last executing test programs: 1m16.985155026s ago: executing program 4 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) poll(0x0, 0x0, 0x9) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900080006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x20033, 0x51b) r5 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r5, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f00000001c0), 0x0, 0x4855}, 0x24000052) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x18, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x20, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 1m15.371233866s ago: executing program 4 (id=17): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000a40)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@commit={'commit', 0x3d, 0x45c7}}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1m14.383662946s ago: executing program 4 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) openat2(r2, 0x0, &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="8000260b0a0002"], 0x34}, 0x1, 0x0, 0x0, 0x42044}, 0x20040010) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r9 = epoll_create(0x7fff) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x80000000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 1m13.593840565s ago: executing program 4 (id=25): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb8063, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x4, @perf_config_ext={0x1, 0x10001}, 0xb093, 0x800000, 0x42a1bd76, 0x2, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0xb, 0x7}, 0x4398, 0xa88, 0x8406, 0x5, 0x1, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) r2 = gettid() r3 = gettid() kcmp(r2, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000001200)="006a30989a60e93be81c7f77d1bcbaeea94ce83af7e521019e99aa27cb74bada2a4ed4f5b5ac5061c941523b51a9f9e23f602147950a1d7fb98e611a8c94079a784d4faf6adfe49fd6839511062b1348ce62173f99558239ab4e6f43b2318be94668447b078b54d236972098e295583b2ee153621ea695faa64ec25cd4d0804126ce69307ae227f721247d61c553d2c8ecf8099fe57aff7b3db1866203e6c96f521bc61f4d0700000021064aff1662395ad6e2a229a64c00"/198, 0xc6, 0x4004, &(0x7f0000000140)={0xa, 0x4e23, 0x2027ff, @mcast2, 0x80d2}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x12061, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400000000000000009531f3e7ed9fce24abec66ba375eee929b6d55a85f661b35e078de30b2a23d507507bc6362156ddf3f2c49062e2f2a7897de00b11d8d72b442390faf6e280231141da08aff6c36d3baa0894a426761b873b7eb1d6b80552f82241f469c2706af5945d27860a31323ba982225335054993b6fd10a5f303792f4446a54d00f2f011fbd7aceb03a7bffef45d3303c870150457f45eb7ae5d1bdc210bbd1f718d0e86cfc0a117e8ff09753d88e19a89da38bd2a209350210acfca7cb9fdc1305d5e8f1e6db"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) getcwd(&(0x7f00000003c0)=""/257, 0x101) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x508, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x68500, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) 1m12.231120363s ago: executing program 4 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fspick(0xffffffffffffffff, 0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0900000018000000080000004000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000000000000b5e0ade0ae5e43ffffff"], 0x50) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m11.407203703s ago: executing program 4 (id=36): r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bind$can_raw(r1, &(0x7f0000000040), 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340), 0x4) close(0x3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf250300000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e7800000000000, 0x8a000) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) 1m11.387045465s ago: executing program 32 (id=36): r0 = getpid() r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) bind$can_raw(r1, &(0x7f0000000040), 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340), 0x4) close(0x3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf250300000008000300", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) kexec_load(0xfffffffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e7800000000000, 0x8a000) ioctl$EVIOCSREP(r6, 0x40084503, 0x0) 3.362291262s ago: executing program 5 (id=644): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x10000, 0x0, 0x2, 0xb, 0x4, 0x9fd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x10000, 0x2, 0x3, 0x9, 0x6, 0x3}, 0x20) 3.308175635s ago: executing program 5 (id=646): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 3.21146511s ago: executing program 5 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r4, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r4, r3, 0x0, 0x3ffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) 3.041602108s ago: executing program 3 (id=651): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x7, 0xa5, 0x6}, &(0x7f00000000c0)=0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000240)={0x1, 0x3ff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r2, 0xa8, &(0x7f0000000100)=[@in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e21, 0x401, @remote}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0xd2, @empty, 0x8}]}, &(0x7f0000000200)=0x10) r3 = accept4$llc(r1, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000340)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x10000, 0x0, 0x2, 0xb, 0x4, 0x9fd}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local, 0x10000, 0x2, 0x3, 0x9, 0x6, 0x3}, 0x20) 2.82072296s ago: executing program 3 (id=653): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffd, 0x8, 0x4, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000007, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0x1, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, r6, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x3, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x0, 0x7f}, 0x10, 0x19082, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000600)=[{0x1, 0x1, 0x4, 0x4}, {0x0, 0x3, 0x3, 0x3}, {0x1, 0x2, 0x5, 0x9}, {0x4, 0x3, 0x2, 0xb}, {0xecd, 0x1, 0x1, 0xb}, {0x5, 0x3}, {0x3, 0x2, 0x11, 0xa}, {0x4, 0x1, 0x8}, {0x4, 0x3, 0x3, 0xb}], 0x10, 0x1ffc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000004bc8f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.696050725s ago: executing program 0 (id=656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000012040005800c000480060001008a9500000900010073797a30"], 0x110}}, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) recvmsg(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xf9, 0x60000000, 0x0, 0x77, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x3}, 0x50) 2.296864685s ago: executing program 5 (id=657): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 2.18737298s ago: executing program 5 (id=658): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/stat\x00') getdents64(r0, &(0x7f00000008c0)=""/4096, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') getdents64(r0, 0x0, 0x500) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, 0x0, &(0x7f0000000200)) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000240)=""/140, 0x8c, 0x0, &(0x7f0000000180)=""/121, 0x79}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0xc, 0x7fffffff, 0x5}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x0, 0x10, 0xffffff39}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000018c0)={0x1b, 0x0, 0x0, 0x70000, 0x0, r0, 0x200, '\x00', 0x0, r0, 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x16, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="1800000000000b00000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r0, @ANYBLOB="0000bffc000000000000181a60747a6863468a7c6f2b5bc7ff64476657ca71d3f15e27fdaa34960de8d47b1f71a75b9f8fe01495289b4b637587a2c03bc8bc9ef55879eb16667ef327bf6465c99efe4cd4487b3f4e619927582452f363326d87b5196f9879459728d7ea055231ff1eb42e466a8b770daddf7bda6a1ff0b96f272bc9feed53e3b95fc1dbf6e3a3dedaf19aefb1ea236026", @ANYRES32, @ANYBLOB="00000000000000000b20ff0702000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x7, 0xdc, &(0x7f0000000740)=""/220, 0x40f00, 0x12, '\x00', 0x0, @flow_dissector=0x11, r0, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x8, 0x4, 0x3}, 0x10, r9, r6, 0x2, &(0x7f0000001940)=[r0, r10], &(0x7f0000001980)=[{0x1, 0x5, 0xd, 0x8}, {0x1, 0x5, 0x2}], 0x10, 0x10001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r3, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r11, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) 2.18704817s ago: executing program 2 (id=659): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@deltaction={0x24, 0x31, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r6, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 2.153012272s ago: executing program 1 (id=660): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 2.131796813s ago: executing program 1 (id=661): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) close(0x3) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000000240)={0x0, 0xffffff3a, &(0x7f0000000100)={&(0x7f0000003180)=ANY=[], 0x588}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) recvfrom(r4, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) write$UHID_CREATE2(r2, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x9, 0x4, 0x4, 0x400, 0x4, 0x2, "74c0de9e2a942254fd"}}, 0x121) socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 2.067552286s ago: executing program 5 (id=662): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) syz_read_part_table(0x5ef, &(0x7f00000002c0)="$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") 2.067217607s ago: executing program 1 (id=663): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001d40)=@ethtool_cmd={0x15, 0x9, 0x3, 0x0, 0x9, 0x0, 0x0, 0xb, 0x80, 0x0, 0x4b59, 0xa, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) syz_open_dev$evdev(0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_tables_targets\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/6, 0x6}], 0x1, 0x410, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050022bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="800800000311000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x2, 0x3, 0x3, 0x1, 0x4, 0x6, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0x74, &(0x7f0000000500)=""/116, 0x40f00, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000580)=[{0x1, 0x4, 0x6, 0x3}, {0x1, 0x5, 0x6, 0x5}, {0x5, 0x3, 0x9, 0x5}, {0x1, 0x5, 0x7, 0x7}, {0x2, 0x4, 0xb, 0x2}], 0x10, 0xe4d2}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x101, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x8) 1.955913362s ago: executing program 3 (id=664): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000100)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x5, 0x1e7b, 0x2, 0x0, 0x2, "3251d7f69a94537a698a43fa21f954b95af526"}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x7, @remote, 0x8001}, @in6={0xa, 0x4e21, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x64) writev(r2, &(0x7f0000000d80)=[{&(0x7f0000000300)="c62d268266e16910a8a1b6e4cb0b908042b0444ef07600c1cfce200e708d93a6bc0247c7a3acca3c4e6d55139933696e79d54e7ae2c310da6b3edd8ede43d84be086cadb01552f46e468157d66634b27fc658cd33e11d7770be1a49c338d0f01c1171590450afe219ad1350e6bffc1ed59da14ebb668fb5c855d3e3bc1cc777521aa13ea6c036642273cb26383c0bd32306c1203886b9cd009", 0x99}], 0x1) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x194, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf, 0x0, 0x2200, 0xa, 0x0, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {0x7fffffff, 0x2}, {0x8, 0x400800, 0x0, 0x400}, {0x0, 0x0, 0x2000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1c}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad30397b1b667853b88000000074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x194}}, 0x4050) 1.866213627s ago: executing program 3 (id=665): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4a2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x4, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000008, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0xffffff98) r10 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb07}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) splice(r8, 0x0, r7, 0x0, 0x100000004, 0x0) read(r8, &(0x7f0000000240)=""/84, 0x54) write(r6, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000000180)) socket$nl_generic(0x10, 0x3, 0x10) 1.785094281s ago: executing program 0 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.680145765s ago: executing program 0 (id=667): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x139, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0xfd}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000020100)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) syz_io_uring_setup(0x760b, &(0x7f0000001400)={0x0, 0x79e7, 0x400, 0xffffffff, 0x11c}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) unshare(0x64000600) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x36, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r7], 0x20}}, 0x0) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r4) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0xf2) fcntl$setlease(r9, 0x400, 0x1) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) pread64(r10, &(0x7f00000002c0)=""/124, 0x7c, 0x7) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {}, {@usrjquota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nomblk_io_submit}]}, 0xfe, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1.243000028s ago: executing program 2 (id=668): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1.18618369s ago: executing program 2 (id=669): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x2}) 1.18434102s ago: executing program 0 (id=670): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000}) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff001, 0x7f, 0x72c7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 1.116494464s ago: executing program 2 (id=671): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) 1.115817454s ago: executing program 1 (id=672): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x17da, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x12042, 0x1}) io_uring_enter(r4, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1.059324706s ago: executing program 2 (id=673): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 974.209041ms ago: executing program 0 (id=674): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x40000, 0x0}, 0x3}], 0x1, 0x0, 0x0) 934.595053ms ago: executing program 3 (id=675): socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffd, 0x8, 0x4, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x80000007, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0x1, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, r6, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x3, 0x0, 0x0, 0x7, 0x6, 0xfffffffffffffff4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x0, 0x7f}, 0x10, 0x19082, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000600)=[{0x1, 0x1, 0x4, 0x4}, {0x0, 0x3, 0x3, 0x3}, {0x1, 0x2, 0x5, 0x9}, {0x4, 0x3, 0x2, 0xb}, {0xecd, 0x1, 0x1, 0xb}, {0x5, 0x3}, {0x3, 0x2, 0x11, 0xa}, {0x4, 0x1, 0x8}, {0x4, 0x3, 0x3, 0xb}], 0x10, 0x1ffc0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc010000000000000000000000000001ac1414bb00000000000000000000000000000400100000000200201084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000004bc8f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000300)=0x2c) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 878.229056ms ago: executing program 1 (id=676): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@deltaction={0x34, 0x31, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r6, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 63.011096ms ago: executing program 0 (id=677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@deltaction={0x34, 0x31, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r6, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 62.284896ms ago: executing program 3 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x881}, 0x51) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x5, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@deltaction={0x34, 0x31, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r6, &(0x7f0000000240)="53d38327618e", 0x6) sendfile(r6, r5, 0x0, 0x3ffff) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) 11.492609ms ago: executing program 2 (id=679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00e0ca", @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f0003000000050036000000000008000200", @ANYRES32=r3, @ANYBLOB="050037000000000008002f0004000000060006000000000006000400fdff0000"], 0x4c}, 0x4, 0x700000000000000, 0x0, 0x4084}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r5 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac10009"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 0s ago: executing program 1 (id=680): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0xd, 0x53a1bd79, 0x9, 0x8000000000009, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0xd, 0x53a1bd79, 0x9, 0x8000000000009, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x482, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x80, &(0x7f00000001c0)=0x982, 0x0, 0x4) tgkill(0x0, 0x0, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r1, @ANYBLOB="00f7ffff6353582c25693029ad93b7da2544b4dad1dba8f595ab7b7eddbf78ffa434cf54d35b7939b58be674d1b1b3a4867697ea96dd26726b26301198bc643ca91e59831700eb7b0ddddca6e4f8f5748dde36ce841d97aa6d7e9174a96006a08a65952d87c3d0e7b6d977d4b85ad8f108971f97a6776da4ffa758773df0f24db51d0ea4055a21662d05a01ff21dee0fad56cd437aa5b30f74829d9e2db0c705f1556007124dd199fd20a4d7bb33d63625c2067b2fa7602a95b084b1b6fff11e526601bf71ee"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1012, &(0x7f0000001040)=""/4114}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESDEC=r1, @ANYBLOB="00f7ffff6353582c25693029ad93b7da2544b4dad1dba8f595ab7b7eddbf78ffa434cf54d35b7939b58be674d1b1b3a4867697ea96dd26726b26301198bc643ca91e59831700eb7b0ddddca6e4f8f5748dde36ce841d97aa6d7e9174a96006a08a65952d87c3d0e7b6d977d4b85ad8f108971f97a6776da4ffa758773df0f24db51d0ea4055a21662d05a01ff21dee0fad56cd437aa5b30f74829d9e2db0c705f1556007124dd199fd20a4d7bb33d63625c2067b2fa7602a95b084b1b6fff11e526601bf71ee"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1012, &(0x7f0000001040)=""/4114}, 0x94) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, 0x0}, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) ioctl$FITHAW(r3, 0xc0045878) kernel console output (not intermixed with test programs): removed [ 39.608015][ T199] bond0 (unregistering): Released all slaves [ 39.749777][ T3654] syzkaller0: entered promiscuous mode [ 39.767867][ T3654] syzkaller0: entered allmulticast mode [ 39.809848][ T199] hsr_slave_0: left promiscuous mode [ 39.820140][ T199] hsr_slave_1: left promiscuous mode [ 39.829098][ T199] veth1_macvtap: left promiscuous mode [ 39.836392][ T199] veth0_macvtap: left promiscuous mode [ 39.845777][ T199] veth1_vlan: left promiscuous mode [ 39.855890][ T199] veth0_vlan: left promiscuous mode [ 39.862111][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 39.930252][ T3668] Zero length message leads to an empty skb [ 39.997213][ T3664] veth0_to_bond: entered allmulticast mode [ 40.078897][ T3620] kexec: Could not allocate control_code_buffer [ 40.229103][ T3685] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.236537][ T3685] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.346846][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.398093][ T3685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.556610][ T3702] loop3: detected capacity change from 0 to 512 [ 40.592858][ T50] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.602397][ T50] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.612622][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.661311][ T3702] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.682420][ T50] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.710608][ T50] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.918115][ T3704] veth0_virt_wifi: entered allmulticast mode [ 40.952788][ T3646] chnl_net:caif_netlink_parms(): no params data found [ 40.962033][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 41.101140][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.108331][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.119180][ T3646] bridge_slave_0: entered allmulticast mode [ 41.128287][ T3716] loop2: detected capacity change from 0 to 128 [ 41.136411][ T3646] bridge_slave_0: entered promiscuous mode [ 41.143585][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.150820][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.158113][ T3646] bridge_slave_1: entered allmulticast mode [ 41.175004][ T3646] bridge_slave_1: entered promiscuous mode [ 41.222244][ T3646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.255451][ T3646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.313474][ T3646] team0: Port device team_slave_0 added [ 41.337584][ T3646] team0: Port device team_slave_1 added [ 41.375660][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.410018][ T3713] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 41.490835][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.520676][ T3646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.541854][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.555844][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.601041][ T3646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.665822][ T3646] hsr_slave_0: entered promiscuous mode [ 41.681703][ T3646] hsr_slave_1: entered promiscuous mode [ 41.707500][ T3694] Set syz1 is full, maxelem 65536 reached [ 41.715423][ T3646] debugfs: 'hsr0' already exists in 'hsr' [ 41.731057][ T3646] Cannot create hsr debugfs directory [ 41.810978][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.901286][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 41.901302][ T28] audit: type=1326 audit(2000000001.440:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 41.952846][ T3759] loop2: detected capacity change from 0 to 2048 [ 41.967847][ T3646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.974932][ T28] audit: type=1326 audit(2000000001.480:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 42.058433][ T3646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.066360][ T28] audit: type=1326 audit(2000000001.480:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 42.101498][ T3302] Alternate GPT is invalid, using primary GPT. [ 42.104341][ T3646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.114551][ T3302] loop2: p1 p2 p3 [ 42.118286][ T3302] loop2: partition table partially beyond EOD, truncated [ 42.119692][ T28] audit: type=1326 audit(2000000001.480:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 42.160584][ T28] audit: type=1326 audit(2000000001.480:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 42.258467][ T3763] loop3: detected capacity change from 0 to 1024 [ 42.305690][ T3646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.362652][ T3763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.402038][ T3773] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.448482][ T28] audit: type=1326 audit(2000000001.480:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 42.536005][ T3779] netlink: 'syz.1.52': attribute type 21 has an invalid length. [ 42.719356][ T3779] loop1: detected capacity change from 0 to 512 [ 42.726247][ T3779] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.784877][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #11: comm syz.1.52: iget: bad extended attribute block 3153 [ 42.797660][ T3779] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 42.798036][ T3779] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.52: couldn't read orphan inode 11 (err -117) [ 42.807273][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 42.807291][ C0] EXT4-fs (loop1): initial error at time 2000000002: ext4_orphan_get:1391: inode 11 [ 42.807344][ C0] EXT4-fs (loop1): last error at time 2000000002: ext4_orphan_get:1391: inode 11 [ 42.844675][ T3779] loop1: lost filesystem error report for type 5 error -117 [ 42.845730][ T3779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.138528][ T3646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.144334][ T3779] syz.1.52 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 43.159643][ T3779] CPU: 0 UID: 0 PID: 3779 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 43.159760][ T3779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 43.159771][ T3779] Call Trace: [ 43.159778][ T3779] [ 43.159786][ T3779] __dump_stack+0x1d/0x30 [ 43.159812][ T3779] dump_stack_lvl+0x95/0xd0 [ 43.159833][ T3779] dump_stack+0x15/0x1b [ 43.159875][ T3779] dump_header+0x80/0x240 [ 43.159942][ T3779] oom_kill_process+0x295/0x350 [ 43.159963][ T3779] out_of_memory+0x97d/0xb80 [ 43.159983][ T3779] try_charge_memcg+0x62e/0xa10 [ 43.160066][ T3779] obj_cgroup_charge_pages+0x23/0xc0 [ 43.160154][ T3779] __memcg_kmem_charge_page+0x9e/0x170 [ 43.160206][ T3779] __alloc_frozen_pages_noprof+0x18a/0x360 [ 43.160295][ T3779] alloc_pages_mpol+0xb3/0x260 [ 43.160323][ T3779] alloc_pages_noprof+0x8f/0x130 [ 43.160351][ T3779] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 43.160381][ T3779] __kvmalloc_node_noprof+0x3d4/0x650 [ 43.160461][ T3779] ? futex_hash_allocate+0x190/0x9d0 [ 43.160488][ T3779] ? futex_hash_allocate+0x190/0x9d0 [ 43.160550][ T3779] futex_hash_allocate+0x190/0x9d0 [ 43.160655][ T3779] ? cap_task_prctl+0x13f/0x6e0 [ 43.160682][ T3779] futex_hash_prctl+0xd8/0xf0 [ 43.160740][ T3779] __se_sys_prctl+0xa3d/0x13f0 [ 43.160823][ T3779] __x64_sys_prctl+0x67/0x80 [ 43.160847][ T3779] x64_sys_call+0x2533/0x3020 [ 43.160878][ T3779] do_syscall_64+0x12c/0x370 [ 43.160901][ T3779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.160988][ T3779] RIP: 0033:0x7f5dd9efc799 [ 43.161004][ T3779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.161021][ T3779] RSP: 002b:00007f5dd894f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 43.161046][ T3779] RAX: ffffffffffffffda RBX: 00007f5dda175fa0 RCX: 00007f5dd9efc799 [ 43.161062][ T3779] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 43.161077][ T3779] RBP: 00007f5dd9f92c99 R08: 0000000000000000 R09: 0000000000000000 [ 43.161160][ T3779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.161241][ T3779] R13: 00007f5dda176038 R14: 00007f5dda175fa0 R15: 00007fff4db06498 [ 43.161260][ T3779] [ 43.161268][ T3779] memory: usage 307200kB, limit 307200kB, failcnt 137 [ 43.390982][ T3779] memory+swap: usage 307688kB, limit 9007199254740988kB, failcnt 0 [ 43.399090][ T3779] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 43.406534][ T3779] Memory cgroup stats for /syz1: [ 43.406777][ T3779] cache 139264 [ 43.415117][ T3779] rss 0 [ 43.417986][ T3779] shmem 0 [ 43.420964][ T3779] mapped_file 229376 [ 43.424955][ T3779] dirty 122880 [ 43.428333][ T3779] writeback 0 [ 43.431646][ T3779] workingset_refault_anon 2 [ 43.436151][ T3779] workingset_refault_file 0 [ 43.440729][ T3779] swap 499712 [ 43.444123][ T3779] swapcached 503808 [ 43.447932][ T3779] pgpgin 31693 [ 43.451784][ T3779] pgpgout 31658 [ 43.455255][ T3779] pgfault 16926 [ 43.458720][ T3779] pgmajfault 3 [ 43.462207][ T3779] inactive_anon 0 [ 43.465865][ T3779] active_anon 4096 [ 43.469728][ T3779] inactive_file 0 [ 43.473378][ T3779] active_file 139264 [ 43.477460][ T3779] unevictable 0 [ 43.480949][ T3779] hierarchical_memory_limit 314572800 [ 43.486459][ T3779] hierarchical_memsw_limit 9223372036854771712 [ 43.492720][ T3779] total_cache 139264 [ 43.496642][ T3779] total_rss 0 [ 43.499962][ T3779] total_shmem 0 [ 43.503427][ T3779] total_mapped_file 229376 [ 43.507945][ T3779] total_dirty 122880 [ 43.511900][ T3779] total_writeback 0 [ 43.515844][ T3779] total_workingset_refault_anon 2 [ 43.520889][ T3779] total_workingset_refault_file 0 [ 43.525936][ T3779] total_swap 499712 [ 43.529848][ T3779] total_swapcached 503808 [ 43.534186][ T3779] total_pgpgin 31693 [ 43.538097][ T3779] total_pgpgout 31658 [ 43.542119][ T3779] total_pgfault 16926 [ 43.542272][ T28] audit: type=1326 audit(2000000001.480:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 43.546161][ T3779] total_pgmajfault 3 [ 43.546173][ T3779] total_inactive_anon 0 [ 43.546182][ T3779] total_active_anon 4096 [ 43.546191][ T3779] total_inactive_file 0 [ 43.546199][ T3779] total_active_file 139264 [ 43.641117][ T3779] total_unevictable 0 [ 43.643490][ T3646] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.645161][ T3779] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.52,pid=3778,uid=0 [ 43.666357][ T3779] Memory cgroup out of memory: Killed process 3778 (syz.1.52) total-vm:96184kB, anon-rss:1232kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 43.722417][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.736134][ T3778] syz.1.52 (3778) used greatest stack depth: 8840 bytes left [ 43.754648][ T3759] Alternate GPT is invalid, using primary GPT. [ 43.771323][ T3759] loop2: p1 p2 p3 [ 43.775156][ T3759] loop2: partition table partially beyond EOD, truncated [ 43.783236][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.801239][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.808552][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.820348][ T28] audit: type=1326 audit(2000000001.480:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 43.852564][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.853378][ T3787] netlink: 'syz.0.53': attribute type 13 has an invalid length. [ 43.859707][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.878269][ T3794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.887680][ T28] audit: type=1326 audit(2000000001.480:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 43.943027][ T28] audit: type=1326 audit(2000000001.480:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f310624c502 code=0x7ffc0000 [ 43.962081][ T3791] netlink: 'syz.3.54': attribute type 1 has an invalid length. [ 44.091362][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 44.135664][ T3805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 44.191786][ T3646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.216635][ T3805] loop0: detected capacity change from 0 to 128 [ 44.220834][ T3794] loop3: detected capacity change from 0 to 128 [ 44.256374][ T3794] FAT-fs (loop3): bogus logical sector size 759 [ 44.275861][ T3794] FAT-fs (loop3): Can't find a valid FAT filesystem [ 44.316826][ T3791] 9p: Bad value for 'rfdno' [ 44.445963][ T3818] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 44.853391][ T3646] veth0_vlan: entered promiscuous mode [ 44.868968][ T3646] veth1_vlan: entered promiscuous mode [ 44.920390][ T3824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 44.934111][ T3646] veth0_macvtap: entered promiscuous mode [ 44.956007][ T3646] veth1_macvtap: entered promiscuous mode [ 44.986979][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.998686][ T3824] loop2: detected capacity change from 0 to 128 [ 45.013380][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.050233][ T833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.067835][ T3827] 9p: Bad value for 'wfdno' [ 45.078560][ T833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.104082][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 45.271240][ T3829] loop0: detected capacity change from 0 to 128 [ 45.285460][ T833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.319950][ T833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.659376][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 45.803409][ T3837] loop3: detected capacity change from 0 to 128 [ 45.888883][ T3840] loop2: detected capacity change from 0 to 128 [ 46.147376][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 46.183005][ T3846] loop0: detected capacity change from 0 to 128 [ 46.354509][ T3850] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 46.796544][ T3852] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 46.810895][ T3852] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 46.885875][ T3854] loop2: detected capacity change from 0 to 1024 [ 46.916255][ T3854] EXT4-fs: Ignoring removed bh option [ 46.933399][ T3854] EXT4-fs: Ignoring removed oldalloc option [ 46.950369][ T3854] EXT4-fs: Ignoring removed nobh option [ 47.071143][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.132554][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 47.158518][ T3860] EXT4-fs: Ignoring removed bh option [ 47.180110][ T3854] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.66: Allocating blocks 497-513 which overlap fs metadata [ 47.195412][ T3860] EXT4-fs: Ignoring removed oldalloc option [ 47.204040][ T3860] EXT4-fs: Ignoring removed nobh option [ 47.230202][ T3853] EXT4-fs (loop2): pa ffff888107e87460: logic 16, phys. 129, len 24 [ 47.238411][ T3853] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 47.241321][ T3860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.290568][ T3860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 47.301061][ T3860] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.67: Allocating blocks 497-513 which overlap fs metadata [ 47.318738][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.329762][ T3860] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.67: Allocating blocks 497-513 which overlap fs metadata [ 47.344052][ T3860] EXT4-fs (loop0): pa ffff888107df23f0: logic 16, phys. 129, len 24 [ 47.352088][ T3860] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 47.392764][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'. [ 47.444845][ T3865] set_capacity_and_notify: 1 callbacks suppressed [ 47.444877][ T3865] loop3: detected capacity change from 0 to 128 [ 47.459888][ T3867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 47.488255][ T3867] loop2: detected capacity change from 0 to 128 [ 47.502479][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.364065][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 48.364080][ T28] audit: type=1326 audit(2000000007.900:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.398504][ T28] audit: type=1326 audit(2000000007.900:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.422054][ T28] audit: type=1326 audit(2000000007.930:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.455245][ T3877] loop3: detected capacity change from 0 to 2048 [ 48.462686][ T28] audit: type=1326 audit(2000000007.930:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.486467][ T28] audit: type=1326 audit(2000000007.930:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.511675][ T28] audit: type=1326 audit(2000000007.960:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.535456][ T28] audit: type=1326 audit(2000000007.960:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.570017][ T3301] Alternate GPT is invalid, using primary GPT. [ 48.576479][ T3301] loop3: p1 p2 p3 [ 48.580660][ T3301] loop3: partition table partially beyond EOD, truncated [ 48.593353][ T28] audit: type=1326 audit(2000000007.960:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.618747][ T28] audit: type=1326 audit(2000000007.980:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.673342][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 48.701243][ T3877] Alternate GPT is invalid, using primary GPT. [ 48.707551][ T3877] loop3: p1 p2 p3 [ 48.711606][ T3877] loop3: partition table partially beyond EOD, truncated [ 48.750601][ T28] audit: type=1326 audit(2000000007.980:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3875 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71deb1c799 code=0x7ffc0000 [ 48.812755][ T3877] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.002220][ T3890] tmpfs: Unknown parameter ' à ' [ 49.088569][ T3894] loop2: detected capacity change from 0 to 128 [ 49.625136][ T3906] __nla_validate_parse: 1 callbacks suppressed [ 49.625468][ T3906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 50.819323][ T3915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 50.852311][ T3913] loop1: detected capacity change from 0 to 2048 [ 50.902838][ T3915] loop2: detected capacity change from 0 to 128 [ 50.931792][ T3301] Alternate GPT is invalid, using primary GPT. [ 50.938294][ T3301] loop1: p1 p2 p3 [ 50.947190][ T3301] loop1: partition table partially beyond EOD, truncated [ 50.978629][ T3913] Alternate GPT is invalid, using primary GPT. [ 51.006331][ T3913] loop1: p1 p2 p3 [ 51.015354][ T3913] loop1: partition table partially beyond EOD, truncated [ 51.079038][ T3907] kexec: Could not allocate control_code_buffer [ 51.122722][ T3913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.120760][ T3928] netlink: 'syz.2.84': attribute type 10 has an invalid length. [ 52.140144][ T3928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.148282][ T3928] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 52.230867][ T3933] netlink: 'syz.2.84': attribute type 10 has an invalid length. [ 52.238719][ T3933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.84'. [ 52.272530][ T3933] batadv0: entered promiscuous mode [ 52.277844][ T3933] batadv0: entered allmulticast mode [ 52.290093][ T3933] bond0: (slave batadv0): Releasing backup interface [ 52.381087][ T3933] bridge0: port 3(batadv0) entered blocking state [ 52.389661][ T3933] bridge0: port 3(batadv0) entered disabled state [ 52.618165][ T3944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'. [ 52.627489][ T3944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 52.895261][ T3430] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 52.904762][ T3430] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 53.024476][ T3964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'. [ 53.049978][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.92'. [ 53.083805][ T3968] loop5: detected capacity change from 0 to 512 [ 53.086748][ T3964] loop1: detected capacity change from 0 to 128 [ 53.098170][ T3968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 53.116877][ T3962] loop2: detected capacity change from 0 to 128 [ 53.129916][ T3968] EXT4-fs (loop5): 1 truncate cleaned up [ 53.136169][ T3968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.150896][ T3968] usb usb7: usbfs: process 3968 (syz.5.93) did not claim interface 0 before use [ 53.160710][ T3968] netlink: 68 bytes leftover after parsing attributes in process `syz.5.93'. [ 53.176914][ T3968] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 53.223782][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.340812][ T3529] IPVS: starting estimator thread 0... [ 53.459639][ T3973] IPVS: using max 2640 ests per chain, 132000 per kthread [ 53.489239][ T3981] loop0: detected capacity change from 0 to 256 [ 53.496952][ T3981] vfat: Unknown parameter 'shoPtname' [ 53.697108][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 53.697135][ T28] audit: type=1400 audit(2000000013.230:463): avc: denied { create } for pid=3978 comm="syz.5.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 53.725863][ T3979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=3979 comm=syz.5.96 [ 53.846528][ T3982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.96'. [ 53.891894][ T3984] loop3: detected capacity change from 0 to 128 [ 53.939812][ T3979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.96'. [ 54.145617][ T28] audit: type=1400 audit(2000000013.680:464): avc: denied { write } for pid=3978 comm="syz.5.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 54.431813][ T28] audit: type=1326 audit(2000000013.810:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3992 comm="syz.2.100" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x0 [ 54.891194][ T4019] loop5: detected capacity change from 0 to 512 [ 54.936955][ T4019] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.046754][ T4019] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 55.707650][ T28] audit: type=1400 audit(2000000015.240:466): avc: denied { read } for pid=4033 comm="syz.3.110" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 55.988396][ T4035] loop3: detected capacity change from 0 to 2048 [ 56.017756][ T28] audit: type=1400 audit(2000000015.270:467): avc: denied { open } for pid=4033 comm="syz.3.110" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.067911][ T4035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.107789][ T28] audit: type=1400 audit(2000000015.280:468): avc: denied { bind } for pid=4033 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.134609][ T28] audit: type=1400 audit(2000000015.500:469): avc: denied { getattr } for pid=4037 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.161932][ T28] audit: type=1400 audit(2000000015.520:470): avc: denied { execute } for pid=4031 comm="syz.1.109" path="/19/cpu.stat" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.185165][ T28] audit: type=1400 audit(2000000015.580:471): avc: denied { read } for pid=4041 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.185551][ T4035] capability: warning: `syz.3.110' uses deprecated v2 capabilities in a way that may be insecure [ 56.207410][ T28] audit: type=1400 audit(2000000015.580:472): avc: denied { open } for pid=4041 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=516 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.340759][ T4060] loop2: detected capacity change from 0 to 1024 [ 56.351818][ T4060] EXT4-fs: Ignoring removed orlov option [ 56.357608][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 56.380570][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.675521][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.763793][ T4088] mmap: syz.5.118 (4088) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 56.779344][ T4090] loop3: detected capacity change from 0 to 512 [ 56.796574][ T4090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.830554][ T4090] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.866971][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.915056][ T4094] loop3: detected capacity change from 0 to 764 [ 56.945013][ T4094] rock: directory entry would overflow storage [ 56.951693][ T4094] rock: sig=0x5245, size=8, remaining=5 [ 57.299258][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.373955][ T4125] tmpfs: Unknown parameter ' à ' [ 57.392682][ T4127] msdos: Unknown parameter '18446744073709551615' [ 57.491844][ T4133] rock: directory entry would overflow storage [ 57.498189][ T4133] rock: sig=0x5245, size=8, remaining=5 [ 57.802877][ T4144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 57.817286][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.136'. [ 57.991887][ T4162] rock: directory entry would overflow storage [ 57.998347][ T4162] rock: sig=0x5245, size=8, remaining=5 [ 58.021256][ T4164] EXT4-fs: Ignoring removed orlov option [ 58.080955][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.182767][ T4174] netlink: 'syz.5.145': attribute type 13 has an invalid length. [ 58.209440][ T4174] netlink: 'syz.5.145': attribute type 17 has an invalid length. [ 58.339437][ T4174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.365101][ T4182] ªªªªªª: renamed from vlan0 (while UP) [ 58.540720][ T4190] tmpfs: Unknown parameter 'context6¿LòÃgñæ9¤†ª“1`w÷AšÙuújÍái#áôa•' [ 59.064199][ T4205] hub 8-0:1.0: USB hub found [ 59.068967][ T4205] hub 8-0:1.0: 8 ports detected [ 59.128059][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.693565][ T4213] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 59.930250][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 59.930335][ T28] audit: type=1400 audit(2000000019.470:518): avc: denied { watch watch_reads } for pid=4218 comm="syz.3.156" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 61.266068][ T4179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.318226][ T28] audit: type=1326 audit(2000000020.850:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.319708][ T4230] set_capacity_and_notify: 4 callbacks suppressed [ 61.319723][ T4230] loop5: detected capacity change from 0 to 512 [ 61.351376][ T4231] loop2: detected capacity change from 0 to 2048 [ 61.386569][ T28] audit: type=1326 audit(2000000020.890:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.438463][ T4230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.449451][ T28] audit: type=1326 audit(2000000020.890:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.451403][ T4231] Alternate GPT is invalid, using primary GPT. [ 61.479569][ T28] audit: type=1326 audit(2000000020.890:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.504188][ T28] audit: type=1326 audit(2000000020.890:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.528021][ T28] audit: type=1326 audit(2000000020.890:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 61.551386][ T28] audit: type=1326 audit(2000000020.890:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f310624c502 code=0x7ffc0000 [ 61.551775][ T4231] loop2: p1 p2 p3 [ 61.574979][ T28] audit: type=1326 audit(2000000020.890:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f310620cfce code=0x7ffc0000 [ 61.575012][ T28] audit: type=1326 audit(2000000020.890:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.2.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f310624c5c7 code=0x7ffc0000 [ 61.619609][ T4231] loop2: partition table partially beyond EOD, [ 61.633002][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.659697][ T4231] truncated [ 61.699674][ T4231] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 61.775772][ T4240] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.783126][ T4240] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.831658][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.853313][ T4240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.006001][ T4242] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.013241][ T4242] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.133984][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.144370][ T4242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.203272][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.212448][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.239991][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.249016][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.270110][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.279050][ T30] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.309811][ T30] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.325213][ T4226] kexec: Could not allocate control_code_buffer [ 62.331622][ T30] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.414321][ T4256] loop2: detected capacity change from 0 to 1024 [ 62.436601][ T4256] EXT4-fs: Ignoring removed orlov option [ 62.454472][ T4256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.559351][ T4261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 62.628030][ T4261] loop3: detected capacity change from 0 to 128 [ 62.751175][ T4246] Set syz1 is full, maxelem 65536 reached [ 62.817440][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'. [ 62.855958][ T4245] Set syz1 is full, maxelem 65536 reached [ 62.917464][ T4264] loop1: detected capacity change from 0 to 128 [ 63.152347][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.243174][ T4278] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 63.289863][ T4278] team0: Port device dummy0 added [ 63.311337][ T4282] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 63.362703][ T4282] team0: Port device dummy0 removed [ 63.371785][ T4267] loop5: detected capacity change from 0 to 164 [ 63.399824][ T4282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.440924][ T4286] tmpfs: Unknown parameter ' à ' [ 63.503973][ T4289] loop3: detected capacity change from 0 to 1764 [ 63.570126][ T4289] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 63.594649][ T4289] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.603215][ T4289] vhci_hcd vhci_hcd.1: invalid port number 96 [ 63.609418][ T4289] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 63.846067][ T4309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 63.855832][ T4307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.868235][ T4309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 63.878991][ T4307] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 63.895427][ T4307] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(3) [ 63.900456][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.186'. [ 63.902551][ T4307] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.903767][ T4307] vhci_hcd vhci_hcd.0: Device attached [ 63.941178][ T4312] vhci_hcd: connection closed [ 63.941504][ T30] vhci_hcd vhci_hcd.0: stop threads [ 63.957700][ T30] vhci_hcd vhci_hcd.0: release socket [ 63.968862][ T30] vhci_hcd vhci_hcd.0: disconnect device [ 64.000301][ T4315] loop5: detected capacity change from 0 to 128 [ 64.046893][ T4320] tmpfs: Unknown parameter ' à ' [ 64.065984][ T4322] loop3: detected capacity change from 0 to 1024 [ 64.086307][ T4322] EXT4-fs: Ignoring removed orlov option [ 64.092449][ T4324] loop2: detected capacity change from 0 to 1024 [ 64.101370][ T4324] EXT4-fs: Ignoring removed orlov option [ 64.122055][ T4322] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.134680][ T4324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.255525][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.274770][ T4329] delete_channel: no stack [ 64.280460][ T4329] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.670015][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.198'. [ 64.679307][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'. [ 64.928023][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.987983][ T4373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 65.062125][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 65.062165][ T28] audit: type=1400 audit(2000000024.600:590): avc: denied { create } for pid=4357 comm="syz.2.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.101699][ T4358] ip6gre1: entered allmulticast mode [ 65.143664][ T28] audit: type=1400 audit(2000000024.660:591): avc: denied { ioctl } for pid=4357 comm="syz.2.200" path="socket:[8428]" dev="sockfs" ino=8428 ioctlcmd=0x4802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 65.197159][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 65.211760][ T833] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 65.512869][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.209'. [ 65.649843][ T28] audit: type=1400 audit(2000000024.760:592): avc: denied { allowed } for pid=4375 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.669249][ T28] audit: type=1400 audit(2000000024.770:593): avc: denied { create } for pid=4375 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.699743][ T28] audit: type=1400 audit(2000000024.770:594): avc: denied { connect } for pid=4375 comm="syz.3.205" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.729575][ T28] audit: type=1400 audit(2000000024.770:595): avc: denied { setopt } for pid=4375 comm="syz.3.205" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.817979][ T28] audit: type=1400 audit(2000000024.770:596): avc: denied { write } for pid=4375 comm="syz.3.205" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.937199][ T28] audit: type=1400 audit(2000000024.780:597): avc: denied { sqpoll } for pid=4375 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.986237][ T28] audit: type=1326 audit(2000000025.300:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 66.053180][ T28] audit: type=1326 audit(2000000025.300:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4392 comm="syz.2.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 66.181407][ T4404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.299219][ T4412] EXT4-fs: Ignoring removed orlov option [ 66.317521][ T4412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.924021][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.209412][ T4438] set_capacity_and_notify: 5 callbacks suppressed [ 67.216237][ T4438] loop1: detected capacity change from 0 to 128 [ 67.480926][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.482346][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.903925][ T4461] tmpfs: Unknown parameter ' à ' [ 67.946639][ T4464] loop5: detected capacity change from 0 to 256 [ 67.999439][ T4464] FAT-fs (loop5): Directory bread(block 64) failed [ 68.006042][ T4464] FAT-fs (loop5): Directory bread(block 65) failed [ 68.012858][ T4464] FAT-fs (loop5): Directory bread(block 66) failed [ 68.019449][ T4464] FAT-fs (loop5): Directory bread(block 67) failed [ 68.026152][ T4464] FAT-fs (loop5): Directory bread(block 68) failed [ 68.032806][ T4464] FAT-fs (loop5): Directory bread(block 69) failed [ 68.039370][ T4464] FAT-fs (loop5): Directory bread(block 70) failed [ 68.045952][ T4464] FAT-fs (loop5): Directory bread(block 71) failed [ 68.052619][ T4464] FAT-fs (loop5): Directory bread(block 72) failed [ 68.059205][ T4464] FAT-fs (loop5): Directory bread(block 73) failed [ 68.088760][ T4464] __nla_validate_parse: 6 callbacks suppressed [ 68.088778][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.104187][ T4464] netlink: 2 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.113325][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.122545][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.131473][ T4464] netlink: 2 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.140675][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.150777][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.160076][ T4464] netlink: 2 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.169330][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.178383][ T4464] netlink: 28 bytes leftover after parsing attributes in process `syz.5.229'. [ 68.732771][ T4475] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 68.846482][ T4481] loop0: detected capacity change from 0 to 764 [ 68.869442][ T4475] tipc: Started in network mode [ 68.893211][ T4481] rock: directory entry would overflow storage [ 68.901944][ T4475] tipc: Node identity ac14140f, cluster identity 4711 [ 68.929630][ T4481] rock: sig=0x5245, size=8, remaining=5 [ 68.944683][ T4475] tipc: New replicast peer: 255.255.255.255 [ 68.989848][ T4475] tipc: Enabled bearer , priority 10 [ 69.209636][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 69.316814][ T4491] usb usb8: usbfs: process 4491 (syz.1.240) did not claim interface 0 before use [ 70.120078][ T3418] tipc: Node number set to 2886997007 [ 70.487393][ T4535] loop5: detected capacity change from 0 to 128 [ 70.684015][ T4537] loop1: detected capacity change from 0 to 128 [ 70.697797][ T4539] ipt_rpfilter: unknown options [ 71.151033][ T4548] loop0: detected capacity change from 0 to 512 [ 71.198634][ T4548] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.258: corrupted in-inode xattr: invalid ea_ino [ 71.226462][ T4548] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.227278][ T4548] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.258: couldn't read orphan inode 15 (err -117) [ 71.234348][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 71.234363][ T28] audit: type=1400 audit(2000000030.770:721): avc: denied { mount } for pid=4552 comm="syz.2.260" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 71.236653][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 71.251549][ T28] audit: type=1400 audit(2000000030.790:722): avc: denied { create } for pid=4552 comm="syz.2.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 71.254615][ C0] EXT4-fs (loop0): initial error at time 2000000030: ext4_iget_extra_inode:5025: inode 15 [ 71.313212][ C0] EXT4-fs (loop0): last error at time 2000000030: ext4_iget_extra_inode:5025: inode 15 [ 71.330842][ T28] audit: type=1400 audit(2000000030.870:723): avc: denied { block_suspend } for pid=4552 comm="syz.2.260" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.331539][ T4548] loop0: lost filesystem error report for type 5 error -117 [ 71.352765][ T4548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.390640][ T4557] tmpfs: Unknown parameter ' à ' [ 71.494494][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.512522][ T4569] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.526071][ T28] audit: type=1400 audit(2000000031.060:724): avc: denied { ioctl } for pid=4570 comm="syz.3.268" path="socket:[8636]" dev="sockfs" ino=8636 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.562839][ T4571] loop5: detected capacity change from 0 to 512 [ 71.576954][ T4571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.595679][ T4574] loop0: detected capacity change from 0 to 2048 [ 71.639799][ T28] audit: type=1400 audit(2000000031.170:725): avc: denied { write } for pid=4565 comm="syz.5.266" path="/41/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.683333][ T4447] Alternate GPT is invalid, using primary GPT. [ 71.692576][ T28] audit: type=1400 audit(2000000031.170:726): avc: denied { firmware_load } for pid=4565 comm="syz.5.266" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 71.699728][ T4447] loop0: p1 p2 p3 [ 71.721556][ T4577] loop3: detected capacity change from 0 to 128 [ 71.761010][ T4447] loop0: partition table partially beyond EOD, truncated [ 71.786238][ T4579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4579 comm=syz.5.266 [ 71.833412][ T4571] macvlan2: entered promiscuous mode [ 71.838849][ T4571] bridge0: entered promiscuous mode [ 71.881581][ T4583] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.891342][ T4574] Alternate GPT is invalid, using primary GPT. [ 71.897705][ T4574] loop0: p1 p2 p3 [ 71.901886][ T4574] loop0: partition table partially beyond EOD, truncated [ 72.007434][ T28] audit: type=1400 audit(2000000031.540:727): avc: denied { bind } for pid=4585 comm="syz.1.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.171027][ T4586] loop1: detected capacity change from 0 to 512 [ 72.179507][ T4586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.190474][ T4586] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.270: corrupted inode contents [ 72.208396][ T4586] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.208649][ T4586] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 72.218016][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 72.218046][ C1] EXT4-fs (loop1): initial error at time 2000000031: ext4_do_update_inode:5569: inode 15 [ 72.218093][ C1] EXT4-fs (loop1): last error at time 2000000031: ext4_do_update_inode:5569: inode 15 [ 72.252826][ T4586] loop1: lost filesystem error report for type 5 error -117 [ 72.253468][ T4586] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.270: corrupted inode contents [ 72.272847][ T4586] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.273055][ T4586] EXT4-fs error (device loop1): ext4_evict_inode:303: inode #15: comm syz.1.270: mark_inode_dirty error [ 72.294084][ T4586] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 72.294290][ T4586] EXT4-fs (loop1): 1 orphan inode deleted [ 72.310052][ T4586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.348343][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.349597][ T28] audit: type=1326 audit(2000000031.880:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 72.397686][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.431399][ T4591] tipc: Enabling of bearer rejected, failed to enable media [ 72.441665][ T28] audit: type=1326 audit(2000000031.880:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 72.504031][ T28] audit: type=1326 audit(2000000031.880:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4588 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 72.550734][ T4604] tmpfs: Unknown parameter ' à ' [ 72.563990][ T4606] loop1: detected capacity change from 0 to 1024 [ 72.587501][ T4606] EXT4-fs: Ignoring removed orlov option [ 72.605894][ T4606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.908679][ T4625] loop3: detected capacity change from 0 to 128 [ 72.997761][ T4632] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.466762][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.593032][ T4640] loop1: detected capacity change from 0 to 512 [ 73.600530][ T4640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.639948][ T4640] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.288: corrupted inode contents [ 73.646408][ T4628] loop5: detected capacity change from 0 to 2048 [ 73.683879][ T4640] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.688890][ T4644] loop3: detected capacity change from 0 to 512 [ 73.699558][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 73.711312][ C0] EXT4-fs (loop1): initial error at time 2000000033: ext4_do_update_inode:5569: inode 15 [ 73.721279][ C0] EXT4-fs (loop1): last error at time 2000000033: ext4_do_update_inode:5569: inode 15 [ 73.732211][ T4640] EXT4-fs (loop1): Remounting filesystem read-only [ 73.738758][ T4640] EXT4-fs (loop1): 1 orphan inode deleted [ 73.745263][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.758021][ T4644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.791870][ T4644] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.289: corrupted inode contents [ 73.815056][ T4628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.818832][ T4656] netlink: 'syz.2.293': attribute type 39 has an invalid length. [ 73.831866][ T4644] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 73.839653][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 73.852122][ T4628] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.855907][ C0] EXT4-fs (loop3): initial error at time 2000000033: ext4_do_update_inode:5569: inode 15 [ 73.855944][ C0] EXT4-fs (loop3): last error at time 2000000033: ext4_do_update_inode:5569: inode 15 [ 73.856860][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.895943][ T4644] EXT4-fs (loop3): Remounting filesystem read-only [ 73.902622][ T4644] EXT4-fs (loop3): 1 orphan inode deleted [ 73.909607][ T4644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.993468][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.074445][ T4662] loop1: detected capacity change from 0 to 764 [ 74.117574][ T4662] rock: directory entry would overflow storage [ 74.131862][ T4662] rock: sig=0x5245, size=8, remaining=5 [ 74.141228][ T4668] __nla_validate_parse: 42 callbacks suppressed [ 74.141246][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 74.220559][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.300'. [ 74.240668][ T4676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'. [ 74.275263][ T4668] loop3: detected capacity change from 0 to 128 [ 74.284274][ T833] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 74.314195][ T833] EXT4-fs (loop5): Remounting filesystem read-only [ 74.321667][ T4678] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 74.328312][ T4678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.349041][ T4678] vhci_hcd vhci_hcd.0: Device attached [ 74.369933][ T4680] vhci_hcd: connection closed [ 74.380078][ T38] vhci_hcd vhci_hcd.1: stop threads [ 74.391126][ T38] vhci_hcd vhci_hcd.1: release socket [ 74.396690][ T38] vhci_hcd vhci_hcd.1: disconnect device [ 74.410559][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.528406][ T4685] loop5: detected capacity change from 0 to 2048 [ 74.593603][ T3301] Alternate GPT is invalid, using primary GPT. [ 74.603707][ T3301] loop5: p1 p2 p3 [ 74.607531][ T3301] loop5: partition table partially beyond EOD, truncated [ 74.645339][ T4685] Alternate GPT is invalid, using primary GPT. [ 74.657323][ T4685] loop5: p1 p2 p3 [ 74.669954][ T4685] loop5: partition table partially beyond EOD, truncated [ 74.785678][ T4691] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.038418][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 75.048715][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.312'. [ 75.060372][ T4709] team0: Port device team_slave_0 removed [ 75.087050][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 75.096774][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 75.105051][ T4711] loop3: detected capacity change from 0 to 128 [ 75.455331][ T4736] lo speed is unknown, defaulting to 1000 [ 75.455426][ T4737] siw: device registration error -23 [ 75.462043][ T4736] lo speed is unknown, defaulting to 1000 [ 75.484473][ T4736] lo speed is unknown, defaulting to 1000 [ 75.498479][ T4737] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 75.506869][ T4739] loop5: detected capacity change from 0 to 1024 [ 75.513631][ T4739] EXT4-fs: Ignoring removed orlov option [ 75.526254][ T4736] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 75.528745][ T4740] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 75.549722][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.583467][ T4737] team0: Device vxcan1 is of different type [ 75.620378][ T4740] team0: Device vxcan1 is of different type [ 75.637390][ T4736] lo speed is unknown, defaulting to 1000 [ 75.643710][ T4736] lo speed is unknown, defaulting to 1000 [ 75.650372][ T4736] lo speed is unknown, defaulting to 1000 [ 75.656540][ T4736] lo speed is unknown, defaulting to 1000 [ 75.663374][ T4736] lo speed is unknown, defaulting to 1000 [ 75.785762][ T4746] syzkaller1: entered promiscuous mode [ 75.791328][ T4746] syzkaller1: entered allmulticast mode [ 75.830627][ T35] IPVS: starting estimator thread 0... [ 75.930527][ T4751] IPVS: using max 2736 ests per chain, 136800 per kthread [ 76.153056][ T4768] FAT-fs (loop1): Directory bread(block 64) failed [ 76.170310][ T4768] FAT-fs (loop1): Directory bread(block 65) failed [ 76.178134][ T4771] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.215491][ T4768] FAT-fs (loop1): Directory bread(block 66) failed [ 76.235015][ T4768] FAT-fs (loop1): Directory bread(block 67) failed [ 76.250239][ T4768] FAT-fs (loop1): Directory bread(block 68) failed [ 76.270915][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 76.280091][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 76.280113][ T28] audit: type=1400 audit(2000000035.810:868): avc: denied { connect } for pid=4772 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.345854][ T4768] FAT-fs (loop1): Directory bread(block 69) failed [ 76.368310][ T28] audit: type=1400 audit(2000000035.810:869): avc: denied { accept } for pid=4772 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.390054][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.399305][ T4768] FAT-fs (loop1): Directory bread(block 70) failed [ 76.447293][ T4778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 76.460199][ T4768] FAT-fs (loop1): Directory bread(block 71) failed [ 76.466852][ T4768] FAT-fs (loop1): Directory bread(block 72) failed [ 76.481410][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.330'. [ 76.537289][ T28] audit: type=1400 audit(2000000036.070:870): avc: denied { create } for pid=4782 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.553010][ T4768] FAT-fs (loop1): Directory bread(block 73) failed [ 76.599470][ T28] audit: type=1400 audit(2000000036.100:871): avc: denied { shutdown } for pid=4782 comm="syz.0.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 76.748943][ T28] audit: type=1400 audit(2000000036.280:872): avc: denied { connect } for pid=4788 comm="syz.5.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.846040][ T4789] netlink: 'syz.5.335': attribute type 5 has an invalid length. [ 76.981228][ T28] audit: type=1400 audit(2000000036.510:873): avc: denied { getopt } for pid=4797 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.982631][ T4798] lo speed is unknown, defaulting to 1000 [ 77.097669][ T4803] xt_limit: Overflow, try lower: 2147483649/3300 [ 77.279220][ T28] audit: type=1400 audit(2000000036.810:874): avc: denied { getopt } for pid=4797 comm="syz.3.338" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.560446][ T28] audit: type=1400 audit(2000000037.100:875): avc: denied { setopt } for pid=4809 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.586360][ T4810] set_capacity_and_notify: 2 callbacks suppressed [ 77.586375][ T4810] loop0: detected capacity change from 0 to 512 [ 77.596412][ T28] audit: type=1400 audit(2000000037.120:876): avc: denied { cpu } for pid=4809 comm="syz.0.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 77.600182][ T4810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.655978][ T4810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.692437][ T4810] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.747919][ T28] audit: type=1400 audit(2000000037.280:877): avc: denied { ioctl } for pid=4809 comm="syz.0.340" path="socket:[9400]" dev="sockfs" ino=9400 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.776701][ T4815] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 77.791590][ T4815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.800173][ T4815] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.810692][ T4815] netlink: 'syz.3.341': attribute type 10 has an invalid length. [ 77.818647][ T4815] batadv0: entered promiscuous mode [ 77.837771][ T4815] batadv0: entered allmulticast mode [ 77.848933][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.859144][ T4815] bond0: (slave batadv0): Releasing backup interface [ 77.868805][ T4815] bridge0: port 3(batadv0) entered blocking state [ 77.899868][ T4815] bridge0: port 3(batadv0) entered disabled state [ 78.139668][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 78.148917][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 78.363646][ T4838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.419745][ T4840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4840 comm=syz.5.350 [ 78.542162][ T4840] netlink: 'syz.5.350': attribute type 1 has an invalid length. [ 78.697037][ T4840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.720906][ T4848] bond1: (slave dummy0): making interface the new active one [ 78.749923][ T4848] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 79.333310][ T4880] netlink: 'syz.5.362': attribute type 10 has an invalid length. [ 79.342142][ T4880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.350269][ T4880] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 79.360703][ T4880] netlink: 'syz.5.362': attribute type 10 has an invalid length. [ 79.368598][ T4880] __nla_validate_parse: 5 callbacks suppressed [ 79.368616][ T4880] netlink: 40 bytes leftover after parsing attributes in process `syz.5.362'. [ 79.384715][ T4880] batadv0: entered promiscuous mode [ 79.390023][ T4880] batadv0: entered allmulticast mode [ 79.396666][ T4880] bond0: (slave batadv0): Releasing backup interface [ 79.400789][ T4878] netlink: 24 bytes leftover after parsing attributes in process `syz.2.361'. [ 79.414869][ T4880] bridge0: port 3(batadv0) entered blocking state [ 79.421643][ T4880] bridge0: port 3(batadv0) entered disabled state [ 79.528263][ T4884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 79.680753][ T50] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 79.690140][ T50] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 79.750634][ T4894] syzkaller0: entered promiscuous mode [ 79.756232][ T4894] syzkaller0: entered allmulticast mode [ 79.907377][ T4897] loop0: detected capacity change from 0 to 1024 [ 79.914372][ T4897] EXT4-fs: Ignoring removed orlov option [ 79.933214][ T4897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.994602][ T4900] loop1: detected capacity change from 0 to 764 [ 80.058379][ T4900] rock: directory entry would overflow storage [ 80.089424][ T4900] rock: sig=0x5245, size=8, remaining=5 [ 80.146481][ T4892] Set syz1 is full, maxelem 65536 reached [ 80.198516][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.230236][ T4908] loop5: detected capacity change from 0 to 2048 [ 80.253812][ T4907] loop1: detected capacity change from 0 to 2048 [ 80.264953][ T4908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.280601][ T4912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 80.361482][ T4912] loop0: detected capacity change from 0 to 128 [ 80.383149][ T4907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.459125][ T4907] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.371: bg 0: block 234: padding at end of block bitmap is not set [ 80.475514][ T4907] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1370 with error 28 [ 80.488307][ T4907] EXT4-fs (loop1): This should not happen!! Data will be lost [ 80.488307][ T4907] [ 80.498114][ T4907] EXT4-fs (loop1): Total free blocks count 0 [ 80.504167][ T4907] EXT4-fs (loop1): Free/Dirty block details [ 80.510246][ T4907] EXT4-fs (loop1): free_blocks=0 [ 80.516832][ T4907] EXT4-fs (loop1): dirty_blocks=1376 [ 80.522338][ T4907] EXT4-fs (loop1): Block reservation details [ 80.528392][ T4907] EXT4-fs (loop1): i_reserved_data_blocks=86 [ 80.604608][ T4927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 80.674391][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.379'. [ 80.694626][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 80.707919][ T4932] loop0: detected capacity change from 0 to 128 [ 80.722245][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.754098][ T4936] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 80.773148][ T4938] loop3: detected capacity change from 0 to 764 [ 80.780724][ T4938] rock: directory entry would overflow storage [ 80.790807][ T4938] rock: sig=0x5245, size=8, remaining=5 [ 80.791824][ T4936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.820132][ T4936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 80.846203][ T4936] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 80.854539][ T4936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 80.863630][ T4936] batadv0: entered promiscuous mode [ 80.869816][ T4936] batadv0: entered allmulticast mode [ 80.876357][ T4936] bond0: (slave batadv0): Releasing backup interface [ 80.957945][ T4936] bridge0: port 3(batadv0) entered blocking state [ 80.969263][ T4936] bridge0: port 3(batadv0) entered disabled state [ 81.100392][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.291133][ T4952] netlink: 40 bytes leftover after parsing attributes in process `syz.5.385'. [ 81.479624][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 81.488903][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 81.785282][ T4958] loop1: detected capacity change from 0 to 1024 [ 81.841547][ T4958] EXT4-fs: Ignoring removed orlov option [ 81.871843][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 81.923742][ T4958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.038745][ T4960] loop3: detected capacity change from 0 to 128 [ 82.788682][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.817613][ T4990] tmpfs: Unknown parameter ' à ' [ 82.994490][ T5003] loop5: detected capacity change from 0 to 512 [ 83.005110][ T5003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.020643][ T5007] loop1: detected capacity change from 0 to 512 [ 83.036955][ T5003] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #15: comm syz.5.396: corrupted inode contents [ 83.038315][ T5007] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.397: inode has both inline data and extents flags [ 83.062734][ T5003] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.062932][ T5003] EXT4-fs (loop5): Remounting filesystem read-only [ 83.069789][ T5007] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.072165][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 83.089171][ T5007] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.397: couldn't read orphan inode 15 (err -117) [ 83.094859][ C1] EXT4-fs (loop5): initial error at time 2000000042: ext4_do_update_inode:5569: inode 15 [ 83.094885][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 83.094893][ C1] EXT4-fs (loop5): last error at time 2000000042: ext4_do_update_inode:5569 [ 83.094902][ C0] EXT4-fs (loop1): initial error at time 2000000042: ext4_orphan_get:1391 [ 83.094912][ C1] : inode 15 [ 83.094920][ C0] : inode 15 [ 83.094931][ C0] EXT4-fs (loop1): last error at time 2000000042: ext4_orphan_get:1391: inode 15 [ 83.110971][ T28] kauditd_printk_skb: 53 callbacks suppressed [ 83.110985][ T28] audit: type=1326 audit(2000000042.640:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.117181][ T5007] loop1: lost filesystem error report for type 5 error -117 [ 83.137331][ T5009] loop0: detected capacity change from 0 to 2048 [ 83.141451][ T5003] EXT4-fs (loop5): 1 orphan inode deleted [ 83.154881][ T28] audit: type=1326 audit(2000000042.640:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.157544][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.169068][ T28] audit: type=1326 audit(2000000042.640:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.187876][ T5003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.239965][ T28] audit: type=1326 audit(2000000042.640:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.303264][ T28] audit: type=1326 audit(2000000042.640:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.327551][ T28] audit: type=1326 audit(2000000042.640:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.351842][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.352579][ T3301] Alternate GPT is invalid, using primary GPT. [ 83.368926][ T3301] loop0: p1 p2 p3 [ 83.374005][ T3301] loop0: partition table partially beyond EOD, truncated [ 83.381181][ T28] audit: type=1326 audit(2000000042.640:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.402910][ T5007] netlink: 'syz.1.397': attribute type 29 has an invalid length. [ 83.417591][ T28] audit: type=1326 audit(2000000042.640:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.442159][ T28] audit: type=1326 audit(2000000042.640:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 83.451815][ T5020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.468308][ T28] audit: type=1326 audit(2000000042.640:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5008 comm="syz.0.399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f864a03c502 code=0x7ffc0000 [ 83.497911][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.500726][ T5009] Alternate GPT is invalid, using primary GPT. [ 83.513476][ T5009] loop0: p1 p2 p3 [ 83.517345][ T5009] loop0: partition table partially beyond EOD, truncated [ 83.532908][ T5023] syzkaller0: entered promiscuous mode [ 83.538544][ T5023] syzkaller0: entered allmulticast mode [ 83.596385][ T5025] loop1: detected capacity change from 0 to 128 [ 83.640684][ T5027] loop3: detected capacity change from 0 to 128 [ 83.706192][ T5032] tmpfs: Unknown parameter ' à ' [ 83.792720][ T5035] loop5: detected capacity change from 0 to 128 [ 83.921404][ T5041] loop3: detected capacity change from 0 to 128 [ 83.951484][ T5046] loop0: detected capacity change from 0 to 512 [ 83.974874][ T5046] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.024104][ T5046] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.411: corrupted inode contents [ 84.038529][ T5046] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.039444][ T5046] EXT4-fs (loop0): Remounting filesystem read-only [ 84.048699][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 84.048719][ C1] EXT4-fs (loop0): initial error at time 2000000043: ext4_do_update_inode:5569: inode 15 [ 84.048761][ C1] EXT4-fs (loop0): last error at time 2000000043: ext4_do_update_inode:5569: inode 15 [ 84.081843][ T5046] EXT4-fs (loop0): 1 orphan inode deleted [ 84.088291][ T5046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.112459][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.217926][ T5053] lo speed is unknown, defaulting to 1000 [ 84.675144][ T5058] loop5: detected capacity change from 0 to 1024 [ 84.722458][ T5058] EXT4-fs: test_dummy_encryption option not supported [ 85.071959][ T5068] loop5: detected capacity change from 0 to 512 [ 85.211443][ T5068] EXT4-fs (loop5): 1 orphan inode deleted [ 85.233099][ T5068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.251882][ T5068] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.317882][ T38] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 1 [ 85.330264][ T3391] IPVS: starting estimator thread 0... [ 85.423510][ T5074] tmpfs: Unknown parameter ' à ' [ 85.469798][ T5072] IPVS: using max 2688 ests per chain, 134400 per kthread [ 85.847136][ T5083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.866406][ T5084] __nla_validate_parse: 7 callbacks suppressed [ 85.866421][ T5084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.420'. [ 85.884596][ T5083] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.423: corrupted inode contents [ 85.907852][ T5083] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.912916][ T5083] EXT4-fs (loop1): Remounting filesystem read-only [ 85.922349][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 85.922371][ C0] EXT4-fs (loop1): initial error at time 2000000045: ext4_do_update_inode:5569: inode 15 [ 85.922419][ C0] EXT4-fs (loop1): last error at time 2000000045: ext4_do_update_inode:5569: inode 15 [ 85.957316][ T5083] EXT4-fs (loop1): 1 orphan inode deleted [ 85.963912][ T5083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.036966][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.351144][ T5095] EXT4-fs: Ignoring removed orlov option [ 86.378026][ T5095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.591923][ T5099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 86.620864][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.633498][ T5101] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 86.814840][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.492657][ T3301] Alternate GPT is invalid, using primary GPT. [ 87.520946][ T3301] loop1: p1 p2 p3 [ 87.524715][ T3301] loop1: partition table partially beyond EOD, truncated [ 87.551102][ T5114] Alternate GPT is invalid, using primary GPT. [ 87.557370][ T5114] loop1: p1 p2 p3 [ 87.570207][ T5114] loop1: partition table partially beyond EOD, truncated [ 87.588608][ T5117] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'. [ 87.671501][ T5119] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.035167][ T5107] set_capacity_and_notify: 4 callbacks suppressed [ 88.036245][ T5107] loop5: detected capacity change from 0 to 2048 [ 88.374695][ T5107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.422234][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 88.538314][ T5130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'. [ 88.557319][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 88.557336][ T28] audit: type=1400 audit(2000000048.090:1014): avc: denied { map } for pid=5106 comm="syz.5.430" path="/71/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.629983][ T28] audit: type=1400 audit(2000000048.120:1015): avc: denied { execute } for pid=5106 comm="syz.5.430" path="/71/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.763190][ T5137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=5137 comm=syz.1.437 [ 88.777978][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 88.787983][ T5137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.437'. [ 88.884124][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.438'. [ 88.946029][ T5139] loop1: detected capacity change from 0 to 128 [ 89.048592][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.244105][ T5133] Set syz1 is full, maxelem 65536 reached [ 89.309882][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.442'. [ 89.319221][ T5148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.442'. [ 89.440413][ T5150] netlink: 'syz.2.443': attribute type 4 has an invalid length. [ 89.476447][ T5150] netlink: 'syz.2.443': attribute type 4 has an invalid length. [ 89.488294][ T28] audit: type=1326 audit(2000000049.030:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 89.495241][ T35] lo speed is unknown, defaulting to 1000 [ 89.537478][ T5152] loop0: detected capacity change from 0 to 2048 [ 89.540819][ T28] audit: type=1326 audit(2000000049.030:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 89.550232][ T35] syz2: Port: 1 Link ACTIVE [ 89.596725][ T28] audit: type=1326 audit(2000000049.030:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 89.641027][ T28] audit: type=1326 audit(2000000049.030:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 89.689888][ T28] audit: type=1326 audit(2000000049.030:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 89.753238][ T3301] Alternate GPT is invalid, using primary GPT. [ 89.759792][ T3301] loop0: p1 p2 p3 [ 89.767575][ T3301] loop0: partition table partially beyond EOD, truncated [ 89.903705][ T5162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.215808][ T28] audit: type=1326 audit(2000000049.030:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 90.240491][ T28] audit: type=1326 audit(2000000049.030:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 90.255588][ T5152] Alternate GPT is invalid, using primary GPT. [ 90.264801][ T28] audit: type=1326 audit(2000000049.030:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.0.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f864a03c799 code=0x7ffc0000 [ 90.290368][ T5152] loop0: p1 p2 p3 [ 90.308055][ T5152] loop0: partition table partially beyond EOD, truncated [ 90.497169][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 90.508656][ T4447] udevd[4447]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 90.520569][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 90.531604][ T5181] loop1: detected capacity change from 0 to 512 [ 90.538172][ T5181] vfat: Unknown parameter 'ÿÿ ' [ 90.576780][ T5182] lo speed is unknown, defaulting to 1000 [ 90.604802][ T5186] loop5: detected capacity change from 0 to 512 [ 90.636002][ T5186] EXT4-fs: Ignoring removed bh option [ 90.652990][ T5186] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.665517][ T5184] loop0: detected capacity change from 0 to 128 [ 90.681678][ T5186] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 90.699549][ T5186] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 90.727789][ T5186] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.757889][ T5186] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.454: Failed to acquire dquot type 1 [ 90.790319][ T5186] loop5: lost filesystem error report for type 5 error -5 [ 90.790752][ T5186] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.454: Invalid block bitmap block 0 in block_group 0 [ 90.812148][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 90.812172][ C0] EXT4-fs (loop5): last error at time 2000000050: ext4_acquire_dquot:7001 [ 90.851019][ T5186] loop5: lost filesystem error report for type 5 error -117 [ 90.860449][ T5186] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.454: Invalid block bitmap block 0 in block_group 0 [ 90.907382][ T5186] loop5: lost filesystem error report for type 5 error -117 [ 90.907588][ T5186] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.454: Invalid block bitmap block 0 in block_group 0 [ 90.937289][ T5186] loop5: lost filesystem error report for type 5 error -117 [ 90.937526][ T5186] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.454: Failed to acquire dquot type 1 [ 90.956639][ T5186] loop5: lost filesystem error report for type 5 error -28 [ 90.957094][ T5186] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.454: Failed to acquire dquot type 1 [ 90.990488][ T5186] loop5: lost filesystem error report for type 5 error -28 [ 90.990882][ T5186] EXT4-fs (loop5): 1 orphan inode deleted [ 91.022513][ T5186] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.059934][ T5186] syz.5.454 (5186) used greatest stack depth: 8056 bytes left [ 91.080024][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.147307][ T5215] __nla_validate_parse: 3 callbacks suppressed [ 91.147328][ T5215] netlink: 12 bytes leftover after parsing attributes in process `syz.5.458'. [ 91.172873][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.458'. [ 91.398876][ T5218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.459'. [ 91.425291][ T5224] loop1: detected capacity change from 0 to 2048 [ 91.451121][ T5213] Set syz1 is full, maxelem 65536 reached [ 91.544500][ T3301] Alternate GPT is invalid, using primary GPT. [ 91.551016][ T3301] loop1: p1 p2 p3 [ 91.554914][ T3301] loop1: partition table partially beyond EOD, truncated [ 91.577991][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 91.587632][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 91.613058][ T5224] Alternate GPT is invalid, using primary GPT. [ 91.619679][ T5224] loop1: p1 p2 p3 [ 91.627563][ T5224] loop1: partition table partially beyond EOD, truncated [ 91.695281][ T5224] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 91.900968][ T5238] loop0: detected capacity change from 0 to 128 [ 91.960935][ T5241] 9p: Unknown Cache mode or invalid value l [ 92.597705][ T5250] lo speed is unknown, defaulting to 1000 [ 92.767171][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 92.818925][ T5258] loop3: detected capacity change from 0 to 128 [ 93.524947][ T5268] netlink: 24 bytes leftover after parsing attributes in process `syz.5.473'. [ 93.579252][ T5282] loop3: detected capacity change from 0 to 128 [ 93.718364][ T5290] lo speed is unknown, defaulting to 1000 [ 93.738181][ T5288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 94.433464][ T5299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 94.447892][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 94.447910][ T28] audit: type=1400 audit(2000000053.970:1088): avc: denied { write } for pid=5296 comm="syz.5.484" lport=36686 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 94.515652][ T5299] loop1: detected capacity change from 0 to 128 [ 94.922929][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 95.284708][ T5329] lo speed is unknown, defaulting to 1000 [ 95.339309][ T5342] loop1: detected capacity change from 0 to 512 [ 95.365142][ T5342] EXT4-fs (loop1): mounted filesystem 0000ff07-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.411269][ T5342] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.511726][ T3310] EXT4-fs (loop1): unmounting filesystem 0000ff07-0000-0000-0000-000000000000. [ 95.745252][ T5361] hub 9-0:1.0: USB hub found [ 95.750406][ T5361] hub 9-0:1.0: 8 ports detected [ 96.525407][ T28] audit: type=1400 audit(2000000056.060:1089): avc: denied { name_connect } for pid=5368 comm="syz.0.506" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 96.713043][ T28] audit: type=1400 audit(2000000056.220:1090): avc: denied { bind } for pid=5374 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.786808][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 96.820119][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 96.852509][ T5387] loop0: detected capacity change from 0 to 128 [ 96.935870][ T5383] lo speed is unknown, defaulting to 1000 [ 97.128575][ T5410] loop1: detected capacity change from 0 to 764 [ 97.157163][ T5410] rock: directory entry would overflow storage [ 97.179193][ T5410] rock: sig=0x5245, size=8, remaining=5 [ 97.261802][ T5412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.284470][ T5412] netlink: 'syz.5.523': attribute type 1 has an invalid length. [ 97.303443][ T5414] loop1: detected capacity change from 0 to 4096 [ 97.332637][ T5414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.350497][ T5412] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.361671][ T5412] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 97.399629][ T28] audit: type=1400 audit(2000000056.910:1091): avc: denied { setattr } for pid=5413 comm="syz.1.522" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.481488][ T28] audit: type=1400 audit(2000000056.910:1092): avc: denied { mount } for pid=5413 comm="syz.1.522" name="/" dev="hugetlbfs" ino=11135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.482581][ T5412] bond2: (slave gretap1): making interface the new active one [ 97.620843][ T5412] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 97.634976][ T5418] macvlan3: entered promiscuous mode [ 97.689695][ T5418] macvlan3: entered allmulticast mode [ 97.696162][ T28] audit: type=1326 audit(2000000057.230:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 97.696654][ T5418] bond2: entered promiscuous mode [ 97.723833][ T28] audit: type=1326 audit(2000000057.230:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 97.758267][ T28] audit: type=1326 audit(2000000057.260:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 97.775134][ T5418] gretap1: entered promiscuous mode [ 97.783524][ T28] audit: type=1326 audit(2000000057.260:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 97.823411][ T5418] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 97.833674][ T28] audit: type=1326 audit(2000000057.260:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.2.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 97.868550][ T5418] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 97.883324][ T5418] bond2: left promiscuous mode [ 97.898098][ T5418] gretap1: left promiscuous mode [ 97.911164][ T5414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.522'. [ 97.937345][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.974589][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'. [ 98.005343][ T5443] loop0: detected capacity change from 0 to 764 [ 98.015150][ T5446] lo speed is unknown, defaulting to 1000 [ 98.021912][ T5441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.531'. [ 98.032341][ T5443] rock: directory entry would overflow storage [ 98.038518][ T5443] rock: sig=0x5245, size=8, remaining=5 [ 98.058740][ T5441] netlink: 'syz.1.531': attribute type 7 has an invalid length. [ 98.082242][ T5449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 98.101116][ T5441] netlink: 'syz.1.531': attribute type 8 has an invalid length. [ 98.118063][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 98.154647][ T5449] loop3: detected capacity change from 0 to 128 [ 98.158602][ T5441] bridge0: entered promiscuous mode [ 98.177997][ T5441] ip6gretap0: entered promiscuous mode [ 98.183719][ T5459] loop1: detected capacity change from 0 to 512 [ 98.192741][ T5441] bridge0: left promiscuous mode [ 98.199057][ T5441] ip6gretap0: left promiscuous mode [ 98.242636][ T5459] EXT4-fs: Ignoring removed bh option [ 98.258556][ T5459] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.274468][ T5459] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 98.285196][ T5459] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 98.293576][ T5459] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.300891][ T5459] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.531: Failed to acquire dquot type 1 [ 98.312719][ T5459] loop1: lost filesystem error report for type 5 error -5 [ 98.313058][ T5459] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.531: Invalid block bitmap block 0 in block_group 0 [ 98.320364][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.320390][ C1] EXT4-fs (loop1): last error at time 2000000057: ext4_acquire_dquot:7001 [ 98.354005][ T5459] loop1: lost filesystem error report for type 5 error -117 [ 98.354356][ T5459] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.531: Invalid block bitmap block 0 in block_group 0 [ 98.375425][ T5466] loop5: detected capacity change from 0 to 512 [ 98.387128][ T5459] loop1: lost filesystem error report for type 5 error -117 [ 98.387340][ T5466] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 98.405400][ T5459] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.531: Invalid block bitmap block 0 in block_group 0 [ 98.419463][ T5459] loop1: lost filesystem error report for type 5 error -117 [ 98.419720][ T5459] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.531: Failed to acquire dquot type 1 [ 98.465137][ T5459] loop1: lost filesystem error report for type 5 error -28 [ 98.466427][ T5459] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.531: Failed to acquire dquot type 1 [ 98.490295][ T5459] loop1: lost filesystem error report for type 5 error -28 [ 98.490576][ T5459] EXT4-fs (loop1): 1 orphan inode deleted [ 98.504871][ T5459] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.588371][ T5466] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.726996][ T5466] EXT4-fs (loop5): 1 truncate cleaned up [ 98.794117][ T5466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.933608][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.239979][ T5487] loop1: detected capacity change from 0 to 764 [ 99.296454][ T5487] rock: directory entry would overflow storage [ 99.304390][ T5487] rock: sig=0x5245, size=8, remaining=5 [ 99.440838][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.560056][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 99.738601][ T5496] process 'syz.5.550' launched '/dev/fd/7' with NULL argv: empty string added [ 99.829433][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 99.829450][ T28] audit: type=1400 audit(2000000059.360:1172): avc: denied { execute_no_trans } for pid=5495 comm="syz.5.550" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.867344][ T5493] loop1: detected capacity change from 0 to 128 [ 100.466342][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 100.536854][ T5504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.554'. [ 100.556326][ T5502] loop1: detected capacity change from 0 to 128 [ 100.571615][ T5500] lo speed is unknown, defaulting to 1000 [ 100.648156][ T5504] loop5: detected capacity change from 0 to 128 [ 100.911123][ T28] audit: type=1326 audit(2000000060.450:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 100.989591][ T28] audit: type=1326 audit(2000000060.470:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.015562][ T28] audit: type=1326 audit(2000000060.470:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.050290][ T28] audit: type=1326 audit(2000000060.470:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.076231][ T28] audit: type=1326 audit(2000000060.470:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.103989][ T28] audit: type=1326 audit(2000000060.470:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.131370][ T28] audit: type=1326 audit(2000000060.470:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.155629][ T28] audit: type=1326 audit(2000000060.470:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f310624c799 code=0x7ffc0000 [ 101.208396][ T28] audit: type=1326 audit(2000000060.470:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5517 comm="syz.2.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f310624c502 code=0x7ffc0000 [ 101.412217][ T5526] loop1: detected capacity change from 0 to 764 [ 101.432266][ T5526] rock: directory entry would overflow storage [ 101.438605][ T5526] rock: sig=0x5245, size=8, remaining=5 [ 101.491283][ T5530] ipt_REJECT: ECHOREPLY no longer supported. [ 101.521127][ T5531] loop5: detected capacity change from 0 to 128 [ 101.614223][ T5534] loop1: detected capacity change from 0 to 1024 [ 101.646972][ T5534] EXT4-fs: Ignoring removed orlov option [ 101.670410][ T5534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.966113][ T5540] __nla_validate_parse: 3 callbacks suppressed [ 101.966133][ T5540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 102.110195][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.320193][ T5547] loop0: detected capacity change from 0 to 512 [ 102.327189][ T5547] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.346078][ T5547] SELinux: policydb version -1765474282 does not match my version range 15-35 [ 102.355366][ T5547] SELinux: failed to load policy [ 102.487089][ T5565] loop5: detected capacity change from 0 to 764 [ 102.502166][ T5565] rock: directory entry would overflow storage [ 102.502636][ T5562] lo speed is unknown, defaulting to 1000 [ 102.508475][ T5565] rock: sig=0x5245, size=8, remaining=5 [ 102.602350][ T5572] loop5: detected capacity change from 0 to 1024 [ 102.618737][ T5572] EXT4-fs: Ignoring removed orlov option [ 102.635194][ T5572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.921846][ T3646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.974987][ T5589] syzkaller0: entered promiscuous mode [ 103.108242][ T5591] pim6reg: entered allmulticast mode [ 103.114295][ T5592] pim6reg: left allmulticast mode [ 103.177529][ T5596] syzkaller0: entered promiscuous mode [ 103.183950][ T5596] syzkaller0: entered allmulticast mode [ 103.450992][ T5601] rock: directory entry would overflow storage [ 103.468394][ T5601] rock: sig=0x5245, size=8, remaining=5 [ 103.496735][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 103.872389][ T5625] hub 8-0:1.0: USB hub found [ 103.877380][ T5625] hub 8-0:1.0: 8 ports detected [ 104.347841][ T5628] netlink: 'syz.3.599': attribute type 3 has an invalid length. [ 104.358082][ T5629] ------------[ cut here ]------------ [ 104.363620][ T5629] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 104.363879][ T5631] syzkaller0: entered promiscuous mode [ 104.388625][ T5629] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.598/5629 [ 104.405229][ T5629] Modules linked in: [ 104.409237][ T5629] CPU: 1 UID: 0 PID: 5629 Comm: syz.5.598 Not tainted syzkaller #0 PREEMPT(full) [ 104.418708][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 104.428915][ T5629] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 104.435411][ T5629] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 104.456082][ T5629] RSP: 0018:ffffc90006a6f370 EFLAGS: 00010246 [ 104.461060][ T5628] xt_hashlimit: size too large, truncated to 1048576 [ 104.462664][ T5629] RAX: ffff888104e5de88 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 104.470813][ T5636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.602'. [ 104.477334][ T5629] RDX: ffffffff86819221 RSI: ffffffff866da6b9 RDI: ffffffff871d2340 [ 104.494577][ T5629] RBP: ffff88811a1cd270 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 104.499374][ T5628] xt_hashlimit: overflow, try lower: 3/0 [ 104.502823][ T5629] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a1cd230 [ 104.517259][ T5629] R13: 00000000ffffdfcc R14: ffff88811a1cd27c R15: ffff88811a1cd268 [ 104.525562][ T5629] FS: 00007f98c228f6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 104.534920][ T5629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.541663][ T5629] CR2: 0000200000002480 CR3: 000000012282e000 CR4: 00000000003506f0 [ 104.550240][ T5629] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.558329][ T5629] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 104.566365][ T5629] Call Trace: [ 104.569690][ T5629] [ 104.572648][ T5629] reg_set_min_max+0x1c8/0x260 [ 104.574390][ T5638] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5638 comm=syz.2.602 [ 104.577501][ T5629] check_cond_jmp_op+0x13b2/0x1a80 [ 104.577541][ T5629] do_check+0x4a9b/0x9840 [ 104.600205][ T5629] do_check_common+0xd0b/0x1630 [ 104.605240][ T5629] bpf_check+0x2f78/0xcc30 [ 104.609862][ T5629] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 104.616111][ T5629] ? alloc_pages_bulk_noprof+0x4aa/0x530 [ 104.622004][ T5629] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 104.628095][ T5629] ? try_charge_memcg+0x215/0xa10 [ 104.633357][ T5629] ? pcpu_block_refresh_hint+0x10b/0x170 [ 104.639107][ T5629] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 104.645589][ T5629] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 104.651806][ T5629] ? css_rstat_updated+0xbb/0x280 [ 104.656867][ T5629] ? mod_memcg_state+0x182/0x270 [ 104.661875][ T5629] ? __rcu_read_unlock+0x4e/0x70 [ 104.666910][ T5629] ? avc_has_perm_noaudit+0xab/0x130 [ 104.672518][ T5629] ? avc_has_perm+0x101/0x190 [ 104.677291][ T5629] ? selinux_bpf_prog_load+0x197/0x1c0 [ 104.683024][ T5629] ? security_bpf_prog_load+0x9e/0x140 [ 104.688789][ T5629] bpf_prog_load+0xf76/0x1140 [ 104.693705][ T5629] ? security_bpf+0x2b/0x90 [ 104.698498][ T5629] __sys_bpf+0x505/0x7e0 [ 104.702847][ T5629] __x64_sys_bpf+0x41/0x50 [ 104.707693][ T5629] x64_sys_call+0x10cb/0x3020 [ 104.712532][ T5629] do_syscall_64+0x12c/0x370 [ 104.717235][ T5629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.723815][ T5629] RIP: 0033:0x7f98c383c799 [ 104.728599][ T5629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.748700][ T5629] RSP: 002b:00007f98c228f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 104.757541][ T5629] RAX: ffffffffffffffda RBX: 00007f98c3ab5fa0 RCX: 00007f98c383c799 [ 104.765777][ T5629] RDX: 0000000000000049 RSI: 0000200000000140 RDI: 0000000000000005 [ 104.773946][ T5629] RBP: 00007f98c38d2c99 R08: 0000000000000000 R09: 0000000000000000 [ 104.782075][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.790246][ T5629] R13: 00007f98c3ab6038 R14: 00007f98c3ab5fa0 R15: 00007ffdd4b02bc8 [ 104.798412][ T5629] [ 104.801747][ T5629] ---[ end trace 0000000000000000 ]--- [ 104.865394][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 104.865412][ T28] audit: type=1400 audit(2000000064.400:1242): avc: denied { read } for pid=5644 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.986243][ T5647] ip6gre1: entered allmulticast mode [ 105.000660][ T5651] set_capacity_and_notify: 1 callbacks suppressed [ 105.000684][ T5651] loop5: detected capacity change from 0 to 1764 [ 105.014328][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.103342][ T28] audit: type=1400 audit(2000000064.640:1243): avc: denied { bind } for pid=5646 comm="syz.1.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 105.195124][ T5651] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 105.241958][ T5663] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.256203][ T5663] vhci_hcd vhci_hcd.1: invalid port number 96 [ 105.263350][ T5663] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 105.572954][ T5669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.612'. [ 105.637310][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'. [ 105.738351][ T5673] loop3: detected capacity change from 0 to 512 [ 105.749993][ T5673] EXT4-fs: Ignoring removed bh option [ 105.759738][ T5673] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.767365][ T5674] IPVS: Error connecting to the multicast addr [ 105.773785][ T5673] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 105.810756][ T5673] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 105.819325][ T5673] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.851307][ T5673] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 105.866639][ T5673] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 105.873886][ T5673] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.613: Invalid block bitmap block 0 in block_group 0 [ 105.887370][ T5673] loop3: lost filesystem error report for type 5 error -117 [ 105.887582][ T5673] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 105.894949][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 105.894977][ C0] EXT4-fs (loop3): last error at time 2000000065: ext4_read_block_bitmap_nowait:483 [ 105.949575][ T5673] loop3: lost filesystem error report for type 5 error -117 [ 105.952411][ T5673] EXT4-fs (loop3): 1 orphan inode deleted [ 105.966136][ T5673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.979005][ T5682] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 106.043417][ T5685] netlink: 'syz.3.613': attribute type 4 has an invalid length. [ 106.057547][ T28] audit: type=1400 audit(2000000065.580:1244): avc: denied { setopt } for pid=5671 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.094510][ T5684] loop5: detected capacity change from 0 to 2048 [ 106.101339][ T28] audit: type=1400 audit(2000000065.600:1245): avc: denied { create } for pid=5671 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 106.144580][ T5691] loop0: detected capacity change from 0 to 764 [ 106.188964][ T5691] rock: directory entry would overflow storage [ 106.205895][ T5691] rock: sig=0x5245, size=8, remaining=5 [ 106.212052][ T28] audit: type=1400 audit(2000000065.750:1246): avc: denied { unmount } for pid=3646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 106.244547][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.348780][ T5709] FAULT_INJECTION: forcing a failure. [ 106.348780][ T5709] name failslab, interval 1, probability 0, space 0, times 0 [ 106.371695][ T5709] CPU: 1 UID: 0 PID: 5709 Comm: syz.5.628 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.371841][ T5709] Tainted: [W]=WARN [ 106.371848][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.371859][ T5709] Call Trace: [ 106.371864][ T5709] [ 106.371871][ T5709] __dump_stack+0x1d/0x30 [ 106.371899][ T5709] dump_stack_lvl+0x95/0xd0 [ 106.371921][ T5709] dump_stack+0x15/0x1b [ 106.372026][ T5709] should_fail_ex+0x263/0x280 [ 106.372056][ T5709] should_failslab+0x8c/0xb0 [ 106.372080][ T5709] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 106.372156][ T5709] ? __alloc_skb+0x2d6/0x690 [ 106.372198][ T5709] __alloc_skb+0x2d6/0x690 [ 106.372224][ T5709] ? __alloc_skb+0x200/0x690 [ 106.372246][ T5709] netlink_alloc_large_skb+0xbf/0xf0 [ 106.372323][ T5709] netlink_sendmsg+0x40c/0x6f0 [ 106.372351][ T5709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.372412][ T5709] __sys_sendto+0x42e/0x490 [ 106.372495][ T5709] __x64_sys_sendto+0x76/0x90 [ 106.372523][ T5709] x64_sys_call+0x2d35/0x3020 [ 106.372550][ T5709] do_syscall_64+0x12c/0x370 [ 106.372594][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.372617][ T5709] RIP: 0033:0x7f98c37fcfce [ 106.372637][ T5709] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 106.372655][ T5709] RSP: 002b:00007f98c228de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 106.372684][ T5709] RAX: ffffffffffffffda RBX: 00007f98c228f6c0 RCX: 00007f98c37fcfce [ 106.372740][ T5709] RDX: 0000000000000020 RSI: 00007f98c228e000 RDI: 0000000000000004 [ 106.372756][ T5709] RBP: 0000000000000000 R08: 00007f98c228df04 R09: 000000000000000c [ 106.372771][ T5709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 106.372783][ T5709] R13: 00007f98c228df58 R14: 00007f98c228e000 R15: 0000000000000000 [ 106.372799][ T5709] [ 106.575396][ T28] audit: type=1400 audit(2000000066.110:1247): avc: denied { read } for pid=5700 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 106.657869][ T5710] Invalid option length (1047368) for dns_resolver key [ 106.808871][ T5718] FAULT_INJECTION: forcing a failure. [ 106.808871][ T5718] name failslab, interval 1, probability 0, space 0, times 0 [ 106.871780][ T5718] CPU: 0 UID: 0 PID: 5718 Comm: syz.1.630 Tainted: G W syzkaller #0 PREEMPT(full) [ 106.871892][ T5718] Tainted: [W]=WARN [ 106.871899][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.871913][ T5718] Call Trace: [ 106.871920][ T5718] [ 106.871928][ T5718] __dump_stack+0x1d/0x30 [ 106.871959][ T5718] dump_stack_lvl+0x95/0xd0 [ 106.871982][ T5718] dump_stack+0x15/0x1b [ 106.872001][ T5718] should_fail_ex+0x263/0x280 [ 106.872048][ T5718] should_failslab+0x8c/0xb0 [ 106.872069][ T5718] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 106.872089][ T5718] ? __d_alloc+0x37/0x340 [ 106.872113][ T5718] __d_alloc+0x37/0x340 [ 106.872154][ T5718] d_alloc_pseudo+0x1e/0x80 [ 106.872203][ T5718] alloc_file_pseudo+0x91/0x190 [ 106.872228][ T5718] __shmem_file_setup+0x1dd/0x210 [ 106.872391][ T5718] shmem_file_setup+0x3b/0x50 [ 106.872420][ T5718] memfd_alloc_file+0x4e/0x300 [ 106.872523][ T5718] __se_sys_memfd_create+0x2e1/0x3b0 [ 106.872635][ T5718] __x64_sys_memfd_create+0x31/0x40 [ 106.872669][ T5718] x64_sys_call+0x1f22/0x3020 [ 106.872753][ T5718] do_syscall_64+0x12c/0x370 [ 106.872858][ T5718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.872882][ T5718] RIP: 0033:0x7f5dd9efc799 [ 106.872920][ T5718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.872936][ T5718] RSP: 002b:00007f5dd894ed58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 106.873015][ T5718] RAX: ffffffffffffffda RBX: 00000000000005ef RCX: 00007f5dd9efc799 [ 106.873027][ T5718] RDX: 00007f5dd894eddc RSI: 0000000000000000 RDI: 00007f5dd9f92e79 [ 106.873039][ T5718] RBP: 00002000000002c0 R08: 00000000ffffffff R09: 0000000000000000 [ 106.873052][ T5718] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 106.873066][ T5718] R13: 00007f5dd894eddc R14: 00007f5dd894ede0 R15: 00007fff4db06498 [ 106.873087][ T5718] [ 107.223582][ T5724] loop1: detected capacity change from 0 to 4096 [ 107.283521][ T5729] syzkaller0: entered promiscuous mode [ 107.289218][ T5729] syzkaller0: entered allmulticast mode [ 107.350939][ T5735] lo speed is unknown, defaulting to 1000 [ 107.397018][ T5724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.431291][ T28] audit: type=1400 audit(2000000066.970:1248): avc: denied { map } for pid=5723 comm="syz.1.633" path="socket:[12668]" dev="sockfs" ino=12668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.470871][ T28] audit: type=1400 audit(2000000066.970:1249): avc: denied { read } for pid=5723 comm="syz.1.633" path="socket:[12668]" dev="sockfs" ino=12668 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 107.496192][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.571622][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 107.596366][ T5751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.643'. [ 107.619954][ T5751] netlink: 'syz.0.643': attribute type 11 has an invalid length. [ 107.630743][ T5751] netlink: 44 bytes leftover after parsing attributes in process `syz.0.643'. [ 107.698374][ T5757] netlink: 2 bytes leftover after parsing attributes in process `syz.3.645'. [ 107.714667][ T5764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.647'. [ 107.769264][ T5764] loop5: detected capacity change from 0 to 128 [ 107.787673][ T5762] loop1: detected capacity change from 0 to 764 [ 107.826177][ T5770] FAULT_INJECTION: forcing a failure. [ 107.826177][ T5770] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.842797][ T5770] CPU: 1 UID: 0 PID: 5770 Comm: syz.0.650 Tainted: G W syzkaller #0 PREEMPT(full) [ 107.842905][ T5770] Tainted: [W]=WARN [ 107.842966][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 107.842976][ T5770] Call Trace: [ 107.842982][ T5770] [ 107.842990][ T5770] __dump_stack+0x1d/0x30 [ 107.843018][ T5770] dump_stack_lvl+0x95/0xd0 [ 107.843085][ T5770] dump_stack+0x15/0x1b [ 107.843108][ T5770] should_fail_ex+0x263/0x280 [ 107.843132][ T5770] should_fail+0xb/0x20 [ 107.843207][ T5770] should_fail_usercopy+0x1a/0x20 [ 107.843234][ T5770] _copy_from_user+0x1c/0xb0 [ 107.843260][ T5770] do_ipv6_setsockopt+0x124/0x21d0 [ 107.843317][ T5770] ? _parse_integer+0x27/0x40 [ 107.843336][ T5770] ? kstrtoull+0x111/0x140 [ 107.843369][ T5770] ? __rcu_read_unlock+0x4e/0x70 [ 107.843390][ T5770] ? avc_has_perm_noaudit+0xab/0x130 [ 107.843480][ T5770] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 107.843507][ T5770] ipv6_setsockopt+0x59/0x130 [ 107.843541][ T5770] sctp_setsockopt+0x126/0xea0 [ 107.843561][ T5770] sock_common_setsockopt+0x69/0x80 [ 107.843658][ T5770] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.843682][ T5770] __sys_setsockopt+0x184/0x200 [ 107.843775][ T5770] __x64_sys_setsockopt+0x64/0x80 [ 107.843806][ T5770] x64_sys_call+0x2327/0x3020 [ 107.843870][ T5770] do_syscall_64+0x12c/0x370 [ 107.843963][ T5770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.844067][ T5770] RIP: 0033:0x7f864a03c799 [ 107.844085][ T5770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.844182][ T5770] RSP: 002b:00007f8648a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.844203][ T5770] RAX: ffffffffffffffda RBX: 00007f864a2b5fa0 RCX: 00007f864a03c799 [ 107.844216][ T5770] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 107.844230][ T5770] RBP: 00007f8648a8f090 R08: 0000000000000020 R09: 0000000000000000 [ 107.844272][ T5770] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 107.844286][ T5770] R13: 00007f864a2b6038 R14: 00007f864a2b5fa0 R15: 00007fff7edf9ef8 [ 107.844388][ T5770] [ 107.852093][ T5762] rock: directory entry would overflow storage [ 108.100215][ T5772] netlink: 48 bytes leftover after parsing attributes in process `syz.0.652'. [ 108.100867][ T5762] rock: sig=0x5245, size=8, remaining=5 [ 108.251932][ T5785] hub 8-0:1.0: USB hub found [ 108.256842][ T5785] hub 8-0:1.0: 8 ports detected [ 108.420419][ T5787] lo speed is unknown, defaulting to 1000 [ 108.691395][ T28] audit: type=1400 audit(2000000068.230:1250): avc: denied { mounton } for pid=5794 comm="syz.5.658" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 108.713959][ T28] audit: type=1400 audit(2000000068.230:1251): avc: denied { mount } for pid=5794 comm="syz.5.658" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 108.743232][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 108.890523][ T5806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 109.132363][ T5814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.666'. [ 109.275616][ T5818] lo speed is unknown, defaulting to 1000 [ 109.362247][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.383704][ T5818] loop0: detected capacity change from 0 to 512 [ 109.400740][ T5818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.428819][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.667: corrupted inode contents [ 109.459573][ T5818] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.459806][ T5818] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 109.477628][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 109.477656][ C0] EXT4-fs (loop0): initial error at time 2000000069: ext4_do_update_inode:5569: inode 15 [ 109.477691][ C0] EXT4-fs (loop0): last error at time 2000000069: ext4_do_update_inode:5569: inode 15 [ 109.529582][ T5818] loop0: lost filesystem error report for type 5 error -117 [ 109.529834][ T5818] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.667: corrupted inode contents [ 109.589646][ T5818] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.589812][ T5818] EXT4-fs error (device loop0): ext4_evict_inode:303: inode #15: comm syz.0.667: mark_inode_dirty error [ 109.633743][ T5818] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.633933][ T5818] EXT4-fs (loop0): 1 orphan inode deleted [ 109.668896][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.708313][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.774533][ T5826] lo speed is unknown, defaulting to 1000 [ 109.844294][ T5833] netlink: 'syz.2.673': attribute type 16 has an invalid length. [ 109.866617][ T5833] netlink: 'syz.2.673': attribute type 3 has an invalid length. [ 109.871644][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 109.899275][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.129267][ T5842] loop1: detected capacity change from 0 to 128 [ 110.878661][ T2998] ================================================================== [ 110.886802][ T2998] BUG: KCSAN: data-race in d_delete / step_into_slowpath [ 110.893870][ T2998] [ 110.896238][ T2998] read-write to 0xffff88811a41b480 of 4 bytes by task 4447 on cpu 1: [ 110.904408][ T2998] d_delete+0xbe/0xe0 [ 110.908514][ T2998] d_delete_notify+0x32/0x100 [ 110.913208][ T2998] vfs_unlink+0x289/0x490 [ 110.917746][ T2998] filename_unlinkat+0x1e2/0x410 [ 110.922798][ T2998] __se_sys_unlink+0x2b/0xe0 [ 110.927460][ T2998] __x64_sys_unlink+0x1f/0x30 [ 110.932196][ T2998] x64_sys_call+0x2eb6/0x3020 [ 110.937245][ T2998] do_syscall_64+0x12c/0x370 [ 110.941858][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.947954][ T2998] [ 110.950548][ T2998] read to 0xffff88811a41b480 of 4 bytes by task 2998 on cpu 0: [ 110.958194][ T2998] step_into_slowpath+0xea/0x4c0 [ 110.963157][ T2998] path_lookupat+0x330/0x500 [ 110.963493][ T5850] loop3: detected capacity change from 0 to 128 [ 110.974002][ T2998] filename_lookup+0x190/0x390 [ 110.974033][ T2998] do_readlinkat+0x74/0x2f0 [ 110.974061][ T2998] __x64_sys_readlink+0x47/0x60 [ 110.974084][ T2998] x64_sys_call+0x2b51/0x3020 [ 110.974110][ T2998] do_syscall_64+0x12c/0x370 [ 110.974132][ T2998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.974155][ T2998] [ 110.974159][ T2998] value changed: 0x00300180 -> 0x00004080 [ 110.974172][ T2998] [ 110.974177][ T2998] Reported by Kernel Concurrency Sanitizer on: [ 110.974190][ T2998] CPU: 0 UID: 0 PID: 2998 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 110.974228][ T2998] Tainted: [W]=WARN [ 110.974236][ T2998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.974255][ T2998] ================================================================== [ 110.984505][ T5853] loop0: detected capacity change from 0 to 128 [ 118.159663][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!