last executing test programs: 7.86372531s ago: executing program 4 (id=582): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000077b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a14000000020a010100000000000000000000000014000000110001"], 0x3c}}, 0x0) 7.523188938s ago: executing program 0 (id=589): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d28616573292900"/239], 0x13c}}, 0x0) 7.360207732s ago: executing program 0 (id=590): recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/245, 0xf5}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f0000001480)}, {&(0x7f00000005c0)=""/245, 0xf5}], 0x4, &(0x7f00000006c0)=""/201, 0xc9}, 0x26}, {{&(0x7f00000007c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/82, 0x52}, {&(0x7f0000000a80)=""/226, 0xe2}, {&(0x7f0000001380)=""/245, 0xf5}, {&(0x7f0000000c80)=""/72, 0x48}], 0x6, &(0x7f0000000d80)=""/156, 0x9c}, 0x807ff}, {{0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000001000)=""/244, 0xf4}, 0xffffff00}], 0x3, 0x40, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000004}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x64, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000001340)}, 0x105404, 0x89, 0xffff, 0x2, 0x0, 0x403}, 0x0, 0x0, r1, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RAUTH(r5, &(0x7f0000000240)={0x14}, 0x14) dup2(r2, r3) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() fcntl$setownex(r2, 0xf, &(0x7f00000001c0)={0x2, r6}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) fcntl$notify(r0, 0x402, 0x1) bind$can_j1939(r8, &(0x7f0000001480)={0x1d, r7, 0x1, {0x4}}, 0x18) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) io_uring_setup(0x32c7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x20}) close_range(r0, 0xffffffffffffffff, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0x42, 0x4, 0xaf0, 0xffffffff, 0x0, 0x990, 0x98, 0xffffffff, 0xffffffff, 0xa58, 0xa58, 0xa58, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000000, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[], 0x1}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb50) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRESOCT=r9, @ANYBLOB="000000000000000014001a80100004800c000880080001"], 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5800000013000100000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e640000001c0016801800018014000a0000eaffff"], 0x58}}, 0x0) 7.238490551s ago: executing program 4 (id=593): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffb, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000d40)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) readv(r1, &(0x7f0000003400)=[{&(0x7f0000001080)=""/107, 0x7ffff000}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x2) 6.796474028s ago: executing program 0 (id=596): semget$private(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x8}, {0x4, 0x2, 0x2800}, {0x0, 0x0, 0x1000}], 0x3, 0x0) 6.733181453s ago: executing program 0 (id=597): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@errors_remount}, {@nobh}, {@max_batch_time={'max_batch_time', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@usrquota}, {@dioread_nolock}, {@nodiscard}]}, 0x21, 0x4b0, &(0x7f0000000540)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$netlink(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0xa0029, &(0x7f0000000100)=ANY=[@ANYBLOB='nr_inodes=35,size=', @ANYRESOCT]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='.\x00', &(0x7f0000000300)='./file2\x00', 0x0, 0x1101091, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x7ffffe04, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000003c0), 0x1}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000a00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffd2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 6.190076528s ago: executing program 0 (id=603): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000077b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a14000000020a010100000000000000000000000014000000110001"], 0x3c}}, 0x0) 2.988611773s ago: executing program 4 (id=594): pipe(&(0x7f0000002900)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x92, &(0x7f0000000880)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@nobh}, {@data_err_ignore}, {@data_err_ignore, 0x22}, {@barrier}, {@errors_remount}, {@noblock_validity}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x1, 0x44e, &(0x7f0000000d80)="$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") (async) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)="76bc192c0a59b7debadf855ebdda5dce4a7ed9991823dc71e4cf02dbfadee511cc04399933a30a7f7086814f46d28e281b22bd2eeeae48db8c7ac2fbfd6ba7bfdfefddc5e5e38c3f03e421acd745f4655aa5523382ec54954b80de031630060f346ccd02d4422874d370cba232337f88102a5689ce59da29", 0xfffffd61}, {&(0x7f0000000300)="dd005389f09b9d1e54f5eb769b67ebfe125c0064bde97122f066782682964c4b6cc481b098b366d262fb484558a1a2502166016d400cce50dddde6ac25b315a840d67777bf7a5a88095f950c2639bf998ec75d3f5061aed0e548ae98f38d558d552534d9b3ead72e2e404616507de1d80293ff5f240065e0d6fb6469d1826f1bdbe342367df154d90cb83b32ff0364fdfef1089b0572c5e2fcd32d97a7186a13e35cb6f9ada8545603dcb72073af8ba9011c3ce36ce974ac58d0388dc4acb9f7e7d894e2edb75bb949a05d3e958663cbbe41d78acc5189dd9f9461466e59d6649e79c88362fbf900"/255, 0xff}], 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000600)}}], 0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000200)=ANY=[], 0x12, 0x9ef, &(0x7f0000004cc0)="$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") (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="16000000020000001d"], 0x0) (async) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) (async) r8 = socket$caif_stream(0x25, 0x1, 0x2) sendmsg$inet(r8, &(0x7f00000007c0)={&(0x7f00000003c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="8c1e858f3309153c622a86811a7e41f9421b657f19cf84bf01a9edca2128926412f2a38a9e8e6f7b4b7d", 0x2a}, {&(0x7f0000000480)="8b486f58de3a85434750c2a09981322186224d5dd3bdd250b39f0a78c47f1edd8b622bf390d051fac19587bf92a4be8678beb67722d9a4e99aeae8ceae52e90b903a8453e283ff16d3dd6c31e4100aa1582af2b085fda35e3ba3fbf2a6091b1ef9f50055381433e3f0d9d4e7350c3e8138abc5977806609fa5a1dbd11b1e056bf7ee5a6ebe76571044bd0d4dbd5cd4f5087f7624e096eb697b7b001847478e9e2e1b", 0xa2}, {&(0x7f0000000540)="eb0e169709df80513e75931d741ee7fd76b3792c5bd0e65db099f5e3f5d6f5731f707ffea24abd46dad5534e2ddc39691ead453548bbeb35e94c8868c98a793d9dc44c929733e892259e997abb7af69297494bfd6f4bbf53f558680135b0fcf4a07d5493632c0c9bc6c1f951380d882057eb8a789a22dcd9bc9deaff0791b7bda4df05306f894f93d814a6f9b7214e1e656b9c5a46107b4b6ab832c60e83bfba2e37834e2be2c8ec0801ce1aa8500dddfd1d0c41572871c25d34530c8eeef5b41c8b37968e25319f6c8ba1bb6f87dd4c83d302", 0xd3}, {&(0x7f0000000640)="baa6e2a50b4cb682eb2dd81a5b9cae01d70079496c90bcd539a4d4d47b4dc375669e0c30a923e69f242efc12bead5c424ff4f29fe8f11b3242c13f068528a2f70c745bc26d9b2c2fd406367e75c6bc2d075b6e8bc257fd887397f9a369047e27f4e9bf9eeb3c012d5933fdf4ac508c402a63e35662bb1740f53e9e9e128249a535ed4ef5f47365519f4f8c2648e0d6563fb5691379dad234ad8c77ac247f72f58b56edf45077997cdb6d50eec4767a", 0xaf}, {&(0x7f0000000700)="4848e85c2994af3d4cd7e81a6cd1b3d614f393e7f2f93cb3", 0x18}], 0x6}, 0x4) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000140)={0x0, @initdev, @remote}, &(0x7f0000000180)=0xc) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000002c0)) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x29c810fc97ab2c38, 0x200000000000000b, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) (async) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv2(r11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.853777544s ago: executing program 4 (id=623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057"], 0x13c}}, 0x0) 2.820480267s ago: executing program 4 (id=625): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d4}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty}, 0x7a) listen(r1, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x22, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d97376d54ac169fef2aca59833ac1ffc"}, @mptcp=@synack={0x1e, 0x10}, @mptcp=@ack={0x1e, 0xf, 0x0, 0x4, "bece9292e5c3372a86ed2d"}]}}}}}}}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a060400) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f00000001c0)='coredump_filter\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r5, r4, 0x0, 0x80000000) 2.723551154s ago: executing program 1 (id=628): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000000040), 0x0) creat(0x0, 0x0) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 2.722395385s ago: executing program 4 (id=629): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r1, &(0x7f0000000200)=@unspec, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, &(0x7f0000022340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '^&'}]}, 0x1000f) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe(0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x120c480, &(0x7f0000000080)={[{@jqfmt_vfsv0}, {@dioread_lock}, {@nodelalloc}, {@noload}, {@nodiscard}, {@discard}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@resgid}]}, 0x3, 0x4d6, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e03cff7ffff"], 0xffdd) open(&(0x7f0000000180)='./file0\x00', 0x200040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)="babcd125ff0c9f36bc069caa6ed32ae8a17541cbafce8dedaeb609d49e40", &(0x7f0000000300), 0x1003, r2}, 0x38) sched_setscheduler(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0xfffffffffffffea2}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8953, &(0x7f0000000280)) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000000000/0x4000)=nil) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x8}, 0xe) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) socket$inet(0x2, 0x5, 0x0) 1.931885161s ago: executing program 2 (id=635): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057"], 0x13c}}, 0x0) 1.901421412s ago: executing program 2 (id=636): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x9000000, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 1.852510067s ago: executing program 1 (id=637): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffa}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7fff}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.840040568s ago: executing program 2 (id=638): pipe2(&(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000580), 0x8}, 0x1185, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x404000, &(0x7f0000000380)=ANY=[], 0x1, 0xa45, &(0x7f0000002700)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000035000100d1d0718a41469b090400000004000000180001801400100010000b0009"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000200)=0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000280)=0x20, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(0x0, r1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000", @ANYRES16=r5, @ANYBLOB="00042abd7000fbdbdf250200000014000900fc0100000000000000000000000000000400050014000900fc00"/58], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r7, 0x3, r3, 0x5}) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r8, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r8, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r8) sync() perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0xfd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 1.834174339s ago: executing program 1 (id=639): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="0f000000", @ANYRES16=r2, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, &(0x7f0000000900), &(0x7f0000000940)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r5) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000040)={0x0, 0x0}) 1.81788684s ago: executing program 3 (id=640): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x118}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743", 0x73}, {&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48", 0x22}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9eef7c8b34e4ce506220f43af449d3a72f48d9febe830b04cb3c99425de34cac503014ce74562667d8d6888edcc42fbbb6f7", 0xa5}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2", 0x5e}, {&(0x7f0000000540)="3b645eb24aa5ebc806eab3faa6f18d93b255723549f425b3601f3cf9e6ff8c15e31d85eb95293c599d5aa08aa490d49346a247ae375960a86ff490f0535ec56bb6c173c7bfe8bf0a62", 0x49}], 0x5}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1aece", 0xe5}, {&(0x7f0000000840)="a1c3704ecc4399d294157fa2b9", 0xd}, {&(0x7f0000000880)="b45a498ea447ee604887121819ab170a8c4da8299a", 0x15}, {&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03da71c7a9a2b18fac6dde3bbf18625", 0x52}], 0x6}}], 0x4, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 1.804722271s ago: executing program 1 (id=641): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='qdisc_create\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) io_uring_setup(0x71e4, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000005c0)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a}, @routing={0x80}]}}}}}}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) msync(&(0x7f00005da000/0x3000)=nil, 0x3000, 0x2) 1.755780715s ago: executing program 0 (id=642): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001800)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0xa11f, 0x100, 0x0, 0x1}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex(&(0x7f0000000000), 0x1, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x400, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r2}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000018c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) 1.704725019s ago: executing program 3 (id=644): pipe2(&(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000580), 0x8}, 0x1185, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x404000, &(0x7f0000000380)=ANY=[], 0x1, 0xa45, &(0x7f0000002700)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000035000100d1d0718a41469b090400000004000000180001801400100010000b0009"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000200)=0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000280)=0x20, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(0x0, r1) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000", @ANYRES16=r5, @ANYBLOB="00042abd7000fbdbdf250200000014000900fc0100000000000000000000000000000400050014000900fc00"/58], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r7, 0x3, r3, 0x5}) r8 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r8, 0x0) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r8, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x1010, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0xfd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() 1.460796039s ago: executing program 3 (id=645): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000740), 0xfe, 0x449, &(0x7f00000002c0)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x1800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000980)={0x28, 0x0, &(0x7f00000009c0)=[@release={0x40046306, 0x3}, @increfs_done={0x40106308, 0x2}, @exit_looper, @decrefs={0x40046307, 0x1}], 0x0, 0x0, &(0x7f0000000880)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180004000000000014000000140000000a00000000000000010000060400000006000000004000000000000000005f5f0600"], 0x0, 0x36}, 0x20) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) statx(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x100, 0x2, &(0x7f0000000a40)) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x3}]}}]}, 0x3c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810746, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x8}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x4}}, {@data_err_ignore}, {@user_xattr}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9f}}, {@nodiscard}]}, 0xfe, 0x451, &(0x7f0000000d00)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_proto_private(r6, 0x89e1, &(0x7f0000001080)) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="a80000003800090000000000000000000100000004000000900001"], 0xa8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.110488028s ago: executing program 3 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c01000010001307000000000000000000000000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000057"], 0x13c}}, 0x0) 993.641228ms ago: executing program 3 (id=647): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tw'], 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) write$cgroup_devices(r2, &(0x7f00000012c0)=ANY=[], 0x36) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)=ANY=[@ANYBLOB="78000000130a0500000000000000000001000007630008008f640e2ff02e02cebc84098a72eeb4b29a405fc6a4eaee81408319d7fe87fb4bbd846b9286dd334bbbbf99a139d1e270557902a4ee0363f7479da9fe1ef04141ff97685e22fb267e192c376ae69170d984f7706c98fbfdc412713cb7257dddb25648f9c1784100"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000000c0)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0}, 0x90) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12105588e633bbb1df022dace17a32d211ee"}) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_OIF={0x4}]}, 0x24}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000240)) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20002, 0x60) write(r7, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000001000000000000", 0x1b) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000300)="4302ab454a84665b4c78a3574a0c6e00e39b5bc5cd7a8b6ba647b0a8b5634729a8f3a7bc54a986975ae450128afa7276178ccb3bd06cc892762be02bbbb767b1bf8e375e5a5d170349dd12da918243c9fea65be48401675770ed3a3999e99b29627ecd2e820134fe98a8e14d023cd2f020d974a497154b1f2d5021efe421892261e654f8b4ac753c3ccf207ed859f1453bf4719c105120b93ed675393618d46944169a7efdd4006f8cdfe2fa80a2d598703a5167940286d19c4736809012ede6fca26a22f1b4faa6af4fb0", &(0x7f00000004c0)=""/198, &(0x7f00000005c0)="46a211fef8d4dfc4f43a990cbe7af4889d541951c33cc51153a6a3a63f93d9502e276a5f1d30e97c6df784d20a59898f1cbbb1df64701814f913f462865dc4c1e2eb0af1a6fb80c1f61199ee179b3f92010970ebf6c7083a52b9f2d61e7ab5c676d7131d209db7dde45f9786d5ab00fbf5a7d7d5cd80bd13e01ae6972049417c5f8fb76c0ad92aff3acf55e0e8855fc8833d5dd06735ef8b83fade87196ba733d93e5301e9885f0355219a10a7cacae4eaacd0fec5425a720f056fac4ae385ff70fdc0059b2551b535c7395b05e67b69463a46c3494382", &(0x7f00000006c0)="84419a34af77cb913a7f704deea91e33aab973ee3b339ee1d3eedf71b7eaf9f74fd7c6457fa878a3aee5b42dcf80b54c6e78928b5202a196f0b681b739c829d9967b7772af772f11c9a3e6b3d867cddae1d55219ef798bd94036d839536bf27d9a7097817b1764d4c7e7fe862972a726e9093b033cc87cf809c460e3705e3e802ef7f50db9a5bf21846fe6766d2dea956ca77ef6bd618f202c3558953d673a3523e5ee7d94788ef61284bef9299191cf10a85deb8c4327a4da3cd26626", 0x3}, 0x38) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1050) 930.165313ms ago: executing program 2 (id=648): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000140)={0x2c, r1, 0x0, 0x9000000, 0x0, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}}, 0x0) 929.686973ms ago: executing program 2 (id=649): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gre={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfffa}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7fff}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 835.860551ms ago: executing program 1 (id=650): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$unix(0x1, 0x5, 0x0) pipe2(&(0x7f0000000040), 0x0) creat(0x0, 0x0) pipe2(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x0) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) 734.34472ms ago: executing program 2 (id=651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@errors_continue}, {@abort}, {@usrjquota}, {@norecovery}, {@minixdf}, {@nombcache}, {@noquota}, {@norecovery}, {@noload}, {@user_xattr}]}, 0x0, 0x476, &(0x7f0000000700)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="780000001000390400"/20, @ANYRES32=r8, @ANYBLOB="0198000000000000580012800b000100697036677265000048000280060011004e200000060003000b00000008000500f912000006000e00020000000800140003000000050017000000000006000200b200000008000d0009000000040012001834fbea888d740c309b0ce5e35ca5"], 0x78}}, 0x0) sendmmsg$inet(r5, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @local}}}], 0x20}}], 0x1, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="610301032e19d5e1ad9c"], 0xa) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 635.028507ms ago: executing program 3 (id=652): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x28, 0x33, 0x401, 0x0, 0x0, {0x1}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x28}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x1, 0x23b, &(0x7f00000005c0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) r5 = creat(&(0x7f0000002940)='./bus\x00', 0x4) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) dup3(r6, r5, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r7, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r5, &(0x7f0000000000), 0x200a00}]) fspick(0xffffffffffffffff, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in, 0x80, &(0x7f0000000680)=[{&(0x7f0000000240)}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f00000004c0)=""/72, 0x48}], 0x5, &(0x7f0000001940)=""/4096, 0x1000}, 0x103) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x57c, &(0x7f00000013c0)="$eJzs3U1rG9caAOB3xnbifNxrB0K4t4tiyKIpaaTY7kcKXaTL0oYG2n0qbMUEy1Gw5BC7gSaLZtNNCYVSGijtvvsuQ/9Af0WgDYQSTLvoxmXkkaPEki078kei54Gxz5kZ+ZxXM+/xGY2EAuhbY9mPNOL/EfF1EjHSsm0w8o1jq/stP745lS1JrKx88mcSSb6uuX+S/z6SV/4XEb9+GXE6Xd9ubXFptlSplOfzejGSa8Xa4tKZK3OlmfJM+erE5OS5tyYn3n3n7Z7F+vrFv7/7+P4H5746ufztzw+P3U3ifBzNt7XG8RxutVbGYix/Tobi/DM7jvegsf0k2esOsC0DeZ4PRTYGjMRAnvVtrYzsZteAHfZFltZAn0rkP/Sp5jygeW3fo+vgF8aj91cvgNbHP7j62kgMN66NDi8nT10ZZde7oz1oP2vjlz/u3c2W6N3rEACbunU7Is4ODq4f/5J8/Nu+s13s82wbxj/YPfez+c8b7eY/6dr8J9rMf460yd3t2Dz/04c9aKajbP73Xtv579pNq9GBvPafxpxvKLl8pVLOxrb/RsSpGDqY1Te4n/NZuvxgpdPG1vlftmTtN+eCeT8eDh58+jHTpXrpuYJu8eh2xCtt57/J2vFP2hz/7Pm42GUbJ8r3Xu20bfP4d9bKjxGvtT3+T+5oZaVifa7T/cli43woNs+K9f66c+K3Tu3vdfzZ8T+8cfyjSev92trW2/hh+J9yp23bPf8PJJ82ygfydTdK9fr8eMSB5KP16yeePLZZb+6fxX/q5MbjX7vz/1CW2F3Gf+f4ndZdh7cW/87K4p/e0vHfeuHBh59/36n97o7/m43SqXxNN+Nftx18nucOAAAAAAAA9ps0Io5GkhbWymlaKKy+v+N4HE4r1Vr99OXqwtXpaHxWdjSG0uad7pGW90OM5++HbdYnnqlPRsSxiPhm4FCjXpiqVqb3OngAAAAAAAAAAAAAAAAAAADYJ45EDLf7/H/m94G97h2w4zb4ym/gJdc5//MtvfimJ2Bfas3/g3vYD2D3mf9D/+oi/9Pd6Aew+/z/h/4l/6F/yX/oX/If+tdW8v+nCzvYEQAAAAAAAAAAAAAAAAAAAAAAAAAAAHg5XLxwIVtWlh/fnMrq09cXF2ar189Ml2uzhbmFqcJUdf5aYaZanamUC1PVuc3+XqVavTY+EQs3ivVyrV6sLS5dmqsuXK1fujJXmilfKg/tSlQAAAAAAAAAAAAAAAAAAADwYqktLs2WKpXyvILCtgqD+6MbnQppfqLvl/68MIU9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMW/AQAA//+LGzah") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 0s ago: executing program 1 (id=653): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44040000000000000000020000000000000000000077b6dd3dfda3080503e043af89bf6fe21f4b890648b58efa499a27daad7a102d5fbd89824e6cc863ba99c8", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100050000000800090000000000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000180)=""/59, 0x3b) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getdents(r3, 0x0, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r4}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r4}, 0x18) r5 = dup(r1) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x33fe0}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYBLOB="480b0000f1"], 0x20000600}}, 0x0) kernel console output (not intermixed with test programs): ng state [ 57.193799][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.232386][ T4322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.235641][ T4588] loop0: detected capacity change from 0 to 128 [ 57.242784][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.274796][ T4578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.293531][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.300650][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.314769][ T4578] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.371733][ T4588] FAULT_INJECTION: forcing a failure. [ 57.371733][ T4588] name failslab, interval 1, probability 0, space 0, times 0 [ 57.384539][ T4588] CPU: 1 UID: 0 PID: 4588 Comm: syz.0.219 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 57.394855][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 57.404910][ T4588] Call Trace: [ 57.408187][ T4588] [ 57.411130][ T4588] dump_stack_lvl+0xf2/0x150 [ 57.415734][ T4588] dump_stack+0x15/0x20 [ 57.419900][ T4588] should_fail_ex+0x229/0x230 [ 57.424627][ T4588] ? getname_flags+0x81/0x3b0 [ 57.429320][ T4588] should_failslab+0x8f/0xb0 [ 57.434022][ T4588] kmem_cache_alloc_noprof+0x4c/0x290 [ 57.439441][ T4588] ? __fget_files+0x1da/0x210 [ 57.444219][ T4588] getname_flags+0x81/0x3b0 [ 57.448744][ T4588] getname+0x17/0x20 [ 57.452643][ T4588] do_sys_openat2+0x67/0x120 [ 57.457343][ T4588] __x64_sys_creat+0x66/0x90 [ 57.461955][ T4588] x64_sys_call+0x10b4/0x2e00 [ 57.466662][ T4588] do_syscall_64+0xc9/0x1c0 [ 57.471190][ T4588] ? clear_bhb_loop+0x55/0xb0 [ 57.475906][ T4588] ? clear_bhb_loop+0x55/0xb0 [ 57.480672][ T4588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.486590][ T4588] RIP: 0033:0x7f9a30795f19 [ 57.491018][ T4588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.510904][ T4588] RSP: 002b:00007f9a2f417048 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 57.519332][ T4588] RAX: ffffffffffffffda RBX: 00007f9a30925f60 RCX: 00007f9a30795f19 [ 57.527376][ T4588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000e00 [ 57.535355][ T4588] RBP: 00007f9a2f4170a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.543420][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.551481][ T4588] R13: 000000000000000b R14: 00007f9a30925f60 R15: 00007ffe76992d68 [ 57.559470][ T4588] [ 57.565090][ T29] audit: type=1400 audit(1721744717.819:448): avc: denied { unlink } for pid=2769 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.616703][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.662142][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.729596][ T4631] loop0: detected capacity change from 0 to 1024 [ 57.777455][ T4631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.901404][ T4200] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.052827][ T4322] veth0_vlan: entered promiscuous mode [ 58.082553][ T4322] veth1_vlan: entered promiscuous mode [ 58.122388][ T4322] veth0_macvtap: entered promiscuous mode [ 58.140213][ T4322] veth1_macvtap: entered promiscuous mode [ 58.154351][ T4687] 9pnet_fd: Insufficient options for proto=fd [ 58.161399][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.171950][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.181896][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.192418][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.202288][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.212845][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.222893][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.233398][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.250715][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.269776][ T4692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 58.276039][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.289151][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.299221][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.309663][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.319769][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.330248][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.340101][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.350553][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.363119][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.384933][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.393674][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.402504][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.411389][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.510560][ T29] audit: type=1400 audit(1721744718.769:449): avc: denied { listen } for pid=4706 comm="syz.1.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.601127][ T4714] loop1: detected capacity change from 0 to 1024 [ 58.653742][ T4714] EXT4-fs: Ignoring removed oldalloc option [ 58.676941][ T4714] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 58.712378][ T4724] loop0: detected capacity change from 0 to 512 [ 58.739457][ T4724] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.236: attempt to clear invalid blocks 2 len 1 [ 58.744320][ T4714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.765205][ T4724] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 58.788654][ T4724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.236: invalid indirect mapped block 1819239214 (level 0) [ 58.803453][ T4724] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.236: invalid indirect mapped block 1819239214 (level 1) [ 58.824993][ T4724] EXT4-fs (loop0): 1 truncate cleaned up [ 58.826968][ T4735] netlink: 152 bytes leftover after parsing attributes in process `syz.2.238'. [ 58.830989][ T4724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.839776][ T4735] tc_dump_action: action bad kind [ 58.861239][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.869169][ T4724] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.236: Unrecognised inode hash code 20 [ 58.881716][ T4724] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.236: Corrupt directory, running e2fsck is recommended [ 58.884995][ T4728] loop4: detected capacity change from 0 to 8192 [ 58.908582][ T4724] EXT4-fs error (device loop0): __ext4_iget:4985: inode #12: block 2: comm syz.0.236: invalid block [ 58.944717][ T4738] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 58.954845][ T4728] loop4: p1 p2 p4 < > [ 58.956357][ T4738] bond1: (slave gre1): Error -95 calling set_mac_address [ 58.959184][ T4728] loop4: p1 size 8275718 extends beyond EOD, truncated [ 58.981082][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 58.992357][ T4728] loop4: p2 start 87291392 is beyond EOD, truncated [ 59.025919][ T4724] netlink: 44306 bytes leftover after parsing attributes in process `syz.0.236'. [ 59.026382][ T4741] 9pnet_fd: Insufficient options for proto=fd [ 59.086537][ T4200] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.150008][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.172513][ T4753] loop4: detected capacity change from 0 to 4096 [ 59.181301][ T3260] udevd[3260]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 59.220762][ T4767] FAULT_INJECTION: forcing a failure. [ 59.220762][ T4767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.233971][ T4767] CPU: 1 UID: 0 PID: 4767 Comm: syz.0.249 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 59.243217][ T4753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.244283][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.263702][ T4764] loop2: detected capacity change from 0 to 128 [ 59.266720][ T4767] Call Trace: [ 59.276375][ T4767] [ 59.279318][ T4767] dump_stack_lvl+0xf2/0x150 [ 59.279390][ T4770] loop3: detected capacity change from 0 to 512 [ 59.283922][ T4767] dump_stack+0x15/0x20 [ 59.294319][ T4767] should_fail_ex+0x229/0x230 [ 59.299096][ T4767] should_fail+0xb/0x10 [ 59.303301][ T4767] should_fail_usercopy+0x1a/0x20 [ 59.308422][ T4767] _copy_from_user+0x1e/0xd0 [ 59.313032][ T4767] sctp_getsockopt_peer_addr_params+0xa7/0x7d0 [ 59.319418][ T4767] sctp_getsockopt+0x964/0xab0 [ 59.324199][ T4767] sock_common_getsockopt+0x5b/0x70 [ 59.329409][ T4767] do_sock_getsockopt+0x121/0x1a0 [ 59.334475][ T4767] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 59.340405][ T4767] __sys_getsockopt+0x19a/0x210 [ 59.345276][ T4767] __x64_sys_getsockopt+0x66/0x80 [ 59.350383][ T4767] x64_sys_call+0x128f/0x2e00 [ 59.355089][ T4767] do_syscall_64+0xc9/0x1c0 [ 59.359587][ T4767] ? clear_bhb_loop+0x55/0xb0 [ 59.364412][ T4767] ? clear_bhb_loop+0x55/0xb0 [ 59.369090][ T4767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.375074][ T4767] RIP: 0033:0x7f9a30795f19 [ 59.379510][ T4767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.399119][ T4767] RSP: 002b:00007f9a2f417048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 59.407559][ T4767] RAX: ffffffffffffffda RBX: 00007f9a30925f60 RCX: 00007f9a30795f19 [ 59.415534][ T4767] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 59.423586][ T4767] RBP: 00007f9a2f4170a0 R08: 00000000200003c0 R09: 0000000000000000 [ 59.431555][ T4767] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 59.439579][ T4767] R13: 000000000000000b R14: 00007f9a30925f60 R15: 00007ffe76992d68 [ 59.447673][ T4767] [ 59.485752][ T4770] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.521655][ T4770] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.543831][ T4322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.546264][ T4782] FAULT_INJECTION: forcing a failure. [ 59.546264][ T4782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.566275][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.1.254 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 59.576542][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 59.586605][ T4782] Call Trace: [ 59.589963][ T4782] [ 59.592924][ T4782] dump_stack_lvl+0xf2/0x150 [ 59.597538][ T4782] dump_stack+0x15/0x20 [ 59.601754][ T4782] should_fail_ex+0x229/0x230 [ 59.606469][ T4782] should_fail+0xb/0x10 [ 59.610649][ T4782] should_fail_usercopy+0x1a/0x20 [ 59.615715][ T4782] _copy_from_user+0x1e/0xd0 [ 59.620341][ T4782] copy_msghdr_from_user+0x54/0x2a0 [ 59.625654][ T4782] __sys_sendmmsg+0x22a/0x500 [ 59.630476][ T4782] __x64_sys_sendmmsg+0x57/0x70 [ 59.635424][ T4782] x64_sys_call+0x2b4e/0x2e00 [ 59.640124][ T4782] do_syscall_64+0xc9/0x1c0 [ 59.644655][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 59.649493][ T4782] ? clear_bhb_loop+0x55/0xb0 [ 59.654189][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.660168][ T4782] RIP: 0033:0x7fde11d55f19 [ 59.664695][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.684393][ T4782] RSP: 002b:00007fde109d7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 59.692805][ T4782] RAX: ffffffffffffffda RBX: 00007fde11ee5f60 RCX: 00007fde11d55f19 [ 59.700821][ T4782] RDX: 0000000000000001 RSI: 0000000020000d00 RDI: 0000000000000004 [ 59.708790][ T4782] RBP: 00007fde109d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 59.716751][ T4782] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 59.724723][ T4782] R13: 000000000000000b R14: 00007fde11ee5f60 R15: 00007fff09b5a708 [ 59.732699][ T4782] [ 59.784023][ T4787] loop2: detected capacity change from 0 to 164 [ 59.826899][ T4791] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 59.865195][ T4784] loop4: detected capacity change from 0 to 8192 [ 59.897147][ T4784] loop4: p1 p2 p4 < > [ 59.901285][ T4784] loop4: p1 size 8275718 extends beyond EOD, truncated [ 59.913296][ T4784] loop4: p2 start 87291392 is beyond EOD, truncated [ 59.923569][ T4797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.257'. [ 59.932610][ T4799] tipc: Started in network mode [ 59.937733][ T4799] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 59.970815][ T4799] tipc: Enabled bearer , priority 10 [ 59.981966][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 59.982215][ T3260] udevd[3260]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 60.067789][ T3260] udevd[3260]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 60.075728][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 60.099997][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.148854][ T4817] loop1: detected capacity change from 0 to 512 [ 60.203169][ T4817] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 60.265546][ T4835] team0: Port device team_slave_0 removed [ 60.320638][ T4841] Cannot find add_set index 0 as target [ 60.338639][ T4841] Cannot find add_set index 0 as target [ 60.357107][ T4841] Cannot find add_set index 0 as target [ 60.371139][ T4841] Cannot find add_set index 0 as target [ 60.381423][ T4852] loop1: detected capacity change from 0 to 128 [ 60.397019][ T4840] loop2: detected capacity change from 0 to 512 [ 60.407625][ T4841] Cannot find add_set index 0 as target [ 60.418066][ T4841] Cannot find add_set index 0 as target [ 60.434182][ T4840] EXT4-fs: Ignoring removed bh option [ 60.444912][ T4841] Cannot find add_set index 0 as target [ 60.454301][ T4841] Cannot find add_set index 0 as target [ 60.465425][ T4841] Cannot find add_set index 0 as target [ 60.473432][ T4841] Cannot find add_set index 0 as target [ 60.488322][ T4840] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.264: invalid block [ 60.543809][ T4840] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.264: couldn't read orphan inode 15 (err -117) [ 60.588224][ T4840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.620441][ T4858] loop3: detected capacity change from 0 to 512 [ 60.666665][ T4858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.680485][ T4858] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.681036][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.732474][ T4867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 60.758762][ T4867] tipc: Enabling of bearer rejected, failed to enable media [ 60.942585][ T4878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 61.000241][ T4884] tap0: tun_chr_ioctl cmd 1074025677 [ 61.006062][ T4884] tap0: linktype set to 270 [ 61.077676][ T4886] loop2: detected capacity change from 0 to 512 [ 61.084902][ T3161] tipc: Node number set to 4269801490 [ 61.097558][ T4886] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.180821][ T4893] loop0: detected capacity change from 0 to 512 [ 61.199226][ T4893] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.211348][ T4893] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 61.257820][ T4901] loop0: detected capacity change from 0 to 512 [ 61.363239][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 61.380434][ T4912] loop1: detected capacity change from 0 to 512 [ 61.391724][ T4912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.404814][ T4912] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.417562][ T4912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002] [ 61.426566][ T4917] FAULT_INJECTION: forcing a failure. [ 61.426566][ T4917] name failslab, interval 1, probability 0, space 0, times 0 [ 61.435478][ T4912] System zones: 1-12 [ 61.439195][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: syz.0.282 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 61.453306][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.453329][ T4917] Call Trace: [ 61.463619][ T4912] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.466653][ T4917] [ 61.466663][ T4917] dump_stack_lvl+0xf2/0x150 [ 61.487181][ T4917] dump_stack+0x15/0x20 [ 61.491428][ T4917] should_fail_ex+0x229/0x230 [ 61.493414][ T4912] EXT4-fs (loop1): 1 truncate cleaned up [ 61.496128][ T4917] ? locks_get_lock_context+0x87/0x220 [ 61.496168][ T4917] should_failslab+0x8f/0xb0 [ 61.496205][ T4917] kmem_cache_alloc_noprof+0x4c/0x290 [ 61.517289][ T4917] locks_get_lock_context+0x87/0x220 [ 61.522676][ T4917] generic_setlease+0x257/0x1120 [ 61.522742][ T4919] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 61.528194][ T4919] tap0: tun_chr_ioctl cmd 1074025677 [ 61.536671][ T4917] ? srcu_notifier_call_chain+0x203/0x230 [ 61.544143][ T4919] tap0: linktype set to 270 [ 61.547701][ T4917] vfs_setlease+0x200/0x220 [ 61.547738][ T4917] fcntl_setlease+0x260/0x300 [ 61.561506][ T4917] do_fcntl+0x442/0xe20 [ 61.565724][ T4917] ? selinux_file_fcntl+0x1b4/0x1e0 [ 61.570951][ T4917] __se_sys_fcntl+0xc4/0x190 [ 61.575595][ T4917] __x64_sys_fcntl+0x43/0x50 [ 61.580834][ T4917] x64_sys_call+0x1ec7/0x2e00 [ 61.585665][ T4917] do_syscall_64+0xc9/0x1c0 [ 61.590226][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 61.594921][ T4917] ? clear_bhb_loop+0x55/0xb0 [ 61.599683][ T4917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.605603][ T4917] RIP: 0033:0x7f9a30795f19 [ 61.610079][ T4917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.629835][ T4917] RSP: 002b:00007f9a2f417048 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 61.638307][ T4917] RAX: ffffffffffffffda RBX: 00007f9a30925f60 RCX: 00007f9a30795f19 [ 61.646302][ T4917] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000006 [ 61.654277][ T4917] RBP: 00007f9a2f4170a0 R08: 0000000000000000 R09: 0000000000000000 [ 61.662250][ T4917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.670294][ T4917] R13: 000000000000000b R14: 00007f9a30925f60 R15: 00007ffe76992d68 [ 61.678274][ T4917] [ 61.703962][ T4925] loop0: detected capacity change from 0 to 512 [ 61.718818][ T4925] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.779321][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 61.779337][ T29] audit: type=1400 audit(1721744722.039:471): avc: denied { setopt } for pid=4932 comm="syz.0.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.831340][ T4927] loop3: detected capacity change from 0 to 8192 [ 61.847920][ T29] audit: type=1400 audit(1721744722.109:472): avc: denied { create } for pid=4941 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.869483][ T29] audit: type=1400 audit(1721744722.129:473): avc: denied { read write } for pid=4941 comm="syz.4.289" name="uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.870951][ T4942] UHID_CREATE from different security context by process 24 (syz.4.289), this is not allowed. [ 61.894095][ T4936] FAULT_INJECTION: forcing a failure. [ 61.894095][ T4936] name failslab, interval 1, probability 0, space 0, times 0 [ 61.915809][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: syz.2.287 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 61.917578][ T4927] loop3: p1 p2 p4 < > [ 61.926118][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 61.926135][ T4936] Call Trace: [ 61.926144][ T4936] [ 61.926152][ T4936] dump_stack_lvl+0xf2/0x150 [ 61.926180][ T4936] dump_stack+0x15/0x20 [ 61.926203][ T4936] should_fail_ex+0x229/0x230 [ 61.931516][ T4927] loop3: p1 size 8275718 extends beyond EOD, [ 61.940359][ T4936] ? usb_control_msg+0x59/0x240 [ 61.943683][ T4927] truncated [ 61.946586][ T4936] should_failslab+0x8f/0xb0 [ 61.951767][ T4927] loop3: p2 start 87291392 is beyond EOD, [ 61.955345][ T4936] __kmalloc_cache_noprof+0x4b/0x2a0 [ 61.960022][ T4927] truncated [ 61.993085][ T4936] usb_control_msg+0x59/0x240 [ 61.997870][ T4936] hub_ext_port_status+0xbf/0x480 [ 62.003040][ T4936] hub_activate+0x4c8/0xf30 [ 62.007574][ T4936] hub_resume+0x48/0x1e0 [ 62.011857][ T4936] usb_resume_both+0x3ed/0x5b0 [ 62.016643][ T4936] ? __pfx_usb_runtime_resume+0x10/0x10 [ 62.022354][ T4936] usb_runtime_resume+0x21/0x30 [ 62.027245][ T4936] __rpm_callback+0x299/0x720 [ 62.031941][ T4936] ? __pfx_usb_runtime_resume+0x10/0x10 [ 62.037560][ T4936] rpm_resume+0x8e6/0xd00 [ 62.041907][ T4936] ? klist_dec_and_del+0xb7/0x270 [ 62.046974][ T4936] __pm_runtime_resume+0xdc/0x100 [ 62.052016][ T4936] usb_autoresume_device+0x25/0xd0 [ 62.057222][ T4936] usbdev_open+0xfe/0x480 [ 62.061567][ T4936] ? selinux_file_open+0x34c/0x3b0 [ 62.066693][ T4936] chrdev_open+0x323/0x3a0 [ 62.071124][ T4936] ? __pfx_chrdev_open+0x10/0x10 [ 62.076079][ T4936] do_dentry_open+0x647/0xa50 [ 62.080783][ T4936] vfs_open+0x3b/0x1f0 [ 62.084925][ T4936] path_openat+0x1a26/0x1f10 [ 62.089563][ T4936] do_filp_open+0xf7/0x200 [ 62.094143][ T4936] do_sys_openat2+0xab/0x120 [ 62.098753][ T4936] __x64_sys_openat+0xf3/0x120 [ 62.103665][ T4936] x64_sys_call+0x1ac/0x2e00 [ 62.108309][ T4936] do_syscall_64+0xc9/0x1c0 [ 62.112823][ T4936] ? clear_bhb_loop+0x55/0xb0 [ 62.117510][ T4936] ? clear_bhb_loop+0x55/0xb0 [ 62.122253][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.128167][ T4936] RIP: 0033:0x7f21d9284950 [ 62.132582][ T4936] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 62.152324][ T4936] RSP: 002b:00007f21d7f06b80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 62.160799][ T4936] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21d9284950 [ 62.168776][ T4936] RDX: 0000000000000000 RSI: 00007f21d7f06c20 RDI: 00000000ffffff9c [ 62.176808][ T4936] RBP: 00007f21d7f06c20 R08: 0000000000000000 R09: 0000000000000000 [ 62.184785][ T4936] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 62.192758][ T4936] R13: 000000000000000b R14: 00007f21d9415f60 R15: 00007ffe1a01c038 [ 62.200843][ T4936] [ 62.203942][ T4936] hub 1-0:1.0: hub_ext_port_status failed (err = -12) [ 62.208242][ T29] audit: type=1400 audit(1721744722.129:474): avc: denied { open } for pid=4941 comm="syz.4.289" path="/dev/uhid" dev="devtmpfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 62.233903][ T29] audit: type=1400 audit(1721744722.129:475): avc: denied { getopt } for pid=4941 comm="syz.4.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.269221][ T2787] loop3: p1 p2 p4 < > [ 62.273439][ T2787] loop3: p1 size 8275718 extends beyond EOD, truncated [ 62.287869][ T2787] loop3: p2 start 87291392 is beyond EOD, truncated [ 62.328833][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.338973][ T4952] netlink: 76 bytes leftover after parsing attributes in process `syz.2.294'. [ 62.349704][ T4954] loop1: detected capacity change from 0 to 2048 [ 62.389614][ T29] audit: type=1400 audit(1721744722.649:476): avc: denied { ioctl } for pid=4956 comm="syz.3.293" path="socket:[10032]" dev="sockfs" ino=10032 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.393095][ T2787] loop1: p1 < > p3 [ 62.414961][ T29] audit: type=1400 audit(1721744722.649:477): avc: denied { getopt } for pid=4956 comm="syz.3.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 62.440369][ T2787] loop1: p3 size 134217728 extends beyond EOD, truncated [ 62.450077][ T29] audit: type=1400 audit(1721744722.719:478): avc: denied { sqpoll } for pid=4969 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.479964][ T4975] loop0: detected capacity change from 0 to 128 [ 62.500112][ T2787] loop1: p1 < > p3 [ 62.504504][ T2787] loop1: p3 size 134217728 extends beyond EOD, truncated [ 62.514188][ T4954] loop1: p1 < > p3 [ 62.518893][ T4954] loop1: p3 size 134217728 extends beyond EOD, truncated [ 62.520868][ T4980] loop4: detected capacity change from 0 to 1024 [ 62.542846][ T4981] capability: warning: `syz.2.301' uses deprecated v2 capabilities in a way that may be insecure [ 62.544511][ T29] audit: type=1400 audit(1721744722.799:479): avc: denied { read write } for pid=4953 comm="syz.1.295" name="loop1p3" dev="devtmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.554721][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 62.576442][ T29] audit: type=1400 audit(1721744722.799:480): avc: denied { open } for pid=4953 comm="syz.1.295" path="/dev/loop1p3" dev="devtmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.612522][ T4980] EXT4-fs: Ignoring removed orlov option [ 62.618331][ T4980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.663200][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 62.667820][ T3072] udevd[3072]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 62.835697][ T5005] loop2: detected capacity change from 0 to 4096 [ 62.840699][ T4200] cgroup: fork rejected by pids controller in /syz0 [ 62.904124][ T5013] usb usb8: usbfs: process 5013 (syz.2.313) did not claim interface 0 before use [ 62.913815][ T5013] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 63.007189][ T5020] hub 6-0:1.0: USB hub found [ 63.017012][ T5020] hub 6-0:1.0: 8 ports detected [ 63.030132][ T5022] netlink: 277 bytes leftover after parsing attributes in process `syz.1.314'. [ 63.125271][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.209411][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.282965][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.328813][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.396314][ T5049] loop4: detected capacity change from 0 to 512 [ 63.436897][ T5052] loop3: detected capacity change from 0 to 512 [ 63.456968][ T5049] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.468833][ T5052] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.489542][ T55] bridge_slave_1: left allmulticast mode [ 63.495288][ T55] bridge_slave_1: left promiscuous mode [ 63.500995][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.516526][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.533949][ T5061] loop4: detected capacity change from 0 to 512 [ 63.556743][ T5061] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.621858][ T5064] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.325: Directory hole found for htree leaf block 0 [ 63.638721][ T5064] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.325: Directory hole found for htree leaf block 0 [ 63.654668][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.665476][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.675997][ T55] bond0 (unregistering): Released all slaves [ 63.711083][ T5027] chnl_net:caif_netlink_parms(): no params data found [ 63.733526][ T5068] loop4: detected capacity change from 0 to 1024 [ 63.762696][ T55] hsr_slave_0: left promiscuous mode [ 63.784194][ T55] hsr_slave_1: left promiscuous mode [ 63.791955][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.799610][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.808062][ T5079] loop1: detected capacity change from 0 to 128 [ 63.819415][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.827077][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.837739][ T55] batman_adv: batadv0: Removing interface: ipvlan2 [ 63.845584][ T5079] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.880504][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'. [ 63.889668][ T55] veth1_macvtap: left promiscuous mode [ 63.892759][ T5079] FAULT_INJECTION: forcing a failure. [ 63.892759][ T5079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.895166][ T55] veth0_macvtap: left promiscuous mode [ 63.895232][ T55] veth1_vlan: left promiscuous mode [ 63.895255][ T55] veth0_vlan: left promiscuous mode [ 63.925068][ T5079] CPU: 0 UID: 0 PID: 5079 Comm: syz.1.327 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 63.935335][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 63.945404][ T5079] Call Trace: [ 63.948699][ T5079] [ 63.951643][ T5079] dump_stack_lvl+0xf2/0x150 [ 63.956289][ T5079] dump_stack+0x15/0x20 [ 63.960558][ T5079] should_fail_ex+0x229/0x230 [ 63.965279][ T5079] should_fail+0xb/0x10 [ 63.969458][ T5079] should_fail_usercopy+0x1a/0x20 [ 63.974499][ T5079] _copy_to_user+0x1e/0xa0 [ 63.979025][ T5079] simple_read_from_buffer+0xa0/0x110 [ 63.984441][ T5079] proc_fail_nth_read+0xfc/0x140 [ 63.989474][ T5079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.995099][ T5079] vfs_read+0x1a2/0x6e0 [ 63.999273][ T5079] ? __rcu_read_unlock+0x4e/0x70 [ 64.004219][ T5079] ? __fget_files+0x1da/0x210 [ 64.008903][ T5079] ksys_read+0xeb/0x1b0 [ 64.013145][ T5079] __x64_sys_read+0x42/0x50 [ 64.017669][ T5079] x64_sys_call+0x2a36/0x2e00 [ 64.022379][ T5079] do_syscall_64+0xc9/0x1c0 [ 64.026885][ T5079] ? clear_bhb_loop+0x55/0xb0 [ 64.031565][ T5079] ? clear_bhb_loop+0x55/0xb0 [ 64.036312][ T5079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.042264][ T5079] RIP: 0033:0x7fde11d549fc [ 64.046741][ T5079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 64.066427][ T5079] RSP: 002b:00007fde109d7040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.074844][ T5079] RAX: ffffffffffffffda RBX: 00007fde11ee5f60 RCX: 00007fde11d549fc [ 64.082875][ T5079] RDX: 000000000000000f RSI: 00007fde109d70b0 RDI: 0000000000000004 [ 64.090918][ T5079] RBP: 00007fde109d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 64.098950][ T5079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.106939][ T5079] R13: 000000000000000b R14: 00007fde11ee5f60 R15: 00007fff09b5a708 [ 64.114914][ T5079] [ 64.254799][ T5103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.330'. [ 64.264095][ T55] team0 (unregistering): Port device team_slave_1 removed [ 64.281426][ T55] team0 (unregistering): Port device team_slave_0 removed [ 64.334379][ T5116] loop2: detected capacity change from 0 to 512 [ 64.347869][ T5116] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.383269][ T5097] tap0: tun_chr_ioctl cmd 1074025677 [ 64.389462][ T5097] tap0: linktype set to 270 [ 64.400134][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.407243][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.414645][ T5027] bridge_slave_0: entered allmulticast mode [ 64.421394][ T5027] bridge_slave_0: entered promiscuous mode [ 64.429913][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.430014][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.431776][ T5027] bridge_slave_1: entered allmulticast mode [ 64.452361][ T5027] bridge_slave_1: entered promiscuous mode [ 64.508778][ T5027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.557375][ T5027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.592403][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 64.617106][ T5027] team0: Port device team_slave_0 added [ 64.623989][ T5152] loop2: detected capacity change from 0 to 128 [ 64.631128][ T5147] tipc: Enabling of bearer rejected, failed to enable media [ 64.650612][ T5027] team0: Port device team_slave_1 added [ 64.659835][ T5152] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.726641][ T5027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.733607][ T5027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.759566][ T5027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.772988][ T5162] FAULT_INJECTION: forcing a failure. [ 64.772988][ T5162] name failslab, interval 1, probability 0, space 0, times 0 [ 64.785730][ T5162] CPU: 0 UID: 0 PID: 5162 Comm: syz.1.344 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 64.796001][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 64.806067][ T5162] Call Trace: [ 64.809414][ T5162] [ 64.812400][ T5162] dump_stack_lvl+0xf2/0x150 [ 64.817010][ T5162] dump_stack+0x15/0x20 [ 64.821194][ T5162] should_fail_ex+0x229/0x230 [ 64.825908][ T5162] ? qdisc_alloc+0x5f/0x440 [ 64.830447][ T5162] should_failslab+0x8f/0xb0 [ 64.835059][ T5162] __kmalloc_node_noprof+0xa8/0x380 [ 64.840299][ T5162] qdisc_alloc+0x5f/0x440 [ 64.844642][ T5162] ? taprio_init+0x1e4/0x610 [ 64.849293][ T5162] qdisc_create_dflt+0x4c/0x280 [ 64.854153][ T5162] taprio_init+0x29e/0x610 [ 64.858606][ T5162] ? __pfx_taprio_init+0x10/0x10 [ 64.863563][ T5162] qdisc_create+0x6c1/0xae0 [ 64.868130][ T5162] ? __nla_parse+0x40/0x60 [ 64.872670][ T5162] tc_modify_qdisc+0x65f/0x1050 [ 64.877623][ T5162] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 64.883090][ T5162] rtnetlink_rcv_msg+0x6aa/0x710 [ 64.888101][ T5162] ? ref_tracker_free+0x3a5/0x410 [ 64.893152][ T5162] ? __dev_queue_xmit+0x161/0x1fe0 [ 64.898348][ T5162] netlink_rcv_skb+0x12c/0x230 [ 64.903156][ T5162] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 64.908667][ T5162] rtnetlink_rcv+0x1c/0x30 [ 64.913131][ T5162] netlink_unicast+0x593/0x670 [ 64.917916][ T5162] netlink_sendmsg+0x5cc/0x6e0 [ 64.922691][ T5162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.927982][ T5162] __sock_sendmsg+0x140/0x180 [ 64.932674][ T5162] ____sys_sendmsg+0x312/0x410 [ 64.937464][ T5162] __sys_sendmsg+0x1e9/0x280 [ 64.942158][ T5162] __x64_sys_sendmsg+0x46/0x50 [ 64.947005][ T5162] x64_sys_call+0x26f8/0x2e00 [ 64.951705][ T5162] do_syscall_64+0xc9/0x1c0 [ 64.956222][ T5162] ? clear_bhb_loop+0x55/0xb0 [ 64.960956][ T5162] ? clear_bhb_loop+0x55/0xb0 [ 64.965673][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.971583][ T5162] RIP: 0033:0x7fde11d55f19 [ 64.975997][ T5162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.995628][ T5162] RSP: 002b:00007fde109d7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.004046][ T5162] RAX: ffffffffffffffda RBX: 00007fde11ee5f60 RCX: 00007fde11d55f19 [ 65.012090][ T5162] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 65.020063][ T5162] RBP: 00007fde109d70a0 R08: 0000000000000000 R09: 0000000000000000 [ 65.028100][ T5162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.036115][ T5162] R13: 000000000000000b R14: 00007fde11ee5f60 R15: 00007fff09b5a708 [ 65.044142][ T5162] [ 65.060991][ T5166] loop3: detected capacity change from 0 to 512 [ 65.071595][ T5027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.078643][ T5027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.104622][ T5027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.142894][ T5174] loop4: detected capacity change from 0 to 128 [ 65.178521][ T5166] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.211608][ T5027] hsr_slave_0: entered promiscuous mode [ 65.244797][ T5027] hsr_slave_1: entered promiscuous mode [ 65.254020][ T5027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.275782][ T5194] loop2: detected capacity change from 0 to 512 [ 65.290603][ T5027] Cannot create hsr debugfs directory [ 65.490685][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz.3.354'. [ 65.512158][ T5216] netlink: 76 bytes leftover after parsing attributes in process `syz.2.357'. [ 65.554627][ T5217] loop3: detected capacity change from 0 to 256 [ 65.605857][ T5220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.356'. [ 65.632748][ T5217] FAT-fs (loop3): Directory bread(block 64) failed [ 65.639397][ T5217] FAT-fs (loop3): Directory bread(block 65) failed [ 65.645971][ T5217] FAT-fs (loop3): Directory bread(block 66) failed [ 65.652551][ T5217] FAT-fs (loop3): Directory bread(block 67) failed [ 65.659098][ T5217] FAT-fs (loop3): Directory bread(block 68) failed [ 65.665669][ T5217] FAT-fs (loop3): Directory bread(block 69) failed [ 65.672248][ T5217] FAT-fs (loop3): Directory bread(block 70) failed [ 65.678882][ T5217] FAT-fs (loop3): Directory bread(block 71) failed [ 65.685437][ T5217] FAT-fs (loop3): Directory bread(block 72) failed [ 65.691965][ T5217] FAT-fs (loop3): Directory bread(block 73) failed [ 65.714688][ T5217] syz.3.354: attempt to access beyond end of device [ 65.714688][ T5217] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 65.751511][ T5217] syz.3.354: attempt to access beyond end of device [ 65.751511][ T5217] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 65.764667][ T5217] Buffer I/O error on dev loop3, logical block 442, async page read [ 66.011231][ T5245] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 66.028948][ T5027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.051091][ T5027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.062997][ T5027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.078030][ T5027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.120628][ T5027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.137959][ T5027] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.147929][ T3163] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.155074][ T3163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.176089][ T3163] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.183234][ T3163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.205257][ T5268] netlink: 76 bytes leftover after parsing attributes in process `syz.4.362'. [ 66.215283][ T5027] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.330493][ T5027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.397275][ T5295] loop3: detected capacity change from 0 to 512 [ 66.434945][ T5295] EXT4-fs mount: 29 callbacks suppressed [ 66.434962][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.441583][ T5027] veth0_vlan: entered promiscuous mode [ 66.462515][ T5027] veth1_vlan: entered promiscuous mode [ 66.468719][ T5295] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.485476][ T5027] veth0_macvtap: entered promiscuous mode [ 66.493079][ T5027] veth1_macvtap: entered promiscuous mode [ 66.516496][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.527064][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.537093][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.547609][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.557632][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.568158][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.578177][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.588724][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.603821][ T5027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.615199][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.625860][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.635759][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.646199][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.656114][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.666679][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.676653][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.687187][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.699962][ T5027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.711678][ T5027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.720468][ T5027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.729264][ T5027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.738129][ T5027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.822852][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 66.822923][ T29] audit: type=1400 audit(1721744727.079:507): avc: denied { listen } for pid=5337 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.855002][ T29] audit: type=1400 audit(1721744727.079:508): avc: denied { accept } for pid=5337 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.887363][ T29] audit: type=1400 audit(1721744727.149:509): avc: denied { setopt } for pid=5337 comm="syz.0.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.183131][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.207916][ T5376] loop3: detected capacity change from 0 to 128 [ 67.289390][ T5382] loop1: detected capacity change from 0 to 512 [ 67.300980][ T5382] EXT4-fs (loop1): 1 truncate cleaned up [ 67.310424][ T5382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.324277][ T5382] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.374: Directory hole found for htree leaf block 0 [ 67.339732][ T5382] EXT4-fs (loop1): Remounting filesystem read-only [ 67.375589][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.438751][ T29] audit: type=1400 audit(1721744727.699:510): avc: denied { connect } for pid=5384 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.540564][ T5406] loop1: detected capacity change from 0 to 512 [ 67.670191][ T5415] loop0: detected capacity change from 0 to 512 [ 67.685948][ T5417] loop1: detected capacity change from 0 to 128 [ 67.697936][ T5417] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.701023][ T5415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.705861][ T5417] FAT-fs (loop1): Filesystem has been set read-only [ 67.725358][ T5417] syz.1.382: attempt to access beyond end of device [ 67.725358][ T5417] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 67.726299][ T5415] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.738961][ T5417] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.756900][ T5417] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 67.774469][ T5417] syz.1.382: attempt to access beyond end of device [ 67.774469][ T5417] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.782038][ T29] audit: type=1400 audit(1721744728.039:511): avc: denied { read } for pid=5420 comm="syz.2.383" dev="sockfs" ino=12391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 67.788757][ T5417] syz.1.382: attempt to access beyond end of device [ 67.788757][ T5417] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 67.847457][ T5423] usb usb8: usbfs: process 5423 (syz.2.384) did not claim interface 0 before use [ 67.858031][ T5423] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 67.940169][ T5429] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 67.948227][ T29] audit: type=1400 audit(1721744728.199:512): avc: denied { write } for pid=5428 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 67.962061][ T5431] loop1: detected capacity change from 0 to 512 [ 67.977099][ T5431] EXT4-fs: Ignoring removed i_version option [ 67.983551][ T5431] EXT4-fs: Ignoring removed nobh option [ 67.995271][ T5431] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.006706][ T5431] EXT4-fs (loop1): 1 truncate cleaned up [ 68.018875][ T5431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.034101][ T5431] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.070081][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.086576][ T29] audit: type=1400 audit(1721744728.339:513): avc: denied { unmount } for pid=3808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.129951][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.190820][ T5453] loop1: detected capacity change from 0 to 128 [ 68.222203][ T29] audit: type=1400 audit(1721744728.479:514): avc: denied { module_load } for pid=5452 comm="syz.1.397" path="/63/file0/bus" dev="loop1" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 68.253788][ T5453] syz.1.397: attempt to access beyond end of device [ 68.253788][ T5453] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 68.276768][ T5453] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 68.409248][ T5471] loop1: detected capacity change from 0 to 128 [ 68.425315][ T5473] FAULT_INJECTION: forcing a failure. [ 68.425315][ T5473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.438739][ T5473] CPU: 0 UID: 0 PID: 5473 Comm: syz.3.405 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 68.449063][ T5473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.459138][ T5473] Call Trace: [ 68.462429][ T5473] [ 68.465372][ T5473] dump_stack_lvl+0xf2/0x150 [ 68.470017][ T5473] dump_stack+0x15/0x20 [ 68.474233][ T5473] should_fail_ex+0x229/0x230 [ 68.478924][ T5473] should_fail+0xb/0x10 [ 68.483271][ T5473] should_fail_usercopy+0x1a/0x20 [ 68.488329][ T5473] _copy_from_iter+0xd3/0xb00 [ 68.493035][ T5473] ? avc_has_perm+0xd4/0x160 [ 68.497644][ T5473] ? selinux_socket_sendmsg+0x182/0x1b0 [ 68.503233][ T5473] bcm_sendmsg+0xca/0x470 [ 68.507650][ T5473] ? __pfx_bcm_sendmsg+0x10/0x10 [ 68.512625][ T5473] __sock_sendmsg+0x140/0x180 [ 68.517324][ T5473] sock_write_iter+0x164/0x1b0 [ 68.522151][ T5473] aio_write+0x309/0x430 [ 68.526431][ T5473] io_submit_one+0xb18/0x1240 [ 68.531146][ T5473] __se_sys_io_submit+0xf5/0x280 [ 68.536172][ T5473] __x64_sys_io_submit+0x43/0x50 [ 68.541247][ T5473] x64_sys_call+0xa8b/0x2e00 [ 68.545933][ T5473] do_syscall_64+0xc9/0x1c0 [ 68.550446][ T5473] ? clear_bhb_loop+0x55/0xb0 [ 68.555136][ T5473] ? clear_bhb_loop+0x55/0xb0 [ 68.559881][ T5473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.565832][ T5473] RIP: 0033:0x7f59b8a75f19 [ 68.570255][ T5473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.589945][ T5473] RSP: 002b:00007f59b76f7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 68.598527][ T5473] RAX: ffffffffffffffda RBX: 00007f59b8c05f60 RCX: 00007f59b8a75f19 [ 68.606529][ T5473] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 00007f59b973e000 [ 68.614525][ T5473] RBP: 00007f59b76f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.622516][ T5473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.630567][ T5473] R13: 000000000000000b R14: 00007f59b8c05f60 R15: 00007ffefc3cbf48 [ 68.638554][ T5473] [ 68.647463][ T29] audit: type=1400 audit(1721744728.859:515): avc: denied { ioctl } for pid=5474 comm="syz.4.406" path="/dev/usbmon7" dev="devtmpfs" ino=138 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.656494][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.769888][ T5485] loop4: detected capacity change from 0 to 1024 [ 68.780893][ T5487] FAULT_INJECTION: forcing a failure. [ 68.780893][ T5487] name failslab, interval 1, probability 0, space 0, times 0 [ 68.793541][ T5487] CPU: 1 UID: 0 PID: 5487 Comm: syz.3.411 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 68.803801][ T5487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.813935][ T5487] Call Trace: [ 68.817232][ T5487] [ 68.820175][ T5487] dump_stack_lvl+0xf2/0x150 [ 68.824848][ T5487] dump_stack+0x15/0x20 [ 68.829046][ T5487] should_fail_ex+0x229/0x230 [ 68.833892][ T5487] ? __alloc_skb+0x10b/0x310 [ 68.838513][ T5487] should_failslab+0x8f/0xb0 [ 68.843137][ T5487] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 68.849004][ T5487] __alloc_skb+0x10b/0x310 [ 68.853536][ T5487] netlink_alloc_large_skb+0xad/0xe0 [ 68.858873][ T5487] netlink_sendmsg+0x3b4/0x6e0 [ 68.863659][ T5487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.869044][ T5487] __sock_sendmsg+0x140/0x180 [ 68.873776][ T5487] ____sys_sendmsg+0x312/0x410 [ 68.878617][ T5487] __sys_sendmsg+0x1e9/0x280 [ 68.883233][ T5487] __x64_sys_sendmsg+0x46/0x50 [ 68.888090][ T5487] x64_sys_call+0x26f8/0x2e00 [ 68.892780][ T5487] do_syscall_64+0xc9/0x1c0 [ 68.897290][ T5487] ? clear_bhb_loop+0x55/0xb0 [ 68.902040][ T5487] ? clear_bhb_loop+0x55/0xb0 [ 68.906717][ T5487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.912632][ T5487] RIP: 0033:0x7f59b8a75f19 [ 68.917126][ T5487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.936745][ T5487] RSP: 002b:00007f59b76f7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.945245][ T5487] RAX: ffffffffffffffda RBX: 00007f59b8c05f60 RCX: 00007f59b8a75f19 [ 68.953225][ T5487] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 68.961203][ T5487] RBP: 00007f59b76f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.969279][ T5487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.977257][ T5487] R13: 000000000000000b R14: 00007f59b8c05f60 R15: 00007ffefc3cbf48 [ 68.985296][ T5487] [ 69.047084][ T5491] FAULT_INJECTION: forcing a failure. [ 69.047084][ T5491] name failslab, interval 1, probability 0, space 0, times 0 [ 69.059747][ T5491] CPU: 1 UID: 0 PID: 5491 Comm: syz.4.412 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 69.070011][ T5491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.080091][ T5491] Call Trace: [ 69.083390][ T5491] [ 69.086333][ T5491] dump_stack_lvl+0xf2/0x150 [ 69.090955][ T5491] dump_stack+0x15/0x20 [ 69.095163][ T5491] should_fail_ex+0x229/0x230 [ 69.099867][ T5491] ? __alloc_skb+0x10b/0x310 [ 69.104517][ T5491] should_failslab+0x8f/0xb0 [ 69.109219][ T5491] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 69.115105][ T5491] __alloc_skb+0x10b/0x310 [ 69.119618][ T5491] netlink_alloc_large_skb+0xad/0xe0 [ 69.124991][ T5491] netlink_sendmsg+0x3b4/0x6e0 [ 69.129797][ T5491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.135159][ T5491] __sock_sendmsg+0x140/0x180 [ 69.139860][ T5491] ____sys_sendmsg+0x312/0x410 [ 69.144709][ T5491] __sys_sendmsg+0x1e9/0x280 [ 69.149334][ T5491] __x64_sys_sendmsg+0x46/0x50 [ 69.154249][ T5491] x64_sys_call+0x26f8/0x2e00 [ 69.158997][ T5491] do_syscall_64+0xc9/0x1c0 [ 69.163560][ T5491] ? clear_bhb_loop+0x55/0xb0 [ 69.168298][ T5491] ? clear_bhb_loop+0x55/0xb0 [ 69.173048][ T5491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.179031][ T5491] RIP: 0033:0x7fb1e4115f19 [ 69.183444][ T5491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.203111][ T5491] RSP: 002b:00007fb1e2d97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.211585][ T5491] RAX: ffffffffffffffda RBX: 00007fb1e42a5f60 RCX: 00007fb1e4115f19 [ 69.219560][ T5491] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 69.227533][ T5491] RBP: 00007fb1e2d970a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.235588][ T5491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.243558][ T5491] R13: 000000000000000b R14: 00007fb1e42a5f60 R15: 00007ffda619be38 [ 69.251534][ T5491] [ 69.276521][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.341909][ T5501] loop4: detected capacity change from 0 to 512 [ 69.367902][ T5501] EXT4-fs: Ignoring removed i_version option [ 69.375857][ T5501] EXT4-fs: journaled quota format not specified [ 69.410214][ T5510] loop0: detected capacity change from 0 to 512 [ 69.449377][ T5514] tipc: Started in network mode [ 69.454282][ T5514] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 69.472542][ T5514] tipc: Enabled bearer , priority 10 [ 69.482419][ T5510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.504628][ T5510] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.599848][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.617987][ T5527] usb usb8: usbfs: process 5527 (syz.4.424) did not claim interface 0 before use [ 69.627661][ T5527] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 69.640767][ T5529] loop1: detected capacity change from 0 to 512 [ 69.681275][ T5533] loop4: detected capacity change from 0 to 128 [ 69.698800][ T5529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.714056][ T5529] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.877517][ T5543] capability: warning: `syz.0.429' uses 32-bit capabilities (legacy support in use) [ 69.899246][ T29] audit: type=1400 audit(1721744730.159:516): avc: denied { execute } for pid=5538 comm="syz.0.429" path="/6/cpuacct.usage_percpu_user" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.902085][ T5543] vhci_hcd: invalid port number 0 [ 70.232633][ T5557] loop0: detected capacity change from 0 to 512 [ 70.307128][ T5559] tipc: Started in network mode [ 70.312176][ T5559] tipc: Node identity fe800000000000000000000000000012, cluster identity 4711 [ 70.326695][ T5559] tipc: Enabled bearer , priority 10 [ 70.401283][ T5569] tmpfs: Unknown parameter 'nr_in|des' [ 70.461427][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.512910][ T5574] loop1: detected capacity change from 0 to 512 [ 70.565940][ T5580] loop4: detected capacity change from 0 to 512 [ 70.584421][ T9] tipc: Node number set to 4269801490 [ 70.607468][ T5580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.697393][ T5580] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.740157][ T4322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.789105][ T5595] vhci_hcd: invalid port number 0 [ 70.810405][ T5601] loop4: detected capacity change from 0 to 512 [ 70.819957][ T5600] loop0: detected capacity change from 0 to 512 [ 70.837562][ T5600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.863181][ T5600] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.876486][ T5601] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.900083][ T5601] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.930516][ T5611] loop2: detected capacity change from 0 to 764 [ 70.938799][ T5611] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 70.939232][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.003302][ T5614] loop0: detected capacity change from 0 to 512 [ 71.043008][ T5618] netlink: 268 bytes leftover after parsing attributes in process `syz.2.456'. [ 71.102658][ T5618] Invalid architecture in ELF header: 0 [ 71.115836][ T5618] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 71.287817][ T5627] loop3: detected capacity change from 0 to 1024 [ 71.305736][ T5627] EXT4-fs: Mount option(s) incompatible with ext2 [ 71.444430][ T9] tipc: Node number set to 4269801490 [ 71.498217][ T5641] usb usb8: usbfs: process 5641 (syz.3.464) did not claim interface 0 before use [ 71.514434][ T5641] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 71.573946][ T5644] loop3: detected capacity change from 0 to 512 [ 71.614264][ T5644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.627092][ T5644] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.663479][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.715240][ T4322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.786340][ T5654] loop3: detected capacity change from 0 to 512 [ 72.053554][ T5392] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.105110][ T5672] loop0: detected capacity change from 0 to 512 [ 72.123291][ T5392] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.137998][ T5672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.140505][ T5655] chnl_net:caif_netlink_parms(): no params data found [ 72.161801][ T5672] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.184852][ T5392] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.221502][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.261566][ T5685] loop0: detected capacity change from 0 to 512 [ 72.292284][ T5392] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.305263][ T5684] usb usb8: usbfs: process 5684 (syz.3.475) did not claim interface 0 before use [ 72.323208][ T5687] loop2: detected capacity change from 0 to 1764 [ 72.334259][ T5684] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 72.341675][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.348980][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.358091][ T5687] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 72.372529][ T5685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.389709][ T5687] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 72.398406][ T5655] bridge_slave_0: entered allmulticast mode [ 72.406068][ T5685] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.417041][ T5655] bridge_slave_0: entered promiscuous mode [ 72.426576][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.433697][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.449516][ T5655] bridge_slave_1: entered allmulticast mode [ 72.456098][ T5655] bridge_slave_1: entered promiscuous mode [ 72.489289][ T5655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.501113][ T5694] loop3: detected capacity change from 0 to 512 [ 72.523701][ T5655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.523909][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.554881][ T5392] bridge_slave_1: left allmulticast mode [ 72.560565][ T5392] bridge_slave_1: left promiscuous mode [ 72.566454][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.586433][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.666767][ T5701] netlink: 268 bytes leftover after parsing attributes in process `syz.0.481'. [ 72.685792][ T5703] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 72.692386][ T5703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 72.700125][ T5703] vhci_hcd vhci_hcd.0: Device attached [ 72.745560][ T5701] Invalid architecture in ELF header: 0 [ 72.810287][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.830945][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.854752][ T5392] bond0 (unregistering): Released all slaves [ 72.901888][ T5701] (unnamed net_device) (uninitialized): down delay (65535) is not a multiple of miimon (100), value rounded to 65500 ms [ 72.937599][ T5655] team0: Port device team_slave_0 added [ 72.954668][ T5655] team0: Port device team_slave_1 added [ 72.979100][ T5392] tipc: Disabling bearer [ 72.984399][ T5392] tipc: Left network mode [ 73.003365][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.004421][ T24] usb 7-1: new high-speed USB device number 2 using vhci_hcd [ 73.010391][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.010419][ T5655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.038733][ T5655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.061479][ T5655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.087712][ T5655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.155453][ T5392] hsr_slave_0: left promiscuous mode [ 73.162703][ T5392] hsr_slave_1: left promiscuous mode [ 73.168933][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.172172][ T5716] loop2: detected capacity change from 0 to 512 [ 73.176408][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.210646][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.218103][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.237203][ T5716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.251914][ T5392] veth1_macvtap: left promiscuous mode [ 73.257563][ T5392] veth0_macvtap: left promiscuous mode [ 73.263097][ T5392] veth1_vlan: left promiscuous mode [ 73.268382][ T5392] veth0_vlan: left promiscuous mode [ 73.270001][ T5716] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.274622][ T5718] FAULT_INJECTION: forcing a failure. [ 73.274622][ T5718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.297001][ T5718] CPU: 0 UID: 0 PID: 5718 Comm: syz.0.484 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 73.307252][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.317326][ T5718] Call Trace: [ 73.320619][ T5718] [ 73.323642][ T5718] dump_stack_lvl+0xf2/0x150 [ 73.328253][ T5718] dump_stack+0x15/0x20 [ 73.332431][ T5718] should_fail_ex+0x229/0x230 [ 73.337186][ T5718] should_fail+0xb/0x10 [ 73.341383][ T5718] should_fail_usercopy+0x1a/0x20 [ 73.346471][ T5718] _copy_from_user+0x1e/0xd0 [ 73.351116][ T5718] copy_msghdr_from_user+0x54/0x2a0 [ 73.356364][ T5718] do_recvmmsg+0x290/0x720 [ 73.360832][ T5718] __x64_sys_recvmmsg+0xe2/0x170 [ 73.365803][ T5718] x64_sys_call+0x1b8b/0x2e00 [ 73.370616][ T5718] do_syscall_64+0xc9/0x1c0 [ 73.375136][ T5718] ? clear_bhb_loop+0x55/0xb0 [ 73.379835][ T5718] ? clear_bhb_loop+0x55/0xb0 [ 73.384523][ T5718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.390578][ T5718] RIP: 0033:0x7f31b26c5f19 [ 73.395021][ T5718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.414732][ T5718] RSP: 002b:00007f31b1347048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 73.423256][ T5718] RAX: ffffffffffffffda RBX: 00007f31b2855f60 RCX: 00007f31b26c5f19 [ 73.431276][ T5718] RDX: 040000000000012d RSI: 0000000020000080 RDI: 0000000000000004 [ 73.439334][ T5718] RBP: 00007f31b13470a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.447412][ T5718] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 73.455524][ T5718] R13: 000000000000000b R14: 00007f31b2855f60 R15: 00007ffec3c9a078 [ 73.463522][ T5718] [ 73.505112][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.583755][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 73.583773][ T29] audit: type=1400 audit(1721744733.839:581): avc: denied { mounton } for pid=5729 comm="syz.2.485" path="/file0" dev="tmpfs" ino=786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.646722][ T5704] vhci_hcd: connection reset by peer [ 73.652565][ T55] vhci_hcd: stop threads [ 73.656876][ T55] vhci_hcd: release socket [ 73.661297][ T55] vhci_hcd: disconnect device [ 73.700256][ T5735] usb usb8: usbfs: process 5735 (syz.0.487) did not claim interface 0 before use [ 73.721023][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 73.722803][ T5735] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 73.792687][ T5737] loop0: detected capacity change from 0 to 512 [ 73.862945][ T5655] hsr_slave_0: entered promiscuous mode [ 73.879629][ T5655] hsr_slave_1: entered promiscuous mode [ 73.891720][ T5655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.902663][ T5655] Cannot create hsr debugfs directory [ 73.908635][ T5739] tipc: Enabling of bearer rejected, already enabled [ 74.079809][ T5759] loop3: detected capacity change from 0 to 1764 [ 74.102717][ T5759] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 74.132822][ T5759] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 74.184053][ T5768] loop0: detected capacity change from 0 to 512 [ 74.230052][ T5768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.251931][ T5768] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.273942][ T5655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.296453][ T5655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.318047][ T5655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.332955][ T5780] loop1: detected capacity change from 0 to 128 [ 74.341390][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.343909][ T5655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.449585][ T5794] loop2: detected capacity change from 0 to 512 [ 74.459323][ T5655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.483152][ T5655] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.500330][ T5794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.524274][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.531268][ T5794] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.531372][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.581182][ T5655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.591714][ T5655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.607351][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.614648][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.726807][ T5655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.925856][ T5655] veth0_vlan: entered promiscuous mode [ 74.932841][ T5845] loop3: detected capacity change from 0 to 512 [ 74.941825][ T5655] veth1_vlan: entered promiscuous mode [ 74.968251][ T5845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.971657][ T5655] veth0_macvtap: entered promiscuous mode [ 74.989282][ T5655] veth1_macvtap: entered promiscuous mode [ 74.989376][ T5845] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.008225][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.018959][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.029122][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.039750][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.049752][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.060651][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.070697][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.081357][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.095940][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.105361][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.115836][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.125685][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.136285][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.146154][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.156707][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.166544][ T5655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.177229][ T5655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.187663][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.189926][ T5655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.207478][ T5655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.216319][ T5655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.225045][ T5655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.233773][ T5655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.326765][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.360618][ T5854] vhci_hcd: invalid port number 0 [ 75.494065][ T5861] xt_limit: Overflow, try lower: 0/0 [ 75.507207][ T29] audit: type=1400 audit(1721744735.769:582): avc: denied { write } for pid=5855 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.534446][ T5865] IPVS: persistence engine module ip_vs_pe_À not found [ 75.542261][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 75.558688][ T5865] loop0: detected capacity change from 0 to 512 [ 75.597204][ T5865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.685416][ T5865] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.771361][ T29] audit: type=1400 audit(1721744736.029:583): avc: denied { read } for pid=5882 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.797332][ T5881] loop4: detected capacity change from 0 to 512 [ 75.804444][ T5865] loop0: detected capacity change from 512 to 11 [ 75.825512][ T29] audit: type=1400 audit(1721744736.079:584): avc: denied { ioctl } for pid=5882 comm="syz.3.516" path="socket:[13901]" dev="sockfs" ino=13901 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.826435][ T5865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 75.874148][ T29] audit: type=1400 audit(1721744736.129:585): avc: denied { attach_queue } for pid=5882 comm="syz.3.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 75.884625][ T5865] EXT4-fs error (device loop0): ext4_dirty_inode:6014: inode #18: comm syz.0.509: mark_inode_dirty error [ 75.895245][ T5885] loop2: detected capacity change from 0 to 512 [ 75.915298][ T5865] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 75.929664][ T5865] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Out of memory [ 75.941275][ T5881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.954058][ T5881] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.954759][ T5885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.992825][ T5865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 76.003285][ T5865] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #18: comm syz.0.509: mark_inode_dirty error [ 76.014536][ T5885] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.024565][ T5865] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5810: Out of memory [ 76.042874][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.070724][ T5865] EXT4-fs error (device loop0): ext4_punch_hole:4081: inode #18: comm syz.0.509: mark_inode_dirty error [ 76.077487][ T5892] loop3: detected capacity change from 0 to 512 [ 76.143561][ T5894] loop4: detected capacity change from 0 to 512 [ 76.158559][ T5896] loop3: detected capacity change from 0 to 512 [ 76.167428][ C0] eth0: bad gso: type: 1, size: 1408 [ 76.178384][ T5894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.197353][ T29] audit: type=1326 audit(1721744736.449:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5895 comm="syz.3.520" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59b8a75f19 code=0x0 [ 76.197721][ T5027] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.229632][ T5894] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.262346][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.296970][ T5868] kmmpd-loop0: attempt to access beyond end of device [ 76.296970][ T5868] loop0: rw=14337, sector=48, nr_sectors = 4 limit=11 [ 76.310696][ T5868] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 76.495913][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.582639][ T29] audit: type=1400 audit(1721744736.839:587): avc: denied { create } for pid=5922 comm="syz.2.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 76.609103][ T5392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.627648][ T5923] loop2: detected capacity change from 0 to 2048 [ 76.666002][ T5923] loop2: p1 < > p3 [ 76.673833][ T5392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.686175][ T5923] loop2: p3 size 134217728 extends beyond EOD, truncated [ 76.770394][ T5392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.822528][ T5392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.917032][ T5392] bridge_slave_1: left allmulticast mode [ 76.917821][ T5942] loop4: detected capacity change from 0 to 512 [ 76.922861][ T5392] bridge_slave_1: left promiscuous mode [ 76.934873][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.942854][ T5392] bridge_slave_0: left allmulticast mode [ 76.948615][ T5392] bridge_slave_0: left promiscuous mode [ 76.954331][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.965181][ T5942] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 77.009212][ T5942] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz.4.531: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 77.036141][ T5942] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.531: couldn't read orphan inode 15 (err -117) [ 77.056094][ T5942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.068459][ T5942] ext2 filesystem being mounted at /9/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.082606][ T5942] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.531: Directory hole found for htree leaf block 0 [ 77.125124][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.158089][ T5392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.170398][ T5392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.181327][ T5392] bond0 (unregistering): Released all slaves [ 77.197978][ T5951] loop4: detected capacity change from 0 to 1764 [ 77.207543][ T5392] bond1 (unregistering): Released all slaves [ 77.215688][ T5951] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 77.223980][ T5951] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 77.245961][ T5949] netlink: 96 bytes leftover after parsing attributes in process `syz.3.534'. [ 77.278164][ T5392] tipc: Disabling bearer [ 77.283387][ T5392] tipc: Left network mode [ 77.347043][ T5392] hsr_slave_0: left promiscuous mode [ 77.359009][ T5392] hsr_slave_1: left promiscuous mode [ 77.383273][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.390849][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.423587][ T5392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.431058][ T5392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.466461][ T5392] veth1_macvtap: left promiscuous mode [ 77.471975][ T5392] veth0_macvtap: left promiscuous mode [ 77.477567][ T5392] veth1_vlan: left promiscuous mode [ 77.482853][ T5392] veth0_vlan: left promiscuous mode [ 77.599053][ T5986] loop1: detected capacity change from 0 to 512 [ 77.616679][ T5986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.634716][ T5392] team0 (unregistering): Port device team_slave_1 removed [ 77.637036][ T5986] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.654106][ T5392] team0 (unregistering): Port device team_slave_0 removed [ 77.676068][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.772094][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 77.793643][ T29] audit: type=1326 audit(1721744738.049:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5966 comm="syz.3.537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59b8a75f19 code=0x0 [ 77.807902][ T5998] loop1: detected capacity change from 0 to 128 [ 77.850506][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.857787][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.872496][ T5927] bridge_slave_0: entered allmulticast mode [ 77.878936][ T5927] bridge_slave_0: entered promiscuous mode [ 77.885942][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.893080][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.900428][ T5927] bridge_slave_1: entered allmulticast mode [ 77.906996][ T5927] bridge_slave_1: entered promiscuous mode [ 77.936597][ T29] audit: type=1400 audit(1721744738.199:589): avc: denied { ioctl } for pid=6009 comm="syz.2.547" path="socket:[14101]" dev="sockfs" ino=14101 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 77.962470][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.997857][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.029730][ T5927] team0: Port device team_slave_0 added [ 78.050598][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.549'. [ 78.066795][ T5927] team0: Port device team_slave_1 added [ 78.098133][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.105326][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.123150][ T6035] loop4: detected capacity change from 0 to 4096 [ 78.131340][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.154453][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.161583][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.187701][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.202863][ T6036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.547'. [ 78.215609][ T24] vhci_hcd: vhci_device speed not set [ 78.231569][ T6035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.234554][ T29] audit: type=1400 audit(1721744738.489:590): avc: denied { getopt } for pid=6009 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.324265][ T6042] loop1: detected capacity change from 0 to 2048 [ 78.365246][ T6042] loop1: p1 < > p3 [ 78.389706][ T6042] loop1: p3 size 134217728 extends beyond EOD, truncated [ 78.431817][ T5927] hsr_slave_0: entered promiscuous mode [ 78.503592][ T5927] hsr_slave_1: entered promiscuous mode [ 78.511147][ T5927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.520143][ T5927] Cannot create hsr debugfs directory [ 78.641922][ T6064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6064 comm=syz.3.555 [ 78.664303][ T29] audit: type=1400 audit(1721744738.899:591): avc: denied { nlmsg_write } for pid=6063 comm="syz.3.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 78.921072][ T6087] loop2: detected capacity change from 0 to 2048 [ 79.007045][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.037027][ T6087] loop2: p1 < > p3 [ 79.065813][ T6104] loop3: detected capacity change from 0 to 512 [ 79.067759][ T6087] loop2: p3 size 134217728 extends beyond EOD, truncated [ 79.098247][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.560'. [ 79.151331][ T6113] loop3: detected capacity change from 0 to 512 [ 79.181677][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.214338][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.215021][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.248390][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.250869][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.283310][ T6113] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.298255][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.317947][ T6113] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.566: Directory hole found for htree leaf block 0 [ 79.332751][ T29] audit: type=1400 audit(1721744739.579:592): avc: denied { create } for pid=6110 comm="syz.3.566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 79.378177][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.389162][ T6137] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.566: Directory hole found for htree leaf block 0 [ 79.391245][ T6113] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.566: Directory hole found for htree leaf block 0 [ 79.392201][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 79.394180][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.418107][ T29] audit: type=1400 audit(1721744739.649:593): avc: denied { create } for pid=6110 comm="syz.3.566" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 79.426948][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.433864][ T29] audit: type=1400 audit(1721744739.649:594): avc: denied { ioctl } for pid=6110 comm="syz.3.566" path="socket:[15421]" dev="sockfs" ino=15421 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.498272][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.549671][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.556851][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.600383][ T6156] loop1: detected capacity change from 0 to 512 [ 79.607821][ T6146] loop3: detected capacity change from 0 to 4096 [ 79.623950][ T5927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.635218][ T5927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.659584][ T6146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.853285][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.069097][ T6194] loop4: detected capacity change from 0 to 2048 [ 80.177312][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.256075][ T6194] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.315405][ T5927] veth0_vlan: entered promiscuous mode [ 80.324437][ T6194] loop4: detected capacity change from 2048 to 64 [ 80.325883][ T5927] veth1_vlan: entered promiscuous mode [ 80.347621][ T5927] veth0_macvtap: entered promiscuous mode [ 80.354673][ T29] audit: type=1400 audit(1721744740.609:595): avc: denied { getopt } for pid=6193 comm="syz.4.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.371940][ T5927] veth1_macvtap: entered promiscuous mode [ 80.421561][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.431493][ T5655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.432060][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.451117][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.461569][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.471425][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.481879][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.481899][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.481916][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.496616][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.500761][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.523006][ T6196] kmmpd-loop4: attempt to access beyond end of device [ 80.523006][ T6196] loop4: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 80.523037][ T6196] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 80.577042][ T6226] loop1: detected capacity change from 0 to 512 [ 80.583286][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.583307][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.583329][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.583346][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.583360][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.583377][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.583391][ T5927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.583534][ T5927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.586857][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.588296][ T5927] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.588344][ T5927] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.588384][ T5927] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.588414][ T5927] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.596906][ T6226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.597068][ T6226] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.648238][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.749297][ T6249] loop1: detected capacity change from 0 to 512 [ 81.055151][ T5398] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.079593][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'. [ 81.127412][ T29] audit: type=1400 audit(1721744741.359:596): avc: denied { ioctl } for pid=6274 comm="syz.2.592" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15624 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.157943][ T6282] loop1: detected capacity change from 0 to 256 [ 81.182183][ T6272] xt_limit: Overflow, try lower: 0/0 [ 81.205492][ T6282] FAT-fs (loop1): Directory bread(block 64) failed [ 81.212044][ T6282] FAT-fs (loop1): Directory bread(block 65) failed [ 81.218716][ T6282] FAT-fs (loop1): Directory bread(block 66) failed [ 81.225315][ T6282] FAT-fs (loop1): Directory bread(block 67) failed [ 81.231911][ T6282] FAT-fs (loop1): Directory bread(block 68) failed [ 81.238467][ T6282] FAT-fs (loop1): Directory bread(block 69) failed [ 81.245064][ T6282] FAT-fs (loop1): Directory bread(block 70) failed [ 81.251590][ T6282] FAT-fs (loop1): Directory bread(block 71) failed [ 81.258203][ T6282] FAT-fs (loop1): Directory bread(block 72) failed [ 81.264739][ T6282] FAT-fs (loop1): Directory bread(block 73) failed [ 81.288997][ T6282] syz.1.591: attempt to access beyond end of device [ 81.288997][ T6282] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 81.325371][ T6282] syz.1.591: attempt to access beyond end of device [ 81.325371][ T6282] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 81.338591][ T6282] Buffer I/O error on dev loop1, logical block 442, async page read [ 81.383224][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 81.402772][ T6283] loop3: detected capacity change from 0 to 512 [ 81.457877][ T6283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.481466][ T5398] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.509942][ T6283] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.561347][ T5398] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.565240][ T6305] loop0: detected capacity change from 0 to 512 [ 81.578330][ T6305] EXT4-fs: Ignoring removed nobh option [ 81.599532][ T6305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.613897][ T3849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.615063][ T6305] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.652843][ T5398] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.681416][ T6305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.597: bg 0: block 224: padding at end of block bitmap is not set [ 81.711070][ T6318] netlink: 76 bytes leftover after parsing attributes in process `syz.3.598'. [ 81.726005][ T6305] EXT4-fs (loop0): Remounting filesystem read-only [ 81.744137][ T6319] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 81.760523][ T6305] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 81.784069][ T6305] devtmpfs: Too few inodes for current use [ 81.785677][ T29] audit: type=1400 audit(1721744742.039:597): avc: denied { mounton } for pid=6304 comm="syz.0.597" path="/4/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.812898][ T29] audit: type=1400 audit(1721744742.039:598): avc: denied { mount } for pid=6304 comm="syz.0.597" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.823576][ T6305] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 81.835065][ T29] audit: type=1400 audit(1721744742.039:599): avc: denied { remount } for pid=6304 comm="syz.0.597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 81.863552][ T6305] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 81.906006][ T29] audit: type=1400 audit(1721744742.169:600): avc: denied { mounton } for pid=6304 comm="syz.0.597" path="/4/file0/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.000813][ T5398] bridge_slave_1: left allmulticast mode [ 82.006533][ T5398] bridge_slave_1: left promiscuous mode [ 82.012263][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.066223][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066264][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066331][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066353][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066378][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066429][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.066913][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067180][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067286][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067325][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067351][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067452][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.067577][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 82.068340][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068419][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068511][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068537][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068559][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068700][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068767][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 82.068827][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.068861][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 82.068901][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.069001][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.069044][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 82.069085][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.069138][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=14 [ 82.069211][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.069237][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 82.069346][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 82.069439][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 82.069505][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 82.069620][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 82.069680][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 82.069749][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=17 [ 82.069837][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=17 [ 82.069970][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 82.070023][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 82.070129][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=16 [ 82.070192][ T5927] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=17 [ 82.084297][ T5398] bridge_slave_0: left allmulticast mode [ 82.084318][ T5398] bridge_slave_0: left promiscuous mode [ 82.084444][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.095657][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.478836][ T6345] loop1: detected capacity change from 0 to 512 [ 82.504171][ T6345] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 82.521951][ T6345] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.604: invalid indirect mapped block 4278190080 (level 0) [ 82.539137][ T6345] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.604: invalid indirect mapped block 1 (level 1) [ 82.553307][ T6345] EXT4-fs (loop1): 1 truncate cleaned up [ 82.560257][ T6345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.574938][ T5398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.585683][ T5398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.596196][ T5398] bond0 (unregistering): Released all slaves [ 82.607698][ T6277] chnl_net:caif_netlink_parms(): no params data found [ 82.685778][ T55] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 82.717581][ T5398] hsr_slave_0: left promiscuous mode [ 82.723877][ T5398] hsr_slave_1: left promiscuous mode [ 82.734138][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.741800][ T5398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.752391][ T5398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.759985][ T5398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.773729][ T5398] veth1_macvtap: left promiscuous mode [ 82.779275][ T5398] veth0_macvtap: left promiscuous mode [ 82.784831][ T5398] veth1_vlan: left promiscuous mode [ 82.790107][ T5398] veth0_vlan: left promiscuous mode [ 82.899467][ T5398] team0 (unregistering): Port device team_slave_1 removed [ 82.912498][ T5398] team0 (unregistering): Port device team_slave_0 removed [ 82.937126][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.963672][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.970831][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.977304][ T6364] loop1: detected capacity change from 0 to 4096 [ 82.986268][ T6277] bridge_slave_0: entered allmulticast mode [ 82.993102][ T6277] bridge_slave_0: entered promiscuous mode [ 82.998299][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.005147][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.018559][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.045988][ T6277] bridge_slave_1: entered allmulticast mode [ 83.052461][ T6277] bridge_slave_1: entered promiscuous mode [ 83.138485][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.149149][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.172381][ T6277] team0: Port device team_slave_0 added [ 83.188403][ T6277] team0: Port device team_slave_1 added [ 83.219805][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.226891][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.252906][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.361954][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.368974][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.395092][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.557787][ T6277] hsr_slave_0: entered promiscuous mode [ 83.567045][ T6277] hsr_slave_1: entered promiscuous mode [ 83.582866][ T6277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.590527][ T6277] Cannot create hsr debugfs directory [ 83.732667][ T6407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.611'. [ 83.806859][ T6418] loop3: detected capacity change from 0 to 256 [ 83.893800][ T6418] FAT-fs (loop3): Directory bread(block 64) failed [ 83.900386][ T6418] FAT-fs (loop3): Directory bread(block 65) failed [ 83.907010][ T6418] FAT-fs (loop3): Directory bread(block 66) failed [ 83.913603][ T6418] FAT-fs (loop3): Directory bread(block 67) failed [ 83.920240][ T6418] FAT-fs (loop3): Directory bread(block 68) failed [ 83.926854][ T6418] FAT-fs (loop3): Directory bread(block 69) failed [ 83.933477][ T6418] FAT-fs (loop3): Directory bread(block 70) failed [ 83.940037][ T6418] FAT-fs (loop3): Directory bread(block 71) failed [ 83.946653][ T6418] FAT-fs (loop3): Directory bread(block 72) failed [ 83.953198][ T6418] FAT-fs (loop3): Directory bread(block 73) failed [ 83.981424][ T6418] syz.3.611: attempt to access beyond end of device [ 83.981424][ T6418] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 84.018819][ T6418] syz.3.611: attempt to access beyond end of device [ 84.018819][ T6418] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 84.032010][ T6418] Buffer I/O error on dev loop3, logical block 442, async page read [ 84.071335][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 84.071353][ T29] audit: type=1400 audit(1721744744.239:609): avc: denied { mount } for pid=6401 comm="syz.3.611" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 84.104557][ T3808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.154369][ T29] audit: type=1400 audit(1721744744.399:610): avc: denied { connect } for pid=6420 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.192990][ T29] audit: type=1400 audit(1721744744.449:611): avc: denied { listen } for pid=6428 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 84.213570][ T29] audit: type=1400 audit(1721744744.449:612): avc: denied { create } for pid=6428 comm="syz.1.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.232288][ T6432] loop2: detected capacity change from 0 to 512 [ 84.248705][ T6432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.312956][ T6432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.345484][ T6277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.356911][ T6432] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.369832][ T6277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.382912][ T6277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.396865][ T6277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.451072][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.467086][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.478692][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.485906][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.507381][ T6277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.517822][ T6277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.535975][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.543126][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.656444][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.875966][ T6277] veth0_vlan: entered promiscuous mode [ 84.891146][ T6277] veth1_vlan: entered promiscuous mode [ 84.925789][ T6277] veth0_macvtap: entered promiscuous mode [ 84.948918][ T6277] veth1_macvtap: entered promiscuous mode [ 84.969254][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.979848][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.989953][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.000497][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.010422][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.020907][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.030760][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.041204][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.052476][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.063866][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.074383][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.084208][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.094811][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.104670][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.115165][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.125023][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.135520][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.147110][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.157682][ T3372] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.159004][ T6277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.175485][ T6277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.184209][ T6277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.193028][ T6277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.217843][ T6522] loop1: detected capacity change from 0 to 512 [ 85.266581][ T6522] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.399466][ T6541] netlink: 76 bytes leftover after parsing attributes in process `syz.4.623'. [ 85.402159][ T6543] loop1: detected capacity change from 0 to 512 [ 85.463537][ T6543] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.609533][ T6558] loop3: detected capacity change from 0 to 512 [ 85.627649][ T6558] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 85.664464][ T6558] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.630: invalid indirect mapped block 4278190080 (level 0) [ 85.694593][ T6558] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.630: invalid indirect mapped block 1 (level 1) [ 85.708495][ T6558] EXT4-fs (loop3): 1 truncate cleaned up [ 85.828756][ T5398] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 86.086299][ T6567] usb usb8: usbfs: process 6567 (syz.2.631) did not claim interface 0 before use [ 86.095705][ T6567] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 86.119373][ T6569] loop2: detected capacity change from 0 to 512 [ 86.136018][ T6569] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.184281][ T6575] loop2: detected capacity change from 0 to 1024 [ 86.191140][ T6575] EXT4-fs: Ignoring removed orlov option [ 86.196971][ T6575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.348680][ T6580] netlink: 76 bytes leftover after parsing attributes in process `syz.2.635'. [ 86.479529][ T5396] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.498926][ T6587] loop2: detected capacity change from 0 to 1764 [ 86.513555][ T6587] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 86.548764][ T6587] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 86.588878][ T6598] loop3: detected capacity change from 0 to 1764 [ 86.615613][ T6598] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 86.646764][ T6598] openvswitch: netlink: VXLAN extension 0 has unexpected len 5 expected 0 [ 86.749198][ T6595] chnl_net:caif_netlink_parms(): no params data found [ 86.818444][ T6614] loop3: detected capacity change from 0 to 512 [ 86.829072][ T5396] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.840619][ T6614] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.645: corrupted in-inode xattr: e_name out of bounds [ 86.854631][ T6614] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.645: couldn't read orphan inode 15 (err -117) [ 86.871899][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.874413][ T6614] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.645: Directory hole found for htree leaf block 0 [ 86.879073][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.902460][ T6595] bridge_slave_0: entered allmulticast mode [ 86.909036][ T6595] bridge_slave_0: entered promiscuous mode [ 86.916478][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.923689][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.930902][ T6595] bridge_slave_1: entered allmulticast mode [ 86.937431][ T6595] bridge_slave_1: entered promiscuous mode [ 86.957912][ T5396] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.958420][ T6614] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.645: Directory hole found for htree leaf block 0 [ 86.986933][ T29] audit: type=1400 audit(1721744747.249:613): avc: denied { ioctl } for pid=6613 comm="syz.3.645" path="socket:[16151]" dev="sockfs" ino=16151 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 86.991140][ T6614] netlink: zone id is out of range [ 87.016778][ T6614] netlink: zone id is out of range [ 87.021899][ T6614] netlink: set zone limit has 8 unknown bytes [ 87.030470][ T6595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.045166][ T6595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.057792][ T5396] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.079860][ T6595] team0: Port device team_slave_0 added [ 87.086792][ T6595] team0: Port device team_slave_1 added [ 87.112385][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.119444][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.145404][ T6595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.159722][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.166796][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.192810][ T6595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.211242][ T6618] netlink: 76 bytes leftover after parsing attributes in process `syz.3.646'. [ 87.236917][ T6595] hsr_slave_0: entered promiscuous mode [ 87.243673][ T6595] hsr_slave_1: entered promiscuous mode [ 87.250474][ T6595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.259435][ T6595] Cannot create hsr debugfs directory [ 87.318564][ T6620] netlink: 'syz.3.647': attribute type 4 has an invalid length. [ 87.342960][ T5396] bridge_slave_1: left allmulticast mode [ 87.348723][ T5396] bridge_slave_1: left promiscuous mode [ 87.354454][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.371443][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.488440][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.498921][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.509102][ T5396] bond0 (unregistering): Released all slaves [ 87.555254][ T6632] loop2: detected capacity change from 0 to 512 [ 87.569968][ T6632] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 87.586828][ T6632] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.651: invalid indirect mapped block 4278190080 (level 0) [ 87.601883][ T6632] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.651: invalid indirect mapped block 1 (level 1) [ 87.615883][ T6632] EXT4-fs (loop2): 1 truncate cleaned up [ 87.742472][ T5396] hsr_slave_0: left promiscuous mode [ 87.749080][ T5396] hsr_slave_1: left promiscuous mode [ 87.754872][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.762279][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.770119][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.777616][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.784940][ T6655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.652'. [ 87.789211][ T50] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x19 [ 87.802261][ T5396] veth1_macvtap: left promiscuous mode [ 87.807757][ T5396] veth0_macvtap: left promiscuous mode [ 87.813253][ T5396] veth1_vlan: left promiscuous mode [ 87.818532][ T5396] veth0_vlan: left promiscuous mode [ 87.855920][ T6656] loop3: detected capacity change from 0 to 256 [ 87.877883][ T6656] FAT-fs (loop3): Directory bread(block 64) failed [ 87.884460][ T6656] FAT-fs (loop3): Directory bread(block 65) failed [ 87.891020][ T6656] FAT-fs (loop3): Directory bread(block 66) failed [ 87.897576][ T6656] FAT-fs (loop3): Directory bread(block 67) failed [ 87.904142][ T6656] FAT-fs (loop3): Directory bread(block 68) failed [ 87.910701][ T6656] FAT-fs (loop3): Directory bread(block 69) failed [ 87.917269][ T6656] FAT-fs (loop3): Directory bread(block 70) failed [ 87.923834][ T6656] FAT-fs (loop3): Directory bread(block 71) failed [ 87.930404][ T6656] FAT-fs (loop3): Directory bread(block 72) failed [ 87.936959][ T6656] FAT-fs (loop3): Directory bread(block 73) failed [ 87.964060][ T6656] syz.3.652: attempt to access beyond end of device [ 87.964060][ T6656] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 88.002287][ T6656] syz.3.652: attempt to access beyond end of device [ 88.002287][ T6656] loop3: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 88.015518][ T6656] Buffer I/O error on dev loop3, logical block 442, async page read [ 88.156808][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 88.167984][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 88.422568][ C0] ================================================================== [ 88.430699][ C0] BUG: KCSAN: data-race in can_send / can_send [ 88.436890][ C0] [ 88.439218][ C0] read-write to 0xffff88810ee99e10 of 8 bytes by interrupt on cpu 1: [ 88.447292][ C0] can_send+0x562/0x5d0 [ 88.451470][ C0] bcm_can_tx+0x314/0x420 [ 88.455826][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 88.461170][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 88.466403][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 88.471554][ C0] handle_softirqs+0xc3/0x280 [ 88.476263][ C0] irq_exit_rcu+0x3e/0x90 [ 88.480627][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 88.486291][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.492306][ C0] __sanitizer_cov_trace_pc+0x8/0x70 [ 88.497617][ C0] batadv_nc_worker+0x39f/0xac0 [ 88.502498][ C0] process_scheduled_works+0x483/0x9a0 [ 88.507981][ C0] worker_thread+0x526/0x700 [ 88.512599][ C0] kthread+0x1d1/0x210 [ 88.516701][ C0] ret_from_fork+0x4b/0x60 [ 88.521143][ C0] ret_from_fork_asm+0x1a/0x30 [ 88.525932][ C0] [ 88.528262][ C0] read-write to 0xffff88810ee99e10 of 8 bytes by interrupt on cpu 0: [ 88.536334][ C0] can_send+0x562/0x5d0 [ 88.540509][ C0] j1939_send_one+0x1a9/0x1e0 [ 88.545210][ C0] j1939_tp_txtimer+0xcab/0x1a70 [ 88.550170][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 88.555383][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 88.560422][ C0] handle_softirqs+0xc3/0x280 [ 88.565119][ C0] do_softirq+0x5e/0x90 [ 88.569295][ C0] __local_bh_enable_ip+0x6e/0x70 [ 88.574338][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 88.579305][ C0] wg_packet_decrypt_worker+0x173/0x6f0 [ 88.584865][ C0] process_scheduled_works+0x483/0x9a0 [ 88.590335][ C0] worker_thread+0x526/0x700 [ 88.594937][ C0] kthread+0x1d1/0x210 [ 88.599029][ C0] ret_from_fork+0x4b/0x60 [ 88.603452][ C0] ret_from_fork_asm+0x1a/0x30 [ 88.608226][ C0] [ 88.610543][ C0] value changed: 0x0000000000001b8b -> 0x0000000000001b8c [ 88.617645][ C0] [ 88.619960][ C0] Reported by Kernel Concurrency Sanitizer on: [ 88.626103][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 88.636256][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 88.646314][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 88.652856][ C0] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 88.727618][ T29] audit: type=1400 audit(1721744748.969:614): avc: denied { write } for pid=3073 comm="syz-executor" path="pipe:[719]" dev="pipefs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 88.909551][ C0] ================================================================== [ 88.917761][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 88.924473][ C0] [ 88.926806][ C0] read-write to 0xffff88810ee99e08 of 8 bytes by interrupt on cpu 1: [ 88.934887][ C0] can_receive+0x4e/0x1f0 [ 88.939247][ C0] canfd_rcv+0xe7/0x180 [ 88.943431][ C0] __netif_receive_skb+0x123/0x280 [ 88.948571][ C0] process_backlog+0x22e/0x440 [ 88.953403][ C0] __napi_poll+0x63/0x3c0 [ 88.957765][ C0] net_rx_action+0x3a1/0x7f0 [ 88.962396][ C0] handle_softirqs+0xc3/0x280 [ 88.967119][ C0] irq_exit_rcu+0x3e/0x90 [ 88.971495][ C0] sysvec_apic_timer_interrupt+0x37/0x80 [ 88.977173][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 88.983198][ C0] [ 88.985531][ C0] read-write to 0xffff88810ee99e08 of 8 bytes by interrupt on cpu 0: [ 88.993613][ C0] can_receive+0x4e/0x1f0 [ 88.997973][ C0] can_rcv+0xe7/0x180 [ 89.001982][ C0] __netif_receive_skb+0x123/0x280 [ 89.007128][ C0] process_backlog+0x22e/0x440 [ 89.011920][ C0] __napi_poll+0x63/0x3c0 [ 89.016273][ C0] net_rx_action+0x3a1/0x7f0 [ 89.020890][ C0] handle_softirqs+0xc3/0x280 [ 89.025599][ C0] do_softirq+0x5e/0x90 [ 89.029788][ C0] __local_bh_enable_ip+0x6e/0x70 [ 89.034852][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 89.039809][ C0] batadv_nc_purge_paths+0x21d/0x270 [ 89.045128][ C0] batadv_nc_worker+0x402/0xac0 [ 89.050009][ C0] process_scheduled_works+0x483/0x9a0 [ 89.055500][ C0] worker_thread+0x526/0x700 [ 89.060126][ C0] kthread+0x1d1/0x210 [ 89.064227][ C0] ret_from_fork+0x4b/0x60 [ 89.068668][ C0] ret_from_fork_asm+0x1a/0x30 [ 89.073458][ C0] [ 89.075785][ C0] value changed: 0x0000000000008d0f -> 0x0000000000008d10 [ 89.082904][ C0] [ 89.085235][ C0] Reported by Kernel Concurrency Sanitizer on: [ 89.091393][ C0] CPU: 0 UID: 0 PID: 5400 Comm: kworker/u8:17 Not tainted 6.10.0-syzkaller-12030-g66ebbdfdeb09 #0 [ 89.102021][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 89.112095][ C0] Workqueue: bat_events batadv_nc_worker [ 89.117763][ C0] ================================================================== [ 89.446532][ T5396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.962385][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888115309800: rx timeout, send abort [ 90.470696][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888115309800: abort rx timeout. Force session deactivation [ 91.577205][ T5396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.647689][ T5396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.697513][ T5396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.772037][ T5396] bridge_slave_1: left allmulticast mode [ 91.777819][ T5396] bridge_slave_1: left promiscuous mode [ 91.783506][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.791423][ T5396] bridge_slave_0: left allmulticast mode [ 91.797150][ T5396] bridge_slave_0: left promiscuous mode [ 91.802897][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.811024][ T5396] bridge_slave_1: left allmulticast mode [ 91.816767][ T5396] bridge_slave_1: left promiscuous mode [ 91.822456][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.830248][ T5396] bridge_slave_0: left allmulticast mode [ 91.835930][ T5396] bridge_slave_0: left promiscuous mode [ 91.841595][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.006448][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.016383][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.026547][ T5396] bond0 (unregistering): Released all slaves [ 92.035871][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.046231][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.056302][ T5396] bond0 (unregistering): Released all slaves [ 92.187289][ T5396] hsr_slave_0: left promiscuous mode [ 92.193240][ T5396] hsr_slave_1: left promiscuous mode [ 92.199325][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.207863][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.217271][ T5396] hsr_slave_0: left promiscuous mode [ 92.222897][ T5396] hsr_slave_1: left promiscuous mode [ 92.230084][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.237585][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.246358][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.253781][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.263608][ T5396] veth1_macvtap: left promiscuous mode [ 92.269273][ T5396] veth0_macvtap: left promiscuous mode [ 92.274904][ T5396] veth1_vlan: left promiscuous mode [ 92.280200][ T5396] veth0_vlan: left promiscuous mode [ 92.360881][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 92.372855][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 92.433587][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 92.444411][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 92.911092][ T5396] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.959490][ T5396] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.017154][ T5396] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.079886][ T5396] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.159073][ T5396] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.198137][ T5396] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.239095][ T5396] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.297714][ T5396] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.387830][ T5396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.439001][ T5396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.478549][ T5396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.548011][ T5396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.619502][ T5396] bridge_slave_1: left allmulticast mode [ 93.625192][ T5396] bridge_slave_1: left promiscuous mode [ 93.630823][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.638741][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.647197][ T5396] bridge_slave_1: left allmulticast mode [ 93.652833][ T5396] bridge_slave_1: left promiscuous mode [ 93.658652][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.666557][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.674692][ T5396] bridge_slave_1: left allmulticast mode [ 93.680330][ T5396] bridge_slave_1: left promiscuous mode [ 93.686028][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.693793][ T5396] bridge_slave_0: left allmulticast mode [ 93.699493][ T5396] bridge_slave_0: left promiscuous mode [ 93.705183][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.086920][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.097064][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.107364][ T5396] bond0 (unregistering): Released all slaves [ 94.115891][ T5396] bond1 (unregistering): Released all slaves [ 94.125291][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.135400][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.145289][ T5396] bond0 (unregistering): Released all slaves [ 94.153607][ T5396] bond1 (unregistering): Released all slaves [ 94.162751][ T5396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.172829][ T5396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.182635][ T5396] bond0 (unregistering): Released all slaves [ 94.238948][ T5396] tipc: Disabling bearer [ 94.244216][ T5396] tipc: Left network mode [ 94.249855][ T5396] tipc: Disabling bearer [ 94.255207][ T5396] tipc: Left network mode [ 94.477689][ T5396] hsr_slave_0: left promiscuous mode [ 94.483343][ T5396] hsr_slave_1: left promiscuous mode [ 94.489272][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.497011][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.504517][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.511946][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.521276][ T5396] hsr_slave_0: left promiscuous mode [ 94.527077][ T5396] hsr_slave_1: left promiscuous mode [ 94.532719][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.540155][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.547615][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.555101][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.563943][ T5396] hsr_slave_0: left promiscuous mode [ 94.569584][ T5396] hsr_slave_1: left promiscuous mode [ 94.575305][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.582781][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.590264][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.597706][ T5396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.608931][ T5396] veth1_macvtap: left promiscuous mode [ 94.614453][ T5396] veth0_macvtap: left promiscuous mode [ 94.619953][ T5396] veth1_vlan: left promiscuous mode [ 94.625222][ T5396] veth0_vlan: left promiscuous mode [ 94.630974][ T5396] veth1_macvtap: left promiscuous mode [ 94.636529][ T5396] veth0_macvtap: left promiscuous mode [ 94.642005][ T5396] veth1_vlan: left promiscuous mode [ 94.647300][ T5396] veth0_vlan: left promiscuous mode [ 94.652952][ T5396] veth1_macvtap: left promiscuous mode [ 94.658439][ T5396] veth0_macvtap: left promiscuous mode [ 94.663995][ T5396] veth1_vlan: left promiscuous mode [ 94.669283][ T5396] veth0_vlan: left promiscuous mode [ 94.825210][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 94.836139][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 94.899828][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 94.909609][ T5396] team0 (unregistering): Port device team_slave_0 removed [ 94.970817][ T5396] team0 (unregistering): Port device team_slave_1 removed [ 94.983041][ T5396] team0 (unregistering): Port device team_slave_0 removed