ 120.289381][ T3805] bond0 (unregistering): Released all slaves [ 120.293628][ T5942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.302318][ T3805] bond3 (unregistering): Released all slaves [ 120.347518][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.359223][ T3805] bond4 (unregistering): Released all slaves [ 120.370348][ T3805] bond5 (unregistering): Released all slaves [ 120.395447][ T5946] FAULT_INJECTION: forcing a failure. [ 120.395447][ T5946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.413963][ T5948] loop0: detected capacity change from 0 to 256 [ 120.415387][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.4.745 Tainted: G W syzkaller #0 PREEMPT(full) [ 120.415420][ T5946] Tainted: [W]=WARN [ 120.415428][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.415440][ T5946] Call Trace: [ 120.415448][ T5946] [ 120.415457][ T5946] __dump_stack+0x1d/0x30 [ 120.415517][ T5946] dump_stack_lvl+0x95/0xd0 [ 120.415541][ T5946] dump_stack+0x15/0x1b [ 120.415569][ T5946] should_fail_ex+0x263/0x280 [ 120.415597][ T5946] should_fail+0xb/0x20 [ 120.415622][ T5946] should_fail_usercopy+0x1a/0x20 [ 120.415709][ T5946] _copy_from_user+0x1c/0xb0 [ 120.415741][ T5946] ___sys_sendmsg+0xc1/0x1e0 [ 120.415760][ T5946] ? path_openat+0x1b01/0x2050 [ 120.415822][ T5946] __sys_sendmmsg+0x185/0x320 [ 120.415849][ T5946] __x64_sys_sendmmsg+0x57/0x70 [ 120.415878][ T5946] x64_sys_call+0x27aa/0x3020 [ 120.415905][ T5946] do_syscall_64+0x12c/0x370 [ 120.415973][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.415995][ T5946] RIP: 0033:0x7f0189d2c819 [ 120.416012][ T5946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.416031][ T5946] RSP: 002b:00007f018877f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.416106][ T5946] RAX: ffffffffffffffda RBX: 00007f0189fa5fa0 RCX: 00007f0189d2c819 [ 120.416121][ T5946] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000005 [ 120.416135][ T5946] RBP: 00007f018877f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.416149][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.416162][ T5946] R13: 00007f0189fa6038 R14: 00007f0189fa5fa0 R15: 00007fff1a76d898 [ 120.416233][ T5946] [ 120.500175][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 120.512091][ T5948] vfat: Unknown parameter '0xffffffffffffffff' [ 120.758335][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 120.758411][ T28] audit: type=1400 audit(1776018912.630:549): avc: denied { create } for pid=5954 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.786170][ T5955] netlink: 1 bytes leftover after parsing attributes in process `syz.4.746'. [ 120.839192][ T3805] hsr_slave_0: left promiscuous mode [ 120.852069][ T28] audit: type=1400 audit(1776018912.667:550): avc: denied { ioctl } for pid=5954 comm="syz.4.746" path="socket:[13325]" dev="sockfs" ino=13325 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 120.884937][ T3805] hsr_slave_1: left promiscuous mode [ 120.892883][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.900716][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.909821][ T28] audit: type=1400 audit(1776018912.695:551): avc: denied { listen } for pid=5954 comm="syz.4.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 120.910420][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.940913][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.953588][ T3805] veth1_macvtap: left promiscuous mode [ 120.959345][ T3805] veth0_macvtap: left promiscuous mode [ 120.974637][ T3805] veth1_vlan: left promiscuous mode [ 120.981749][ T3805] veth0_vlan: left promiscuous mode [ 121.030740][ T28] audit: type=1400 audit(1776018912.891:552): avc: denied { create } for pid=5975 comm="syz.0.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.182928][ T3805] team0 (unregistering): Port device team_slave_1 removed [ 121.204297][ T3805] team0 (unregistering): Port device team_slave_0 removed [ 121.293106][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.300396][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.307647][ T5912] bridge_slave_0: entered allmulticast mode [ 121.322119][ T5912] bridge_slave_0: entered promiscuous mode [ 121.329480][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.336837][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.345376][ T5912] bridge_slave_1: entered allmulticast mode [ 121.352938][ T5912] bridge_slave_1: entered promiscuous mode [ 121.359727][ T28] audit: type=1400 audit(1776018913.191:553): avc: denied { write } for pid=5975 comm="syz.0.749" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 121.390697][ T28] audit: type=1400 audit(1776018913.191:554): avc: denied { open } for pid=5975 comm="syz.0.749" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 121.430652][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.442129][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.462021][ T5977] xfrm0 speed is unknown, defaulting to 1000 [ 121.533210][ T5912] team0: Port device team_slave_0 added [ 121.555311][ T5912] team0: Port device team_slave_1 added [ 121.567249][ T5990] loop4: detected capacity change from 0 to 1024 [ 121.598038][ T5936] xfrm0 speed is unknown, defaulting to 1000 [ 121.616520][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.628775][ T5990] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 121.637290][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.681283][ T5990] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 121.688985][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.719453][ T5990] EXT4-fs error (device loop4): ext4_get_journal_inode:5888: comm syz.4.751: inode #1: comm syz.4.751: iget: illegal inode # [ 121.778400][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.785394][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.792098][ T5990] loop4: lost filesystem error report for type 5 error -117 [ 121.825085][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.844770][ T5990] EXT4-fs (loop4): no journal found [ 121.850133][ T5990] EXT4-fs (loop4): can't get journal size [ 121.856045][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 121.856064][ C1] EXT4-fs (loop4): initial error at time 1776018913: ext4_get_journal_inode:5888 [ 121.856085][ C1] EXT4-fs (loop4): last error at time 1776018913: ext4_get_journal_inode:5888 [ 121.900032][ T5990] EXT4-fs (loop4): failed to initialize system zone (-22) [ 121.917940][ T5912] hsr_slave_0: entered promiscuous mode [ 121.935751][ T5990] EXT4-fs (loop4): mount failed [ 121.941974][ T5912] hsr_slave_1: entered promiscuous mode [ 121.959645][ T5912] debugfs: 'hsr0' already exists in 'hsr' [ 121.981018][ T5912] Cannot create hsr debugfs directory [ 121.992619][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 122.048253][ T6010] loop0: detected capacity change from 0 to 2048 [ 122.093133][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.132448][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.218331][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.253822][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.291401][ T5936] bridge_slave_0: entered allmulticast mode [ 122.298280][ T5936] bridge_slave_0: entered promiscuous mode [ 122.345898][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.353278][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.377011][ T5936] bridge_slave_1: entered allmulticast mode [ 122.383669][ T5936] bridge_slave_1: entered promiscuous mode [ 122.474716][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.500155][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.560048][ T28] audit: type=1400 audit(1776018914.313:555): avc: denied { listen } for pid=6043 comm="syz.0.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.610307][ T5936] team0: Port device team_slave_0 added [ 122.633928][ T5936] team0: Port device team_slave_1 added [ 122.687088][ T6065] loop4: detected capacity change from 0 to 256 [ 122.701465][ T6065] msdos: Bad value for 'tz' [ 122.733218][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.745873][ T6065] loop4: detected capacity change from 0 to 512 [ 122.764974][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.830706][ T6065] EXT4-fs: Ignoring removed nobh option [ 122.883659][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.894920][ T6065] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 122.894925][ T28] audit: type=1400 audit(1776018914.313:556): avc: denied { ioctl } for pid=6043 comm="syz.0.757" path="socket:[14364]" dev="sockfs" ino=14364 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.939688][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.970993][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.986260][ T28] audit: type=1400 audit(1776018914.435:557): avc: denied { sqpoll } for pid=6030 comm="syz.4.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.026037][ T28] audit: type=1400 audit(1776018914.687:558): avc: denied { read write } for pid=6064 comm="syz.0.759" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 123.071689][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.095165][ T5912] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.105294][ T6065] EXT4-fs (loop4): 1 truncate cleaned up [ 123.118280][ T5912] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.136461][ T3811] bridge_slave_1: left allmulticast mode [ 123.137819][ T6065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.142317][ T3811] bridge_slave_1: left promiscuous mode [ 123.142446][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.212815][ T3811] bridge_slave_0: left allmulticast mode [ 123.218571][ T3811] bridge_slave_0: left promiscuous mode [ 123.246688][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.331692][ T3805] smc: removing ib device syz1 [ 123.429310][ T3811] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 123.963287][ T6089] netlink: 'syz.2.763': attribute type 1 has an invalid length. [ 123.982691][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.991999][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.001267][ T3811] bond0 (unregistering): Released all slaves [ 124.016922][ T3811] bond1 (unregistering): (slave bond2): Releasing backup interface [ 124.034207][ T3811] bond2 (unregistering): left promiscuous mode [ 124.047317][ T3811] bond1 (unregistering): Released all slaves [ 124.057878][ T3811] bond2 (unregistering): Released all slaves [ 124.076805][ T3811] bond3 (unregistering): (slave bond4): Releasing backup interface [ 124.093224][ T3811] bond3 (unregistering): Released all slaves [ 124.102124][ T3811] bond4 (unregistering): Released all slaves [ 124.121073][ T5912] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 124.127617][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.763'. [ 124.139381][ T5912] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 124.216482][ T6090] 8021q: adding VLAN 0 to HW filter on device bond6 [ 124.249083][ T6090] bond5: (slave bond6): making interface the new active one [ 124.256630][ T6090] bond5: (slave bond6): Enslaving as an active interface with an up link [ 124.288514][ T6092] 8021q: adding VLAN 0 to HW filter on device bond5 [ 124.313207][ T5936] hsr_slave_0: entered promiscuous mode [ 124.319539][ T5936] hsr_slave_1: entered promiscuous mode [ 124.325739][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 124.342426][ T5936] Cannot create hsr debugfs directory [ 124.357936][ T6094] vlan2: entered promiscuous mode [ 124.363159][ T6094] bond5: entered promiscuous mode [ 124.368483][ T6094] bond6: entered promiscuous mode [ 124.397470][ T3811] hsr_slave_0: left promiscuous mode [ 124.408271][ T3811] hsr_slave_1: left promiscuous mode [ 124.418866][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.440492][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.542673][ T3811] team0 (unregistering): Port device team_slave_1 removed [ 124.564988][ T3811] team0 (unregistering): Port device team_slave_0 removed [ 124.634311][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.654411][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.703829][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.718093][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.758904][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.782934][ T6103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.765'. [ 124.869498][ T6128] syzkaller1: entered allmulticast mode [ 124.886650][ T5936] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.913737][ T5936] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.924764][ T5936] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.969691][ T5936] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 125.024059][ T6137] loop0: detected capacity change from 0 to 512 [ 125.035324][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.045657][ T6137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.075240][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.103006][ T6137] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #14: comm syz.0.768: invalid orphan symlink nlink 1 [ 125.115715][ T1717] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.123040][ T1717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.150653][ T6137] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 125.150932][ T6137] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.768: couldn't read orphan inode 14 (err -117) [ 125.160779][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 125.160804][ C1] EXT4-fs (loop0): initial error at time 1776018916: ext4_orphan_get:1397: inode 14 [ 125.160836][ C1] EXT4-fs (loop0): last error at time 1776018916: ext4_orphan_get:1397: inode 14 [ 125.208630][ T1717] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.216277][ T1717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.225707][ T6149] netlink: 64 bytes leftover after parsing attributes in process `syz.2.769'. [ 125.243023][ T6137] loop0: lost filesystem error report for type 5 error -117 [ 125.243653][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.311095][ T5912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.350455][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.409722][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.419064][ T6165] loop0: detected capacity change from 0 to 256 [ 125.460836][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.491350][ T6170] ================================================================== [ 125.499664][ T6170] BUG: KCSAN: data-race in mas_state_walk / mas_wmb_replace [ 125.507001][ T6170] [ 125.509458][ T6170] write to 0xffff888104a06e00 of 8 bytes by task 6167 on cpu 1: [ 125.517346][ T6170] mas_wmb_replace+0x13ce/0x1610 [ 125.522315][ T6170] mas_wr_store_entry+0x16b6/0x2ed0 [ 125.527786][ T6170] mas_store_prealloc+0x72e/0xa70 [ 125.532926][ T6170] mmap_region+0x1ccb/0x20c0 [ 125.537641][ T6170] do_mmap+0x9b2/0xbd0 [ 125.541743][ T6170] vm_mmap_pgoff+0x183/0x2d0 [ 125.546360][ T6170] ksys_mmap_pgoff+0xc1/0x310 [ 125.551237][ T6170] x64_sys_call+0x14df/0x3020 [ 125.556035][ T6170] do_syscall_64+0x12c/0x370 [ 125.560653][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.566569][ T6170] [ 125.568913][ T6170] read to 0xffff888104a06e00 of 8 bytes by task 6170 on cpu 0: [ 125.576708][ T6170] mas_state_walk+0x485/0x650 [ 125.581505][ T6170] mas_walk+0x60/0x150 [ 125.585789][ T6170] lock_vma_under_rcu+0xc9/0x210 [ 125.591978][ T6170] do_user_addr_fault+0x232/0x1050 [ 125.597994][ T6170] exc_page_fault+0x62/0xa0 [ 125.602531][ T6170] asm_exc_page_fault+0x26/0x30 [ 125.607497][ T6170] [ 125.609923][ T6170] value changed: 0xffff888103e0f40e -> 0xffff888104a06e00 [ 125.617139][ T6170] [ 125.619479][ T6170] Reported by Kernel Concurrency Sanitizer on: [ 125.625743][ T6170] CPU: 0 UID: 0 PID: 6170 Comm: syz.2.774 Tainted: G W syzkaller #0 PREEMPT(full) [ 125.636699][ T6170] Tainted: [W]=WARN [ 125.640705][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.650796][ T6170] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 125.660247][ T5936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 125.682938][ T5936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.783926][ T3521] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.796310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.803561][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.843384][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.850773][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.027349][ T6031] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.098280][ T1717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.177222][ T1717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.261152][ T1717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.356590][ T1717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.415631][ T1717] bridge_slave_1: left allmulticast mode [ 126.421560][ T1717] bridge_slave_1: left promiscuous mode [ 126.427486][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.435980][ T1717] bridge_slave_0: left allmulticast mode [ 126.441708][ T1717] bridge_slave_0: left promiscuous mode [ 126.447393][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.510825][ T1717] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 126.522901][ T1717] bond3 (unregistering): (slave geneve2): Releasing active interface [ 126.560301][ T1717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.570319][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.580062][ T1717] bond0 (unregistering): Released all slaves [ 126.588115][ T1717] bond1 (unregistering): (slave bond2): Releasing backup interface [ 126.596254][ T1717] bond2 (unregistering): left promiscuous mode [ 126.603179][ T1717] bond1 (unregistering): Released all slaves [ 126.611707][ T1717] bond2 (unregistering): Released all slaves [ 126.619944][ T1717] bond3 (unregistering): Released all slaves [ 126.629423][ T1717] bond4 (unregistering): Released all slaves [ 126.638283][ T1717] bond5 (unregistering): (slave bond6): Releasing backup interface [ 126.646474][ T1717] bond6 (unregistering): left promiscuous mode [ 126.653965][ T1717] bond5 (unregistering): Released all slaves [ 126.662527][ T1717] bond6 (unregistering): Released all slaves [ 126.752076][ T1717] hsr_slave_0: left promiscuous mode [ 126.758046][ T1717] hsr_slave_1: left promiscuous mode [ 126.764421][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.771897][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.780026][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.787693][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.797513][ T1717] veth1_macvtap: left promiscuous mode [ 126.803095][ T1717] veth0_macvtap: left promiscuous mode [ 126.808871][ T1717] veth1_vlan: left promiscuous mode [ 126.814398][ T1717] veth0_vlan: left promiscuous mode [ 126.873127][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 126.884230][ T1717] team0 (unregistering): Port device team_slave_0 removed [ 127.974857][ T1717] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.035491][ T1717] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.077750][ T1717] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.131557][ T1717] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.237605][ T1717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.248133][ T1717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.281847][ T1717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.292298][ T1717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.345221][ T1717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.356117][ T1717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.431626][ T1717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 128.442286][ T1717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.520413][ T1717] bridge_slave_1: left allmulticast mode [ 128.526669][ T1717] bridge_slave_1: left promiscuous mode [ 128.532384][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.540792][ T1717] bridge_slave_0: left allmulticast mode [ 128.546722][ T1717] bridge_slave_0: left promiscuous mode [ 128.552483][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.560825][ T1717] bridge_slave_1: left allmulticast mode [ 128.566585][ T1717] bridge_slave_1: left promiscuous mode [ 128.572621][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.580941][ T1717] bridge_slave_0: left allmulticast mode [ 128.586788][ T1717] bridge_slave_0: left promiscuous mode [ 128.592883][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.601257][ T1717] bridge_slave_1: left allmulticast mode [ 128.607275][ T1717] bridge_slave_1: left promiscuous mode [ 128.613695][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.621639][ T1717] bridge_slave_0: left allmulticast mode [ 128.627399][ T1717] bridge_slave_0: left promiscuous mode [ 128.633342][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.646395][ T1717] bridge_slave_1: left allmulticast mode [ 128.652196][ T1717] bridge_slave_1: left promiscuous mode [ 128.658072][ T1717] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.666108][ T1717] bridge_slave_0: left allmulticast mode [ 128.671784][ T1717] bridge_slave_0: left promiscuous mode [ 128.677590][ T1717] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.805348][ T1717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.815510][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.824921][ T1717] bond0 (unregistering): Released all slaves [ 128.889665][ T1717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.899885][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.909542][ T1717] bond0 (unregistering): Released all slaves [ 128.919101][ T1717] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 128.939279][ T1717] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 128.969370][ T1717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.979399][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.989044][ T1717] bond0 (unregistering): Released all slaves [ 128.996714][ T1717] bond1 (unregistering): Released all slaves [ 129.006322][ T1717] bond2 (unregistering): (slave bond3): Releasing backup interface [ 129.014342][ T1717] bond3 (unregistering): left promiscuous mode [ 129.021330][ T1717] bond2 (unregistering): Released all slaves [ 129.029741][ T1717] bond3 (unregistering): Released all slaves [ 129.038629][ T1717] bond4 (unregistering): Released all slaves [ 129.057084][ T1717] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 129.071297][ T1717] bond6 (unregistering): (slave geneve2): Releasing active interface [ 129.220701][ T1717] bond0 (unregistering): (slave ªªªªª(): Releasing backup interface [ 129.230246][ T1717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.240252][ T1717] bond0 (unregistering): Released all slaves [ 129.248155][ T1717] bond1 (unregistering): (slave bond2): Releasing backup interface [ 129.256116][ T1717] bond2 (unregistering): left promiscuous mode [ 129.263104][ T1717] bond1 (unregistering): Released all slaves [ 129.271307][ T1717] bond2 (unregistering): Released all slaves [ 129.279669][ T1717] bond3 (unregistering): Released all slaves [ 129.288764][ T1717] bond4 (unregistering): (slave bond5): Releasing backup interface [ 129.297095][ T1717] bond5 (unregistering): left promiscuous mode [ 129.303981][ T1717] bond4 (unregistering): Released all slaves [ 129.312508][ T1717] bond5 (unregistering): Released all slaves [ 129.321202][ T1717] bond6 (unregistering): Released all slaves [ 129.395404][ T1717] hsr_slave_0: left promiscuous mode [ 129.402440][ T1717] hsr_slave_1: left promiscuous mode [ 129.408257][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.416155][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.425908][ T1717] hsr_slave_0: left promiscuous mode [ 129.431698][ T1717] hsr_slave_1: left promiscuous mode [ 129.438383][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.446230][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.455834][ T1717] hsr_slave_0: left promiscuous mode [ 129.461767][ T1717] hsr_slave_1: left promiscuous mode [ 129.468018][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.475560][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.483784][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.491543][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.501156][ T1717] hsr_slave_0: left promiscuous mode [ 129.507336][ T1717] hsr_slave_1: left promiscuous mode [ 129.513073][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.520768][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.528412][ T1717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.536126][ T1717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.550591][ T1717] veth1_macvtap: left promiscuous mode [ 129.556082][ T1717] veth0_macvtap: left promiscuous mode [ 129.561773][ T1717] veth1_vlan: left promiscuous mode [ 129.566994][ T1717] veth0_vlan: left promiscuous mode [ 129.572816][ T1717] veth1_macvtap: left promiscuous mode [ 129.578320][ T1717] veth0_macvtap: left promiscuous mode [ 129.584279][ T1717] veth1_vlan: left promiscuous mode [ 129.589791][ T1717] veth0_vlan: left promiscuous mode [ 129.700434][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 129.710177][ T1717] team0 (unregistering): Port device team_slave_0 removed [ 129.760440][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 129.769917][ T1717] team0 (unregistering): Port device team_slave_0 removed [ 129.825651][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 129.835428][ T1717] team0 (unregistering): Port device team_slave_0 removed [ 129.890745][ T1717] team0 (unregistering): Port device team_slave_1 removed [ 129.900324][ T1717] team0 (unregistering): Port device team_slave_0 removed