last executing test programs:

2.372501261s ago: executing program 1 (id=2803):
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2)
pipe2$9p(&(0x7f0000000040), 0x84980)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0)

2.347426803s ago: executing program 1 (id=2804):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}], 0x1, 0x2b, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000040)=0x5, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
io_uring_setup(0x68f6, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x51b, &(0x7f0000001340)="$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")

2.082526514s ago: executing program 3 (id=2811):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000001000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000780090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4000814)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

1.8861353s ago: executing program 3 (id=2814):
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000004000000000000950040000000200043bd62d3b4581f319ccbc7c635b660f2a22a807798ff6234f91a007781bc95fbe6a45a868928b4ad64a4737f979b0342b492f91716362cfe1f29c1bf884a87ea5828a568e63bf9b83bd5de4f543301010a8fe6fc936c7ece242e69e4b076ee"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18)
r3 = io_uring_setup(0x6c0a, &(0x7f0000000100)={0x0, 0x9705, 0x10, 0x0, 0x71})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006b000000760000000000000027007fffffff00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfffffffffffffeee}, 0x23)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
close(r4)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=<r7=>0x0)
timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0xc100, 0x0)

1.427066146s ago: executing program 3 (id=2817):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents(r0, &(0x7f0000002400)=""/4102, 0x1006)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x301)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00000b3000/0x3000)=nil, 0x3000, 0x200000a, 0x40010, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x104, &(0x7f0000000140)=0x6, 0x0, 0x4)
r8 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
writev(r8, &(0x7f0000000200)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671", 0xa}], 0x1)
copy_file_range(r8, &(0x7f0000000080)=0x9, r8, 0x0, 0x7, 0x0)
getrlimit(0x5, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f75"], 0x70}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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")
statfs(&(0x7f0000000000)='./file1\x00', 0x0)
getdents(r0, &(0x7f00000003c0)=""/173, 0xad)

1.415475568s ago: executing program 1 (id=2818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) (fail_nth: 2)
write$eventfd(r2, &(0x7f0000000240), 0xffffff14)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x40000)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)

964.977144ms ago: executing program 3 (id=2824):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x200, &(0x7f0000834000/0x1000)=nil)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000880), 0xc, &(0x7f0000000dc0)={&(0x7f0000000b80)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x28}}, 0x10)
syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0)

881.82345ms ago: executing program 3 (id=2827):
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)

881.18623ms ago: executing program 3 (id=2829):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
unshare(0x2000400)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000900))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
shutdown(0xffffffffffffffff, 0x1)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000008c0)={0x8, 0x4, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @pad1]}, 0x30)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, 0x8, 0x0, 0x0}}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10)
r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$lock(r7, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r7, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000})

793.060507ms ago: executing program 4 (id=2831):
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x101001)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xfb, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x42, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
setreuid(0x0, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresuid(&(0x7f0000000180)=<r5=>0x0, &(0x7f0000000300), &(0x7f0000000340)=<r6=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x0)
setfsuid(r7)
pipe2(&(0x7f0000001cc0)={<r8=>0xffffffffffffffff}, 0x800)
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, &(0x7f00000007c0))
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r9=>0x0, <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x14)
r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r12, @ANYRES32=<r13=>0xffffffffffffffff, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32=<r14=>0xffffffffffffffff, @ANYRES16=<r15=>0xffffffffffffffff, @ANYRES32, @ANYRES16=r8], 0x50, 0x24040094}, 0x80)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r15, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB, @ANYRES64, @ANYRESOCT=r6, @ANYBLOB="02000300", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r13, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r14, @ANYRESDEC, @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=0xee00], 0x94, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r16=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4, r4}, {0x2, 0x4, r5}, {0x2, 0x6, r7}, {0x2, 0x1, r9}, {0x2, 0x6, r16}, {0x2, 0x3, r17}], {0x4, 0x4}, [], {0x10, 0x7}, {0x20, 0x5}}, 0x5c, 0x0)
fsetxattr$security_capability(r0, &(0x7f00000004c0), &(0x7f0000000500)=@v3={0x3000000, [{0xe, 0x1}, {0x8, 0x1}]}, 0x18, 0x1)
r18 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r18, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r18, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)

769.399559ms ago: executing program 4 (id=2832):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x18)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000200)={0x0, 0x3e})
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x32}, {0xa, 0x4e21, 0x5, @remote, 0x4}, 0x0, {[0x9, 0x9, 0x100, 0x7, 0x3ff, 0x0, 0xff, 0x5]}}, 0x5c)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x21, &(0x7f0000000800)=@raw=[@map_fd, @tail_call, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @alu={0x4, 0x1, 0xd, 0x9, 0x9, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x4, 0x1, 0x9, 0xb, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x0, 0x4, 0x8, 0x8000, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdf8}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000580)=""/32, 0xc0f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x5, 0x2, 0x4, 0xa}, {0x0, 0x5, 0xa, 0x5}, {0x0, 0x2, 0x1, 0x6}, {0x2, 0x4, 0x8, 0x9}, {0x4, 0x2, 0x10, 0x6}], 0x10, 0x80}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
setrlimit(0x9, &(0x7f0000000380))
io_setup(0x2004, &(0x7f0000000680))

728.315732ms ago: executing program 4 (id=2834):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001740)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
cachestat(0xffffffffffffffff, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0)

719.121973ms ago: executing program 2 (id=2836):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00')
getdents(r0, &(0x7f0000002400)=""/4102, 0x1006)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
getsockopt(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000380)=""/84, &(0x7f0000001ffc)=0x54)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
r3 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x301)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]})
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f00000b3000/0x3000)=nil, 0x3000, 0x200000a, 0x40010, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x104, &(0x7f0000000140)=0x6, 0x0, 0x4)
r8 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
writev(r8, &(0x7f0000000200)=[{&(0x7f0000001900)="0a703c7c0b8e4a41a671", 0xa}], 0x1)
copy_file_range(r8, &(0x7f0000000080)=0x9, r8, 0x0, 0x7, 0x0)
getrlimit(0x5, &(0x7f00000001c0))
sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f75"], 0x70}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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")
statfs(&(0x7f0000000000)='./file1\x00', 0x0)
getdents(r0, &(0x7f00000003c0)=""/173, 0xad)

694.516695ms ago: executing program 4 (id=2837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400"], 0xfc}}, 0x0)

665.613167ms ago: executing program 4 (id=2839):
creat(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x2)

646.091758ms ago: executing program 4 (id=2841):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})
rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8)

602.386642ms ago: executing program 2 (id=2842):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)

565.568275ms ago: executing program 2 (id=2844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0})
io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x97)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014"], 0xdc}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6f, &(0x7f0000000600))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff}, './file0\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000227fd7003fedbdf25180000000c0099000080000031000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000091)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000bea9f682ab78c40000001800000018000000070000000a00000000be608ccecd45d81f8cbf73e4db391eb000000c01000000050000000000000805000000002e2e2e5f3000"], &(0x7f0000000240)=""/93, 0x37, 0x5d, 0x1, 0x81}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000001000000000000000000850000001700000085000000080000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)

536.210398ms ago: executing program 1 (id=2846):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x18)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000200)={0x0, 0x3e})
setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x32}, {0xa, 0x4e21, 0x5, @remote, 0x4}, 0x0, {[0x9, 0x9, 0x100, 0x7, 0x3ff, 0x0, 0xff, 0x5]}}, 0x5c)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x21, &(0x7f0000000800)=@raw=[@map_fd, @tail_call, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff}, @alu={0x4, 0x1, 0xd, 0x9, 0x9, 0x8, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @alu={0x4, 0x1, 0x9, 0xb, 0x1, 0xffffffffffffffe0, 0xfffffffffffffff0}, @generic={0x0, 0x4, 0x8, 0x8000, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xdf8}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0x20, &(0x7f0000000580)=""/32, 0xc0f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0x5, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x5, 0x2, 0x4, 0xa}, {0x0, 0x5, 0xa, 0x5}, {0x0, 0x2, 0x1, 0x6}, {0x2, 0x4, 0x8, 0x9}, {0x4, 0x2, 0x10, 0x6}], 0x10, 0x80}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
setrlimit(0x9, &(0x7f0000000380))
io_setup(0x2004, &(0x7f0000000680))

525.992048ms ago: executing program 1 (id=2848):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
socket$kcm(0x10, 0x2, 0x0)
remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0xe2de3e8, 0x100000)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x202980)
setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100), 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendfile(r4, r4, 0x0, 0xe0000000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140))
socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0x100000003}, 0x18)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20)
gettid()

516.184349ms ago: executing program 0 (id=2849):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400"], 0xfc}}, 0x0)

488.682091ms ago: executing program 0 (id=2850):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000040)=@v2={0x2000000, [{0x8771, 0x6}, {0xa07, 0x401}]}, 0x14, 0x0)

429.916436ms ago: executing program 0 (id=2851):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0)

421.701416ms ago: executing program 0 (id=2852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
write$P9_RLERRORu(r0, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0xfffff372}}, 0xd)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x8, 0x20, [0x9, 0x6, 0x5, 0x4], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x7, &(0x7f0000000200)=[{0x9, 0x2, 0x8, 0xff}, {0x400, 0x10, 0x10, 0x200}, {0x1, 0x80, 0x5, 0x87}, {0x7fff, 0x3, 0x89, 0x4325}, {0x1, 0x2, 0xc, 0x54e7}, {0x1, 0xb, 0x7, 0x1}, {0x3, 0x2, 0xfa, 0x4}]}, 0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={<r3=>0x0, @in6={{0xa, 0x4e20, 0x6, @mcast1, 0x3}}, 0x5, 0x6, 0x9, 0x9, 0x7}, &(0x7f0000000340)=0x98)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000380)={r3, 0x72, "371d3359996d4ea9f22b05f47fd1be9c671f1ba9672723ebba5108ec2180fcd0e9ec174bb65a51624aea4b4a1af4c868ce467554d44c049916ecd6c396678d6eb7771d40d62c1d715d0d932a06cf7f46414040351dc27dd6e672e2e9fba64a2a38e4f1f19c54929fb6373016175d32696a12"}, &(0x7f0000000400)=0x7a)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x738b2814b8d7249}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4800}, 0x20048800)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x4080, 0x0)

365.821341ms ago: executing program 0 (id=2853):
syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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")
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c3c00000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)
lsm_set_self_attr(0x0, 0x0, 0x0, 0x0)
acct(&(0x7f00000121c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000001000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000780090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x4000814)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000000)={0x3, 0x10, 0x6, 0x3, 0x0, 0x100, 0x0})
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
ftruncate(r1, 0x7)

319.822175ms ago: executing program 2 (id=2854):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x101001)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], <r2=>0x0, 0xfb, &(0x7f00000002c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x42, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
setreuid(0x0, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
getresuid(&(0x7f0000000180)=<r7=>0x0, &(0x7f0000000300), &(0x7f0000000340))
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
setfsuid(r8)
pipe2(&(0x7f0000001cc0)={<r9=>0xffffffffffffffff}, 0x800)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES16=r9], 0x50, 0x24040094}, 0x80)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r12=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4, r6}, {0x2, 0x4, r7}, {0x2, 0x6, r8}, {0x2, 0x1, r10}, {0x2, 0x6, r12}, {0x2, 0x3, r13}], {0x4, 0x4}, [], {0x10, 0x7}, {0x20, 0x5}}, 0x5c, 0x0)
r14 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)

260.945989ms ago: executing program 2 (id=2855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0x4, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x4, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x3ff, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x1, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8, 0x3, 0x71, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0xb7d, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fdf, 0x5, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x0, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]})
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd, 0x9, 0x0, 0x0, 0xf})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
fsetxattr(r7, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x3c8, 0x0)
ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x401, 0x3, 0x8, 0x2}, {0x59c, 0xf9, 0x7, 0x200}, {0x3c1, 0x10, 0x9, 0x9}, {0x7f3, 0xb, 0x7, 0x3}, {0x100, 0x15, 0x2, 0xa}, {0x88f6, 0x5, 0x5, 0x7ff}, {0x0, 0x9, 0x0, 0xfffffffc}]})
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r8)
r9 = io_uring_setup(0x3450, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
getcwd(&(0x7f00000008c0)=""/209, 0xd1)

68.280595ms ago: executing program 2 (id=2856):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x7, 0x101001)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
setreuid(0x0, 0x0)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getresuid(&(0x7f0000000180)=<r6=>0x0, &(0x7f0000000300), &(0x7f0000000340)=<r7=>0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x0)
setfsuid(r8)
pipe2(&(0x7f0000001cc0)={<r9=>0xffffffffffffffff}, 0x800)
quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, &(0x7f00000007c0))
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x14)
r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r13, @ANYRES32=<r14=>0xffffffffffffffff, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES32=<r15=>0xffffffffffffffff, @ANYRES16=<r16=>0xffffffffffffffff, @ANYRES32, @ANYRES16=r9], 0x50, 0x24040094}, 0x80)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r16, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES64, @ANYRESOCT=r7, @ANYBLOB="02000300", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r14, @ANYRES8=r12, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r15, @ANYRESDEC, @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0xee00], 0x94, 0x1)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r17=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in6=@private2}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4, r5}, {0x2, 0x4, r6}, {0x2, 0x6, r8}, {0x2, 0x1, r10}, {0x2, 0x6, r17}, {0x2, 0x3, r18}], {0x4, 0x4}, [], {0x10, 0x7}, {0x20, 0x5}}, 0x5c, 0x0)
fsetxattr$security_capability(r1, &(0x7f00000004c0), &(0x7f0000000500)=@v3={0x3000000, [{0xe, 0x1}, {0x8, 0x1}]}, 0x18, 0x1)
r19 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r19, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5)
write$cgroup_subtree(r19, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5)

939.309µs ago: executing program 0 (id=2857):
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]})
rt_sigtimedwait(&(0x7f00000000c0)={[0x7]}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8)

0s ago: executing program 1 (id=2858):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400056a)
r2 = inotify_init1(0x80000)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x65000e43)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'})
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x30)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

details
[  167.285381][   T29] audit: type=1326 audit(1755436579.231:16275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9272 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  167.291316][ T9273] EXT4-fs (loop0): free_blocks=65280
[  167.314970][   T29] audit: type=1326 audit(1755436579.231:16276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9272 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  167.320548][ T9273] EXT4-fs (loop0): dirty_blocks=1029
[  167.343938][   T29] audit: type=1326 audit(1755436579.231:16277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9272 comm="syz.0.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  167.349325][ T9273] EXT4-fs (loop0): Block reservation details
[  167.379030][ T9273] EXT4-fs (loop0): i_reserved_data_blocks=1029
[  167.411315][ T9277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.425577][ T9277] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.515078][ T9283] loop4: detected capacity change from 0 to 512
[  167.542613][ T9283] EXT4-fs: Ignoring removed orlov option
[  167.550343][ T9283] EXT4-fs: dax option not supported
[  167.558329][ T9288] siw: device registration error -23
[  167.564712][ T9277] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  167.566708][ T9290] loop1: detected capacity change from 0 to 1024
[  167.602851][ T9277] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  167.615733][ T9277] EXT4-fs (loop3): This should not happen!! Data will be lost
[  167.615733][ T9277] 
[  167.625723][ T9277] EXT4-fs (loop3): Total free blocks count 0
[  167.631833][ T9277] EXT4-fs (loop3): Free/Dirty block details
[  167.637905][ T9277] EXT4-fs (loop3): free_blocks=65280
[  167.643312][ T9277] EXT4-fs (loop3): dirty_blocks=1029
[  167.648638][ T9277] EXT4-fs (loop3): Block reservation details
[  167.654953][ T9277] EXT4-fs (loop3): i_reserved_data_blocks=1029
[  167.682202][ T9290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.697437][ T9290] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.090732][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.369956][ T9290] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  168.380895][ T9290] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2190: lblock 3 mapped to illegal pblock 3 (length 13)
[  169.277954][ T9290] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  169.290655][ T9290] EXT4-fs (loop1): This should not happen!! Data will be lost
[  169.290655][ T9290] 
[  169.547616][ T9314] loop4: detected capacity change from 0 to 512
[  169.578187][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.594402][ T9314] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  169.612197][ T9301] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  169.633285][ T9314] EXT4-fs (loop4): mount failed
[  169.645586][ T9301] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  169.674366][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.712608][ T9323] loop3: detected capacity change from 0 to 512
[  169.733235][ T9323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.746457][ T9323] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.792161][ T9323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2197: corrupted inode contents
[  169.817027][ T9323] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.2197: mark_inode_dirty error
[  169.847813][ T9323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.2197: corrupted inode contents
[  169.876896][ T9323] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.2197: mark_inode_dirty error
[  169.957079][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.062986][ T9330] loop3: detected capacity change from 0 to 164
[  170.076945][ T9332] netlink: 'syz.0.2200': attribute type 10 has an invalid length.
[  170.087834][ T9332] team0: Device ipvlan0 failed to register rx_handler
[  170.909772][ T9364] siw: device registration error -23
[  171.089537][ T9371] netlink: 'syz.2.2212': attribute type 10 has an invalid length.
[  171.108172][ T9371] team0: Device ipvlan0 failed to register rx_handler
[  171.129695][ T9374] loop4: detected capacity change from 0 to 1024
[  171.154632][ T9374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.178737][ T9374] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.313725][ T9384] netlink: 'syz.2.2216': attribute type 10 has an invalid length.
[  171.326577][ T9384] syz_tun: entered promiscuous mode
[  171.328079][ T9374] __nla_validate_parse: 28 callbacks suppressed
[  171.328101][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.343305][ T9384] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  171.348126][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.366163][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.412498][ T9384] netlink: 'syz.2.2216': attribute type 10 has an invalid length.
[  171.462440][ T9384] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.523490][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.533080][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.542692][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.553738][ T9384] team0: Port device bond0 added
[  171.557277][ T9388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9388 comm=syz.2.2216
[  171.571355][ T9387] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  171.572260][ T9388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9388 comm=syz.2.2216
[  171.652512][ T9393] loop1: detected capacity change from 0 to 512
[  171.672296][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.672847][ T9393] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  171.681403][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.681426][ T9374] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2214'.
[  171.802636][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.814133][ T9393] EXT4-fs (loop1): mount failed
[  171.835733][ T9400] loop4: detected capacity change from 0 to 512
[  171.874207][ T9400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.888944][ T9400] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.920694][ T9407] loop3: detected capacity change from 0 to 164
[  171.957434][ T9400] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  171.979418][ T9400] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  171.992704][ T9400] EXT4-fs (loop4): This should not happen!! Data will be lost
[  171.992704][ T9400] 
[  172.002826][ T9400] EXT4-fs (loop4): Total free blocks count 0
[  172.008889][ T9400] EXT4-fs (loop4): Free/Dirty block details
[  172.015000][ T9400] EXT4-fs (loop4): free_blocks=65280
[  172.020411][ T9400] EXT4-fs (loop4): dirty_blocks=1029
[  172.025791][ T9400] EXT4-fs (loop4): Block reservation details
[  172.031916][ T9400] EXT4-fs (loop4): i_reserved_data_blocks=1029
[  172.045388][ T9411] loop0: detected capacity change from 0 to 1024
[  172.053718][   T29] kauditd_printk_skb: 294 callbacks suppressed
[  172.053735][   T29] audit: type=1326 audit(1755436584.241:16570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.084068][   T29] audit: type=1326 audit(1755436584.241:16571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.117288][   T29] audit: type=1326 audit(1755436584.301:16572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.118146][ T9411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.141137][   T29] audit: type=1326 audit(1755436584.301:16573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.153394][ T9411] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.176789][   T29] audit: type=1326 audit(1755436584.301:16574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.211475][   T29] audit: type=1326 audit(1755436584.301:16575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.224172][ T9411] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2223'.
[  172.235295][   T29] audit: type=1326 audit(1755436584.301:16576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.267836][   T29] audit: type=1326 audit(1755436584.301:16577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.292409][   T29] audit: type=1326 audit(1755436584.301:16578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.316193][   T29] audit: type=1326 audit(1755436584.301:16579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9399 comm="syz.4.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  172.459823][ T9420] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  172.515444][ T9425] netlink: 'syz.1.2225': attribute type 10 has an invalid length.
[  172.531176][ T9425] ipvlan0: entered allmulticast mode
[  172.536671][ T9425] veth0_vlan: entered allmulticast mode
[  172.544863][ T9425] team0: Device ipvlan0 failed to register rx_handler
[  172.568037][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.605155][ T9427] loop1: detected capacity change from 0 to 1024
[  172.630624][ T9427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.635736][ T9434] loop0: detected capacity change from 0 to 1024
[  172.652401][ T9427] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.674668][ T9434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.694429][ T9434] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.741829][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.928862][ T9450] loop4: detected capacity change from 0 to 512
[  173.015004][ T9446] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  173.025749][ T9446] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2227: lblock 3 mapped to illegal pblock 3 (length 13)
[  173.059918][ T9453] loop3: detected capacity change from 0 to 1764
[  173.068362][ T9446] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  173.081011][ T9446] EXT4-fs (loop1): This should not happen!! Data will be lost
[  173.081011][ T9446] 
[  173.103163][ T9453] FAULT_INJECTION: forcing a failure.
[  173.103163][ T9453] name failslab, interval 1, probability 0, space 0, times 0
[  173.116022][ T9453] CPU: 1 UID: 0 PID: 9453 Comm: syz.3.2231 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  173.116059][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  173.116130][ T9453] Call Trace:
[  173.116139][ T9453]  <TASK>
[  173.116148][ T9453]  __dump_stack+0x1d/0x30
[  173.116174][ T9453]  dump_stack_lvl+0xe8/0x140
[  173.116198][ T9453]  dump_stack+0x15/0x1b
[  173.116297][ T9453]  should_fail_ex+0x265/0x280
[  173.116320][ T9453]  ? __pfx_isofs_iget5_test+0x10/0x10
[  173.116408][ T9453]  should_failslab+0x8c/0xb0
[  173.116436][ T9453]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  173.116527][ T9453]  ? isofs_alloc_inode+0x34/0x50
[  173.116564][ T9453]  ? __pfx_isofs_iget5_test+0x10/0x10
[  173.116601][ T9453]  ? __pfx_isofs_alloc_inode+0x10/0x10
[  173.116700][ T9453]  isofs_alloc_inode+0x34/0x50
[  173.116734][ T9453]  alloc_inode+0x3d/0x170
[  173.116838][ T9453]  ? __pfx_isofs_iget5_set+0x10/0x10
[  173.116873][ T9453]  iget5_locked+0x4a/0xa0
[  173.116977][ T9453]  __isofs_iget+0xdc/0x1100
[  173.117016][ T9453]  ? __bread_gfp+0x7e/0x250
[  173.117041][ T9453]  ? __list_add_valid_or_report+0x38/0xe0
[  173.117073][ T9453]  ? free_frozen_page_commit+0x6f/0x2a0
[  173.117177][ T9453]  ? _raw_spin_unlock+0x26/0x50
[  173.117215][ T9453]  ? __free_frozen_pages+0x25a/0x4e0
[  173.117277][ T9453]  isofs_lookup+0x800/0x930
[  173.117321][ T9453]  __lookup_slow+0x190/0x250
[  173.117359][ T9453]  lookup_slow+0x3c/0x60
[  173.117456][ T9453]  walk_component+0x1ec/0x220
[  173.117489][ T9453]  path_lookupat+0xfe/0x2a0
[  173.117523][ T9453]  filename_lookup+0x147/0x340
[  173.117587][ T9453]  vfs_statx+0x9d/0x390
[  173.117620][ T9453]  __se_sys_newlstat+0x69/0x280
[  173.117719][ T9453]  ? __pfx___bpf_trace_sys_enter+0x10/0x10
[  173.117750][ T9453]  ? __bpf_trace_sys_enter+0x10/0x30
[  173.117776][ T9453]  ? __traceiter_sys_enter+0x5c/0x80
[  173.117816][ T9453]  ? trace_sys_enter+0xd0/0xf0
[  173.117851][ T9453]  __x64_sys_newlstat+0x31/0x40
[  173.117881][ T9453]  x64_sys_call+0x1b88/0x2ff0
[  173.117908][ T9453]  do_syscall_64+0xd2/0x200
[  173.117940][ T9453]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  173.117968][ T9453]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  173.117999][ T9453]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.118053][ T9453] RIP: 0033:0x7fccb503ebe9
[  173.118107][ T9453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.118127][ T9453] RSP: 002b:00007fccb3a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006
[  173.118145][ T9453] RAX: ffffffffffffffda RBX: 00007fccb5265fa0 RCX: 00007fccb503ebe9
[  173.118215][ T9453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
[  173.118230][ T9453] RBP: 00007fccb3a9f090 R08: 0000000000000000 R09: 0000000000000000
[  173.118245][ T9453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.118261][ T9453] R13: 00007fccb5266038 R14: 00007fccb5265fa0 R15: 00007ffd56af1118
[  173.118284][ T9453]  </TASK>
[  173.172503][ T9444] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  173.447637][ T9427] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2227: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  173.466459][ T9427] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  173.498925][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.521930][ T9456] FAULT_INJECTION: forcing a failure.
[  173.521930][ T9456] name failslab, interval 1, probability 0, space 0, times 0
[  173.534871][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.3.2232 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  173.535011][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  173.535075][ T9456] Call Trace:
[  173.535080][ T9456]  <TASK>
[  173.535087][ T9456]  __dump_stack+0x1d/0x30
[  173.535109][ T9456]  dump_stack_lvl+0xe8/0x140
[  173.535134][ T9456]  dump_stack+0x15/0x1b
[  173.535155][ T9456]  should_fail_ex+0x265/0x280
[  173.535227][ T9456]  should_failslab+0x8c/0xb0
[  173.535258][ T9456]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  173.535298][ T9456]  ? sidtab_sid2str_get+0xa0/0x130
[  173.535326][ T9456]  kmemdup_noprof+0x2b/0x70
[  173.535432][ T9456]  sidtab_sid2str_get+0xa0/0x130
[  173.535454][ T9456]  security_sid_to_context_core+0x1eb/0x2e0
[  173.535478][ T9456]  security_sid_to_context+0x27/0x40
[  173.535527][ T9456]  selinux_lsmprop_to_secctx+0x67/0xf0
[  173.535548][ T9456]  security_lsmprop_to_secctx+0x43/0x80
[  173.535631][ T9456]  audit_log_task_context+0x77/0x190
[  173.535673][ T9456]  audit_log_task+0xf4/0x250
[  173.535712][ T9456]  audit_seccomp+0x61/0x100
[  173.535778][ T9456]  ? __seccomp_filter+0x68c/0x10d0
[  173.535799][ T9456]  __seccomp_filter+0x69d/0x10d0
[  173.535821][ T9456]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  173.535858][ T9456]  ? vfs_write+0x7e8/0x960
[  173.535960][ T9456]  __secure_computing+0x82/0x150
[  173.535982][ T9456]  syscall_trace_enter+0xcf/0x1e0
[  173.536007][ T9456]  do_syscall_64+0xac/0x200
[  173.536058][ T9456]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  173.536089][ T9456]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  173.536149][ T9456]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.536177][ T9456] RIP: 0033:0x7fccb503ebe9
[  173.536196][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.536219][ T9456] RSP: 002b:00007fccb3a9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff
[  173.536239][ T9456] RAX: ffffffffffffffda RBX: 00007fccb5265fa0 RCX: 00007fccb503ebe9
[  173.536316][ T9456] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000005
[  173.536331][ T9456] RBP: 00007fccb3a9f090 R08: 0000000000000000 R09: 0000000000000000
[  173.536373][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.536386][ T9456] R13: 00007fccb5266038 R14: 00007fccb5265fa0 R15: 00007ffd56af1118
[  173.536410][ T9456]  </TASK>
[  173.538886][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.861376][ T9466] loop4: detected capacity change from 0 to 1024
[  173.869374][ T9466] EXT4-fs: Ignoring removed bh option
[  173.877570][ T9466] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  173.896489][ T9466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e118, mo2=0000]
[  173.905520][ T9466] System zones: 0-1, 3-12
[  173.911918][ T9466] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2237: lblock 1 mapped to illegal pblock 1 (length 1)
[  173.926891][ T9466] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2237: Failed to acquire dquot type 0
[  173.953710][ T9466] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.2237: Freeing blocks not in datazone - block = 0, count = 4096
[  174.003608][ T9466] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2237: Invalid inode bitmap blk 0 in block_group 0
[  174.017452][ T9466] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  174.028139][ T8877] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1)
[  174.044229][ T9466] EXT4-fs (loop4): 1 orphan inode deleted
[  174.050272][ T8877] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0
[  174.205143][ T9466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.325348][ T9466] EXT4-fs: Ignoring removed bh option
[  174.369252][ T9466] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  174.428567][ T9482] loop1: detected capacity change from 0 to 1024
[  174.451749][ T9482] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.464181][ T9482] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.494178][ T9466] usb usb8: usbfs: process 9466 (syz.4.2237) did not claim interface 0 before use
[  174.528770][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.552023][ T9487] loop4: detected capacity change from 0 to 1024
[  174.564101][ T9487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.580361][ T9487] ext4 filesystem being mounted at /434/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.836130][ T9482] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2243: lblock 3 mapped to illegal pblock 3 (length 13)
[  174.870129][ T9482] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  174.878746][ T9497] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  174.882794][ T9482] EXT4-fs (loop1): This should not happen!! Data will be lost
[  174.882794][ T9482] 
[  174.901916][ T9491] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2243: lblock 3 mapped to illegal pblock 3 (length 1)
[  174.940549][ T9491] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2243: lblock 3 mapped to illegal pblock 3 (length 1)
[  174.965217][ T9495] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2243: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  174.986965][ T9495] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  175.015421][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.042698][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.239331][ T9527] random: crng reseeded on system resumption
[  175.350125][ T9534] loop3: detected capacity change from 0 to 1024
[  175.362670][ T9534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.375412][ T9534] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.382535][ T9538] loop1: detected capacity change from 0 to 1024
[  175.402716][ T9538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.417000][ T9538] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.454864][ T9534] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2254: lblock 3 mapped to illegal pblock 3 (length 13)
[  175.471106][ T9534] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  175.483842][ T9534] EXT4-fs (loop3): This should not happen!! Data will be lost
[  175.483842][ T9534] 
[  175.510498][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.533295][ T9538] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2255: lblock 3 mapped to illegal pblock 3 (length 13)
[  175.549480][ T9538] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  175.562206][ T9538] EXT4-fs (loop1): This should not happen!! Data will be lost
[  175.562206][ T9538] 
[  175.589447][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.606873][ T9552] loop3: detected capacity change from 0 to 164
[  175.990786][ T9566] loop4: detected capacity change from 0 to 764
[  176.005371][ T9566] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  176.111775][ T9575] netlink: 'syz.4.2266': attribute type 1 has an invalid length.
[  176.126907][ T9575] bond1: entered promiscuous mode
[  176.132391][ T9575] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.147565][ T9575] 8021q: adding VLAN 0 to HW filter on device bond1
[  176.155091][ T9575] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  176.165602][ T9575] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[  176.177600][ T9575] bond1: (slave vxcan3): making interface the new active one
[  176.185337][ T9575] vxcan3: entered promiscuous mode
[  176.192127][ T9575] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[  176.353962][ T9587] loop4: detected capacity change from 0 to 512
[  176.360941][ T9587] EXT4-fs: Ignoring removed orlov option
[  176.366641][ T9587] EXT4-fs: dax option not supported
[  176.470570][ T9595] loop3: detected capacity change from 0 to 256
[  176.480649][ T9595] vfat: Unknown parameter 'ÿÿÿÿ'
[  176.635638][ T9600] loop3: detected capacity change from 0 to 1029
[  177.041195][ T9605] siw: device registration error -23
[  177.227348][ T9607] __nla_validate_parse: 75 callbacks suppressed
[  177.227366][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.242800][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.251835][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.271679][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.280768][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.289877][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.452909][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.462274][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.471640][ T9607] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2276'.
[  177.559089][   T29] kauditd_printk_skb: 545 callbacks suppressed
[  177.559155][   T29] audit: type=1326 audit(1755436589.741:17121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.688122][   T29] audit: type=1326 audit(1755436589.781:17122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.712404][   T29] audit: type=1326 audit(1755436589.781:17123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.736240][   T29] audit: type=1326 audit(1755436589.781:17124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.760631][   T29] audit: type=1326 audit(1755436589.781:17125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.784643][   T29] audit: type=1326 audit(1755436589.781:17126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fccb5040a7c code=0x7ffc0000
[  177.808677][   T29] audit: type=1326 audit(1755436589.781:17127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.833033][   T29] audit: type=1326 audit(1755436589.781:17128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.856960][   T29] audit: type=1326 audit(1755436589.781:17129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.880772][   T29] audit: type=1326 audit(1755436589.781:17130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9613 comm="syz.3.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  177.923199][ T9627] loop1: detected capacity change from 0 to 164
[  178.430266][ T9639] loop3: detected capacity change from 0 to 1024
[  178.442044][ T9639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.455140][ T9639] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.496771][ T9639] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2288'.
[  178.561197][ T9639] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2288: lblock 3 mapped to illegal pblock 3 (length 13)
[  178.576884][ T9639] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  178.589770][ T9639] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.589770][ T9639] 
[  178.613968][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.654768][ T9657] loop3: detected capacity change from 0 to 1024
[  178.671742][ T9657] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.684170][ T9657] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.791327][ T9665] loop0: detected capacity change from 0 to 512
[  178.802950][ T9665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.816473][ T9665] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.888059][ T9665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  178.904137][ T9665] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  178.906688][ T9657] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 13)
[  178.917050][ T9665] EXT4-fs (loop0): This should not happen!! Data will be lost
[  178.917050][ T9665] 
[  178.932987][ T9657] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  178.941514][ T9665] EXT4-fs (loop0): Total free blocks count 0
[  178.957905][ T9657] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.957905][ T9657] 
[  178.968598][ T9665] EXT4-fs (loop0): Free/Dirty block details
[  178.968614][ T9665] EXT4-fs (loop0): free_blocks=65280
[  178.968627][ T9665] EXT4-fs (loop0): dirty_blocks=1029
[  178.994675][ T9667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 1)
[  178.999408][ T9665] EXT4-fs (loop0): Block reservation details
[  178.999430][ T9665] EXT4-fs (loop0): i_reserved_data_blocks=1029
[  179.027219][ T9667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 1)
[  179.044711][ T9667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 1)
[  179.088884][ T9667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 1)
[  179.104206][ T9667] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2294: lblock 3 mapped to illegal pblock 3 (length 1)
[  179.121593][ T9657] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  179.140577][ T9657] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem
[  179.177294][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.618683][ T9681] tipc: Started in network mode
[  179.623675][ T9681] tipc: Node identity 2abdcf4d5e8d, cluster identity 4711
[  179.631004][ T9681] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.867560][ T9689] loop1: detected capacity change from 0 to 164
[  179.985091][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.020052][ T9679] lo speed is unknown, defaulting to 1000
[  180.124238][ T9676] tipc: Resetting bearer <eth:syzkaller0>
[  180.147132][ T9676] tipc: Disabling bearer <eth:syzkaller0>
[  180.280807][ T9694] siw: device registration error -23
[  180.479148][ T9702] sd 0:0:1:0: device reset
[  180.593618][ T9704] netlink: 'syz.1.2306': attribute type 10 has an invalid length.
[  180.613924][ T9704] team0: Device ipvlan0 failed to register rx_handler
[  181.261189][ T9718] loop4: detected capacity change from 0 to 1024
[  181.269438][ T9720] loop3: detected capacity change from 0 to 1024
[  181.272518][ T9718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.288401][ T9718] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.296360][ T9720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.313124][ T9720] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.455854][ T9732] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2312: lblock 3 mapped to illegal pblock 3 (length 13)
[  181.471046][ T9732] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  181.483827][ T9732] EXT4-fs (loop4): This should not happen!! Data will be lost
[  181.483827][ T9732] 
[  181.497959][ T9720] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2313: lblock 3 mapped to illegal pblock 3 (length 13)
[  181.514355][ T9720] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  181.521403][ T9718] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2312: lblock 3 mapped to illegal pblock 3 (length 1)
[  181.527655][ T9720] EXT4-fs (loop3): This should not happen!! Data will be lost
[  181.527655][ T9720] 
[  181.553329][ T9718] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2312: lblock 3 mapped to illegal pblock 3 (length 1)
[  181.572906][ T9732] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2312: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  181.592991][ T9732] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  181.612115][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.649818][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.671678][ T9739] netlink: 'syz.3.2314': attribute type 10 has an invalid length.
[  181.672018][ T9740] loop1: detected capacity change from 0 to 512
[  181.685948][ T9742] loop0: detected capacity change from 0 to 1024
[  181.688179][ T9739] team0: Device ipvlan0 failed to register rx_handler
[  181.708087][ T9740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.731191][ T9742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.738021][ T9752] loop4: detected capacity change from 0 to 1024
[  181.745748][ T9750] loop3: detected capacity change from 0 to 512
[  181.750285][ T9740] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.758621][ T9750] EXT4-fs: Ignoring removed orlov option
[  181.769084][ T9742] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.812674][ T9750] EXT4-fs: dax option not supported
[  181.822498][ T9752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.844777][ T9752] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.876904][ T9757] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2318: lblock 3 mapped to illegal pblock 3 (length 13)
[  181.892769][ T9757] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  181.905666][ T9757] EXT4-fs (loop0): This should not happen!! Data will be lost
[  181.905666][ T9757] 
[  181.920646][ T9740] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  181.941303][ T9740] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  181.954220][ T9740] EXT4-fs (loop1): This should not happen!! Data will be lost
[  181.954220][ T9740] 
[  181.964069][ T9740] EXT4-fs (loop1): Total free blocks count 0
[  181.970115][ T9740] EXT4-fs (loop1): Free/Dirty block details
[  181.976246][ T9740] EXT4-fs (loop1): free_blocks=65280
[  181.981668][ T9740] EXT4-fs (loop1): dirty_blocks=1029
[  181.987159][ T9740] EXT4-fs (loop1): Block reservation details
[  181.993254][ T9740] EXT4-fs (loop1): i_reserved_data_blocks=1029
[  182.122010][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.134159][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.061859][ T9776] loop4: detected capacity change from 0 to 1024
[  183.075232][ T9775] loop0: detected capacity change from 0 to 1024
[  183.084879][ T9776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.112530][ T9776] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.141667][ T9775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.178219][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.188384][ T9775] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.236235][ T9776] __nla_validate_parse: 57 callbacks suppressed
[  183.236252][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.251918][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.261287][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.291800][ T9782] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2325: lblock 3 mapped to illegal pblock 3 (length 13)
[  183.309179][ T9775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2322'.
[  183.318416][ T9775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2322'.
[  183.327562][ T9775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2322'.
[  183.339902][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.348987][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.358221][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2325'.
[  183.379401][ T9775] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2322'.
[  183.399149][ T9782] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  183.412044][ T9782] EXT4-fs (loop4): This should not happen!! Data will be lost
[  183.412044][ T9782] 
[  183.545150][ T9794] loop3: detected capacity change from 0 to 1024
[  183.560489][   T29] kauditd_printk_skb: 728 callbacks suppressed
[  183.560524][   T29] audit: type=1400 audit(1755436595.741:17859): avc:  denied  { ioctl } for  pid=9792 comm="syz.1.2326" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=32380 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  183.562243][ T9795] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2322: lblock 3 mapped to illegal pblock 3 (length 13)
[  183.582288][ T9794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.621302][ T9794] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.636390][ T9795] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  183.648949][ T9795] EXT4-fs (loop0): This should not happen!! Data will be lost
[  183.648949][ T9795] 
[  183.684176][   T29] audit: type=1400 audit(1755436595.851:17860): avc:  denied  { map_create } for  pid=9801 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  183.703761][   T29] audit: type=1400 audit(1755436595.851:17861): avc:  denied  { perfmon } for  pid=9801 comm="syz.2.2329" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  183.725026][   T29] audit: type=1400 audit(1755436595.871:17862): avc:  denied  { read write } for  pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.749662][   T29] audit: type=1400 audit(1755436595.871:17863): avc:  denied  { open } for  pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.774180][   T29] audit: type=1400 audit(1755436595.871:17864): avc:  denied  { ioctl } for  pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  183.800245][   T29] audit: type=1400 audit(1755436595.901:17865): avc:  denied  { unmount } for  pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  183.800640][ T9775] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2322: lblock 3 mapped to illegal pblock 3 (length 1)
[  183.820656][   T29] audit: type=1400 audit(1755436595.901:17866): avc:  denied  { map_read map_write } for  pid=9801 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  183.855178][   T29] audit: type=1400 audit(1755436595.901:17867): avc:  denied  { prog_load } for  pid=9801 comm="syz.2.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  183.874590][   T29] audit: type=1400 audit(1755436595.901:17868): avc:  denied  { bpf } for  pid=9801 comm="syz.2.2329" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  183.878676][ T9786] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  183.902862][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.916352][ T9786] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  184.038785][ T9810] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2328: lblock 3 mapped to illegal pblock 3 (length 13)
[  184.054940][ T9810] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  184.067744][ T9810] EXT4-fs (loop3): This should not happen!! Data will be lost
[  184.067744][ T9810] 
[  184.120804][ T9805] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2328: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.143809][ T9805] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2328: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.172954][ T9805] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2328: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.196378][ T9822] 9pnet_fd: Insufficient options for proto=fd
[  184.206766][ T9805] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2328: lblock 3 mapped to illegal pblock 3 (length 1)
[  184.222376][ T9810] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  184.243505][ T9810] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem
[  184.295060][ T9832] loop3: detected capacity change from 0 to 512
[  184.303213][ T9832] EXT4-fs: Ignoring removed orlov option
[  184.309283][ T9832] EXT4-fs: dax option not supported
[  184.983950][ T9846] loop1: detected capacity change from 0 to 1024
[  185.036514][ T9846] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.339211][ T9908] loop1: detected capacity change from 0 to 512
[  186.361620][ T9908] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  186.376835][ T9908] EXT4-fs (loop1): mount failed
[  186.893103][ T9996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9996 comm=syz.2.2358
[  186.952592][T10006] netlink: 'syz.2.2359': attribute type 10 has an invalid length.
[  186.963709][T10006] team0: Device ipvlan0 failed to register rx_handler
[  187.140328][T10028] loop1: detected capacity change from 0 to 1024
[  187.159062][T10028] ext4 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.673457][T10037] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2365: lblock 3 mapped to illegal pblock 3 (length 13)
[  187.733067][T10037] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  187.746152][T10037] EXT4-fs (loop1): This should not happen!! Data will be lost
[  187.746152][T10037] 
[  187.758560][T10042] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2365: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.775935][T10042] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2365: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.794398][T10042] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2365: lblock 3 mapped to illegal pblock 3 (length 1)
[  187.819791][T10037] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  187.840881][T10037] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  188.238667][T10057] netlink: 'syz.1.2371': attribute type 10 has an invalid length.
[  188.258046][T10057] team0: Device ipvlan0 failed to register rx_handler
[  188.368821][T10064] loop4: detected capacity change from 0 to 512
[  188.425782][T10064] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  188.442218][T10064] EXT4-fs (loop4): mount failed
[  188.592418][   T29] kauditd_printk_skb: 332 callbacks suppressed
[  188.592442][   T29] audit: type=1326 audit(1755436600.781:18199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  188.624754][   T29] audit: type=1326 audit(1755436600.811:18200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.2379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  188.785713][   T29] audit: type=1400 audit(1755436600.971:18201): avc:  denied  { ioctl } for  pid=10075 comm="syz.2.2380" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=31643 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  188.816140][   T29] audit: type=1326 audit(1755436600.991:18202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  188.830640][T10080] loop0: detected capacity change from 0 to 1024
[  188.840377][   T29] audit: type=1326 audit(1755436600.991:18203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10066 comm="syz.1.2377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  188.883138][T10080] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  188.922509][T10080] __nla_validate_parse: 54 callbacks suppressed
[  188.922530][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  188.937955][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  188.947275][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  188.966773][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  188.975982][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  188.985497][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  189.021010][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  189.030393][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  189.039491][T10080] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2382'.
[  189.105536][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2381'.
[  189.126206][   T29] audit: type=1400 audit(1755436601.301:18204): avc:  denied  { firmware_load } for  pid=10077 comm="syz.2.2381" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1
[  189.143331][T10080] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  189.180596][T10080] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2382: lblock 3 mapped to illegal pblock 3 (length 13)
[  189.197596][T10080] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  189.210510][T10080] EXT4-fs (loop0): This should not happen!! Data will be lost
[  189.210510][T10080] 
[  189.223990][   T29] audit: type=1326 audit(1755436601.411:18205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  189.248225][   T29] audit: type=1326 audit(1755436601.411:18206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  189.249517][T10088] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2382: lblock 3 mapped to illegal pblock 3 (length 1)
[  189.273885][   T29] audit: type=1326 audit(1755436601.461:18207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  189.290874][T10080] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2382: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  189.311242][   T29] audit: type=1326 audit(1755436601.461:18208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10092 comm="syz.4.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963945ebe9 code=0x7ffc0000
[  189.331183][T10080] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  189.384519][T10095] loop4: detected capacity change from 0 to 1024
[  189.403066][T10095] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.438252][T10101] netlink: 'syz.0.2386': attribute type 10 has an invalid length.
[  189.467300][T10101] team0: Device ipvlan0 failed to register rx_handler
[  189.497304][T10106] loop3: detected capacity change from 0 to 512
[  189.515483][T10110] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2384: lblock 3 mapped to illegal pblock 3 (length 13)
[  189.531732][T10110] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  189.544418][T10110] EXT4-fs (loop4): This should not happen!! Data will be lost
[  189.544418][T10110] 
[  189.557766][T10113] loop0: detected capacity change from 0 to 512
[  189.564920][T10113] EXT4-fs: Ignoring removed orlov option
[  189.566591][T10106] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.570759][T10113] EXT4-fs: dax option not supported
[  189.712800][T10125] loop4: detected capacity change from 0 to 1024
[  189.731774][T10106] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  189.732991][T10125] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.746597][T10106] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  189.769409][T10106] EXT4-fs (loop3): This should not happen!! Data will be lost
[  189.769409][T10106] 
[  189.779486][T10106] EXT4-fs (loop3): Total free blocks count 0
[  189.785696][T10106] EXT4-fs (loop3): Free/Dirty block details
[  189.791699][T10106] EXT4-fs (loop3): free_blocks=65280
[  189.795815][T10131] loop1: detected capacity change from 0 to 1024
[  189.797254][T10106] EXT4-fs (loop3): dirty_blocks=1029
[  189.809896][T10106] EXT4-fs (loop3): Block reservation details
[  189.816148][T10106] EXT4-fs (loop3): i_reserved_data_blocks=1029
[  189.834818][T10131] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.049490][T10125] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  190.059092][T10125] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 13)
[  190.073795][T10125] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  190.086389][T10125] EXT4-fs (loop4): This should not happen!! Data will be lost
[  190.086389][T10125] 
[  190.100928][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.118973][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.134266][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.152356][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.163020][T10131] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  190.173801][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.177149][T10131] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2396: lblock 3 mapped to illegal pblock 3 (length 13)
[  190.189663][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.204232][T10131] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  190.218534][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.229655][T10131] EXT4-fs (loop1): This should not happen!! Data will be lost
[  190.229655][T10131] 
[  190.246905][T10139] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2396: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.255391][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.269066][T10139] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2396: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.284016][T10125] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2393: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.314054][T10131] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2396: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  190.334940][T10131] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  190.610831][T10154] netlink: 'syz.4.2400': attribute type 10 has an invalid length.
[  190.619115][T10154] team0: Device ipvlan0 failed to register rx_handler
[  190.689551][T10158] loop4: detected capacity change from 0 to 1024
[  190.705384][T10158] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  190.896907][T10166] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 13)
[  190.912416][T10166] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  190.924957][T10166] EXT4-fs (loop4): This should not happen!! Data will be lost
[  190.924957][T10166] 
[  190.956704][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.971392][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  190.986369][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.001120][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.017137][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.033018][T10158] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2402: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.047951][T10165] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2402: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  191.068492][T10165] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  191.090300][T10170] loop3: detected capacity change from 0 to 1024
[  191.106550][T10170] ext4 filesystem being mounted at /493/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.145850][T10176] loop4: detected capacity change from 0 to 1024
[  191.166743][T10176] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.194636][T10170] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2404: lblock 3 mapped to illegal pblock 3 (length 13)
[  191.209839][T10170] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  191.222523][T10170] EXT4-fs (loop3): This should not happen!! Data will be lost
[  191.222523][T10170] 
[  191.265978][T10185] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2406: lblock 3 mapped to illegal pblock 3 (length 13)
[  191.287846][T10185] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  191.296915][T10188] loop3: detected capacity change from 0 to 512
[  191.300367][T10185] EXT4-fs (loop4): This should not happen!! Data will be lost
[  191.300367][T10185] 
[  191.317033][T10176] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2406: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.321098][T10188] EXT4-fs: Ignoring removed orlov option
[  191.333943][T10176] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2406: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.337856][T10188] EXT4-fs: dax option not supported
[  191.358476][T10176] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2406: lblock 3 mapped to illegal pblock 3 (length 1)
[  191.374952][T10185] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  191.413893][T10185] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  191.427852][T10191] loop1: detected capacity change from 0 to 1024
[  191.480618][T10191] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.655001][T10206] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2409: lblock 3 mapped to illegal pblock 3 (length 13)
[  191.696018][T10206] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  191.708832][T10206] EXT4-fs (loop1): This should not happen!! Data will be lost
[  191.708832][T10206] 
[  191.925077][T10211] netlink: 'syz.0.2415': attribute type 10 has an invalid length.
[  191.977473][T10211] team0: Device ipvlan0 failed to register rx_handler
[  192.959914][T10241] loop3: detected capacity change from 0 to 1024
[  192.974371][T10241] EXT4-fs mount: 24 callbacks suppressed
[  192.974390][T10241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.979875][T10246] loop4: detected capacity change from 0 to 1024
[  192.984385][T10241] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.028025][T10246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.047443][T10246] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.085511][T10261] loop0: detected capacity change from 0 to 512
[  193.094179][T10261] EXT4-fs: Ignoring removed orlov option
[  193.108552][T10261] EXT4-fs: dax option not supported
[  193.112211][T10263] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2425: lblock 3 mapped to illegal pblock 3 (length 13)
[  193.164756][T10263] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  193.177323][T10263] EXT4-fs (loop3): This should not happen!! Data will be lost
[  193.177323][T10263] 
[  193.240811][T10265] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  193.256186][T10265] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2427: lblock 3 mapped to illegal pblock 3 (length 13)
[  193.272447][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.276788][T10265] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  193.294146][T10265] EXT4-fs (loop4): This should not happen!! Data will be lost
[  193.294146][T10265] 
[  193.321681][T10271] loop3: detected capacity change from 0 to 1024
[  193.413157][T10271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.426530][T10246] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2427: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.442608][T10271] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.454738][T10265] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2427: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  193.493975][T10265] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  193.732612][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.750778][T10032] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  193.788295][T10271] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2434: lblock 3 mapped to illegal pblock 3 (length 13)
[  193.851014][T10271] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  193.863550][T10271] EXT4-fs (loop3): This should not happen!! Data will be lost
[  193.863550][T10271] 
[  193.876809][T10287] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2434: lblock 3 mapped to illegal pblock 3 (length 1)
[  193.893175][T10287] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2434: lblock 3 mapped to illegal pblock 3 (length 1)
[  194.010968][T10279] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2434: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  194.046916][   T29] kauditd_printk_skb: 282 callbacks suppressed
[  194.046934][   T29] audit: type=1326 audit(1755436606.231:18491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.096224][T10293] loop1: detected capacity change from 0 to 512
[  194.121903][T10279] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem
[  194.142191][T10293] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.169098][   T29] audit: type=1326 audit(1755436606.271:18492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.193290][   T29] audit: type=1326 audit(1755436606.271:18493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.217096][   T29] audit: type=1326 audit(1755436606.271:18494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.241558][   T29] audit: type=1326 audit(1755436606.271:18495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.265577][   T29] audit: type=1326 audit(1755436606.271:18496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.289899][   T29] audit: type=1326 audit(1755436606.271:18497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.313820][   T29] audit: type=1326 audit(1755436606.271:18498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.337810][   T29] audit: type=1326 audit(1755436606.271:18499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.362082][   T29] audit: type=1326 audit(1755436606.271:18500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10292 comm="syz.1.2441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  194.397479][T10293] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.435799][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.464581][T10293] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  194.482051][T10293] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  194.495041][T10293] EXT4-fs (loop1): This should not happen!! Data will be lost
[  194.495041][T10293] 
[  194.504996][T10293] EXT4-fs (loop1): Total free blocks count 0
[  194.511062][T10293] EXT4-fs (loop1): Free/Dirty block details
[  194.517410][T10293] EXT4-fs (loop1): free_blocks=65280
[  194.522906][T10293] EXT4-fs (loop1): dirty_blocks=1029
[  194.528217][T10293] EXT4-fs (loop1): Block reservation details
[  194.534404][T10293] EXT4-fs (loop1): i_reserved_data_blocks=1029
[  194.812844][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.957210][T10319] loop0: detected capacity change from 0 to 1024
[  194.970520][T10320] sd 0:0:1:0: device reset
[  194.978562][T10323] loop1: detected capacity change from 0 to 164
[  194.992276][T10319] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.005444][T10319] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.044181][T10319] __nla_validate_parse: 101 callbacks suppressed
[  195.044276][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.060574][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.069789][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.101735][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.110802][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.120000][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.193313][T10336] siw: device registration error -23
[  195.268491][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.275442][T10334] sd 0:0:1:0: device reset
[  195.277622][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.291364][T10319] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2451'.
[  195.328643][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.347884][T10347] siw: device registration error -23
[  195.358838][T10349] loop0: detected capacity change from 0 to 512
[  195.367715][T10349] EXT4-fs: Ignoring removed orlov option
[  195.375427][T10349] EXT4-fs: dax option not supported
[  195.445799][T10355] FAULT_INJECTION: forcing a failure.
[  195.445799][T10355] name failslab, interval 1, probability 0, space 0, times 0
[  195.458754][T10355] CPU: 0 UID: 0 PID: 10355 Comm: syz.4.2462 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  195.458829][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  195.458844][T10355] Call Trace:
[  195.458851][T10355]  <TASK>
[  195.458859][T10355]  __dump_stack+0x1d/0x30
[  195.458880][T10355]  dump_stack_lvl+0xe8/0x140
[  195.458901][T10355]  dump_stack+0x15/0x1b
[  195.458923][T10355]  should_fail_ex+0x265/0x280
[  195.458989][T10355]  should_failslab+0x8c/0xb0
[  195.459028][T10355]  kmem_cache_alloc_node_noprof+0x57/0x320
[  195.459202][T10355]  ? __alloc_skb+0x101/0x320
[  195.459245][T10355]  __alloc_skb+0x101/0x320
[  195.459279][T10355]  netlink_alloc_large_skb+0xba/0xf0
[  195.459344][T10355]  netlink_sendmsg+0x3cf/0x6b0
[  195.459376][T10355]  ? __pfx_netlink_sendmsg+0x10/0x10
[  195.459405][T10355]  __sock_sendmsg+0x142/0x180
[  195.459439][T10355]  ____sys_sendmsg+0x31e/0x4e0
[  195.459513][T10355]  ___sys_sendmsg+0x17b/0x1d0
[  195.459552][T10355]  __x64_sys_sendmsg+0xd4/0x160
[  195.459628][T10355]  x64_sys_call+0x191e/0x2ff0
[  195.459705][T10355]  do_syscall_64+0xd2/0x200
[  195.459731][T10355]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  195.459761][T10355]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  195.459796][T10355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.459817][T10355] RIP: 0033:0x7f963945ebe9
[  195.459886][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  195.459907][T10355] RSP: 002b:00007f9637ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  195.459931][T10355] RAX: ffffffffffffffda RBX: 00007f9639685fa0 RCX: 00007f963945ebe9
[  195.459957][T10355] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004
[  195.459974][T10355] RBP: 00007f9637ec7090 R08: 0000000000000000 R09: 0000000000000000
[  195.459987][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  195.459999][T10355] R13: 00007f9639686038 R14: 00007f9639685fa0 R15: 00007ffd40df8b18
[  195.460021][T10355]  </TASK>
[  195.761852][T10366] sd 0:0:1:0: device reset
[  195.963658][T10375] loop3: detected capacity change from 0 to 1024
[  195.983519][T10375] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.021191][T10369] sd 0:0:1:0: device reset
[  196.026296][T10375] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.083212][T10375] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2469'.
[  196.477240][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.139594][T10404] sd 0:0:1:0: device reset
[  197.429908][T10426] loop4: detected capacity change from 0 to 1024
[  197.442334][T10426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.456214][T10426] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.468877][T10430] siw: device registration error -23
[  197.603577][T10426] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  197.617829][T10426] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2488: lblock 3 mapped to illegal pblock 3 (length 13)
[  197.632690][T10426] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  197.645444][T10426] EXT4-fs (loop4): This should not happen!! Data will be lost
[  197.645444][T10426] 
[  197.664833][T10426] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2488: lblock 3 mapped to illegal pblock 3 (length 1)
[  197.687560][T10426] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2488: lblock 3 mapped to illegal pblock 3 (length 1)
[  197.704036][T10426] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2488: lblock 3 mapped to illegal pblock 3 (length 1)
[  197.719889][T10426] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2488: lblock 3 mapped to illegal pblock 3 (length 1)
[  197.739194][T10458] loop0: detected capacity change from 0 to 512
[  197.746562][T10456] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  197.748858][T10458] EXT4-fs: Ignoring removed orlov option
[  197.767282][T10456] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  197.779769][T10458] EXT4-fs: dax option not supported
[  197.832131][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.063877][T10471] siw: device registration error -23
[  198.713723][T10491] loop4: detected capacity change from 0 to 1024
[  198.732749][T10491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.746708][T10491] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.996028][T10499] siw: device registration error -23
[  199.099571][   T29] kauditd_printk_skb: 283 callbacks suppressed
[  199.099589][   T29] audit: type=1326 audit(1755436611.281:18784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.147770][T10491] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2508: lblock 3 mapped to illegal pblock 3 (length 13)
[  199.179677][T10491] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  199.192271][T10491] EXT4-fs (loop4): This should not happen!! Data will be lost
[  199.192271][T10491] 
[  199.208410][   T29] audit: type=1326 audit(1755436611.321:18785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.232896][   T29] audit: type=1326 audit(1755436611.321:18786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.257285][   T29] audit: type=1326 audit(1755436611.321:18787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.281274][   T29] audit: type=1326 audit(1755436611.321:18788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.305133][   T29] audit: type=1326 audit(1755436611.321:18789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.328898][   T29] audit: type=1326 audit(1755436611.321:18790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.352583][   T29] audit: type=1326 audit(1755436611.321:18791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.376125][   T29] audit: type=1326 audit(1755436611.321:18792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.400406][   T29] audit: type=1326 audit(1755436611.321:18793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10505 comm="syz.3.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb503ebe9 code=0x7ffc0000
[  199.426411][T10513] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2508: lblock 3 mapped to illegal pblock 3 (length 1)
[  199.427072][T10512] 9pnet_fd: Insufficient options for proto=fd
[  199.543458][T10491] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2508: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  199.589796][T10491] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem
[  199.623282][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.696159][T10532] loop1: detected capacity change from 0 to 512
[  199.711560][T10532] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  199.727939][T10532] EXT4-fs (loop1): mount failed
[  199.751335][T10540] loop4: detected capacity change from 0 to 512
[  199.758373][T10540] EXT4-fs: Ignoring removed orlov option
[  199.764431][T10540] EXT4-fs: dax option not supported
[  200.166764][T10544] loop3: detected capacity change from 0 to 1024
[  200.232777][T10544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.275771][T10544] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.414930][T10544] __nla_validate_parse: 74 callbacks suppressed
[  200.414953][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.430519][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.439632][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.655586][T10562] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  200.683779][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.692948][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.702169][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.713688][T10564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10564 comm=syz.1.2533
[  200.787188][T10562] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2527: lblock 3 mapped to illegal pblock 3 (length 13)
[  200.821504][T10562] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  200.834099][T10562] EXT4-fs (loop3): This should not happen!! Data will be lost
[  200.834099][T10562] 
[  200.848154][T10572] siw: device registration error -23
[  200.885757][T10569] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.2527: lblock 3 mapped to illegal pblock 3 (length 1)
[  200.914625][T10576] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.2527: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  200.935228][T10579] sd 0:0:1:0: device reset
[  200.942614][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.951827][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.960995][T10544] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2527'.
[  200.972446][T10576] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem
[  201.088499][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.453152][T10590] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2543'.
[  201.652467][T10607] loop4: detected capacity change from 0 to 1024
[  201.672619][T10607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.694829][T10607] ext4 filesystem being mounted at /509/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.695533][T10609] loop3: detected capacity change from 0 to 1024
[  201.766244][T10609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  201.805287][T10607] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  201.816325][T10607] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 13)
[  201.833022][T10607] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  201.845992][T10607] EXT4-fs (loop4): This should not happen!! Data will be lost
[  201.845992][T10607] 
[  201.864378][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.879491][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.896105][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.912153][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.927342][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.948795][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.964081][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.964103][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  201.964370][T10607] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: block 3: comm syz.4.2548: lblock 3 mapped to illegal pblock 3 (length 1)
[  202.009558][T10633] loop3: detected capacity change from 0 to 1024
[  202.017987][T10630] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2548: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  202.052391][T10633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.071318][T10635] sd 0:0:1:0: device reset
[  202.091496][T10633] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.113551][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.257154][T10653] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2554: lblock 3 mapped to illegal pblock 3 (length 13)
[  202.273501][T10653] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  202.286253][T10653] EXT4-fs (loop3): This should not happen!! Data will be lost
[  202.286253][T10653] 
[  202.315117][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.339384][T10672] FAULT_INJECTION: forcing a failure.
[  202.339384][T10672] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  202.353475][T10672] CPU: 0 UID: 0 PID: 10672 Comm: syz.3.2568 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  202.353539][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  202.353553][T10672] Call Trace:
[  202.353572][T10672]  <TASK>
[  202.353581][T10672]  __dump_stack+0x1d/0x30
[  202.353608][T10672]  dump_stack_lvl+0xe8/0x140
[  202.353633][T10672]  dump_stack+0x15/0x1b
[  202.353718][T10672]  should_fail_ex+0x265/0x280
[  202.353774][T10672]  should_fail_alloc_page+0xf2/0x100
[  202.353809][T10672]  __alloc_frozen_pages_noprof+0xff/0x360
[  202.353895][T10672]  alloc_pages_mpol+0xb3/0x250
[  202.353942][T10672]  alloc_pages_noprof+0x90/0x130
[  202.354038][T10672]  __pmd_alloc+0x47/0x470
[  202.354062][T10672]  handle_mm_fault+0x19d4/0x2c20
[  202.354088][T10672]  ? __rcu_read_unlock+0x4f/0x70
[  202.354124][T10672]  do_user_addr_fault+0x3fe/0x1090
[  202.354222][T10672]  exc_page_fault+0x62/0xa0
[  202.354253][T10672]  asm_exc_page_fault+0x26/0x30
[  202.354279][T10672] RIP: 0010:__put_user_4+0xd/0x20
[  202.354308][T10672] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[  202.354349][T10672] RSP: 0018:ffffc90002ea3de8 EFLAGS: 00050202
[  202.354364][T10672] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000380
[  202.354380][T10672] RDX: 00000000000003de RSI: 0000000000000000 RDI: ffff8881000651ec
[  202.354395][T10672] RBP: 0000000000004b3b R08: ffff888103150000 R09: 0000000000000000
[  202.354408][T10672] R10: 0000000080085610 R11: 0000000000000000 R12: 0000000000004b3b
[  202.354421][T10672] R13: ffff8881040f5000 R14: ffff888100065000 R15: 0000200000000380
[  202.354493][T10672]  vt_ioctl+0x35c/0x1880
[  202.354531][T10672]  ? tty_jobctrl_ioctl+0x29e/0x810
[  202.354561][T10672]  tty_ioctl+0x7de/0xb80
[  202.354596][T10672]  ? __pfx_tty_ioctl+0x10/0x10
[  202.354682][T10672]  __se_sys_ioctl+0xcb/0x140
[  202.354718][T10672]  __x64_sys_ioctl+0x43/0x50
[  202.354753][T10672]  x64_sys_call+0x1816/0x2ff0
[  202.354793][T10672]  do_syscall_64+0xd2/0x200
[  202.354825][T10672]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  202.354854][T10672]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  202.354923][T10672]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.354991][T10672] RIP: 0033:0x7fccb503ebe9
[  202.355006][T10672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  202.355027][T10672] RSP: 002b:00007fccb3a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.355102][T10672] RAX: ffffffffffffffda RBX: 00007fccb5265fa0 RCX: 00007fccb503ebe9
[  202.355115][T10672] RDX: 0000200000000380 RSI: 0000000000004b3b RDI: 0000000000000003
[  202.355148][T10672] RBP: 00007fccb3a9f090 R08: 0000000000000000 R09: 0000000000000000
[  202.355161][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  202.355177][T10672] R13: 00007fccb5266038 R14: 00007fccb5265fa0 R15: 00007ffd56af1118
[  202.355199][T10672]  </TASK>
[  202.393574][T10670] lo speed is unknown, defaulting to 1000
[  202.405028][T10673] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿœ†q𠉱D!ˆ@×Lç2VÌ&€s…œõP’ÏÂ]tX['
[  202.744933][T10688] netlink: 'syz.4.2577': attribute type 10 has an invalid length.
[  202.755279][T10688] team0: Device ipvlan0 failed to register rx_handler
[  202.806402][T10693] sd 0:0:1:0: device reset
[  202.827389][T10695] loop1: detected capacity change from 0 to 1024
[  202.846851][T10695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.859640][T10695] ext4 filesystem being mounted at /463/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.926712][T10705] sd 0:0:1:0: device reset
[  202.948457][T10709] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2579: lblock 3 mapped to illegal pblock 3 (length 13)
[  202.988097][T10709] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  203.001101][T10709] EXT4-fs (loop1): This should not happen!! Data will be lost
[  203.001101][T10709] 
[  203.080479][T10713] loop4: detected capacity change from 0 to 1024
[  203.100850][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.102379][T10713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.171565][T10723] 9pnet_fd: Insufficient options for proto=fd
[  203.226454][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.374803][T10744] SELinux:  Context @ is not valid (left unmapped).
[  203.592148][T10767] loop1: detected capacity change from 0 to 1024
[  203.613863][T10767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  203.637630][T10770] loop0: detected capacity change from 0 to 1024
[  203.644280][T10767] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.661889][T10770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.797750][T10786] siw: device registration error -23
[  203.819274][T10787] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2604: lblock 3 mapped to illegal pblock 3 (length 13)
[  203.848392][T10787] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  203.861160][T10787] EXT4-fs (loop1): This should not happen!! Data will be lost
[  203.861160][T10787] 
[  203.871958][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.893483][T10767] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2604: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.914246][T10767] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2604: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.935267][T10767] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2604: lblock 3 mapped to illegal pblock 3 (length 1)
[  203.951481][T10785] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2604: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  203.971966][T10785] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  203.991525][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.034529][T10800] sd 0:0:1:0: device reset
[  204.050930][T10802] netlink: 'syz.2.2615': attribute type 10 has an invalid length.
[  204.059500][T10802] team0: Device ipvlan0 failed to register rx_handler
[  204.083855][T10806] pimreg: entered allmulticast mode
[  204.099389][T10806] loop1: detected capacity change from 0 to 512
[  204.106385][T10806] EXT4-fs: Ignoring removed bh option
[  204.113674][T10806] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  204.122990][T10806] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  204.153710][T10806] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  204.170563][T10806] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  204.181187][T10806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.181375][   T29] kauditd_printk_skb: 429 callbacks suppressed
[  204.181395][   T29] audit: type=1400 audit(1755436616.361:19222): avc:  denied  { sys_module } for  pid=10813 comm="syz.3.2621" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  204.262665][T10821] loop0: detected capacity change from 0 to 1024
[  204.271686][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.287284][   T29] audit: type=1326 audit(1755436616.431:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10813 comm="syz.3.2621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fccb503ebe9 code=0x0
[  204.311014][   T29] audit: type=1326 audit(1755436616.441:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.335116][   T29] audit: type=1326 audit(1755436616.441:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.358869][   T29] audit: type=1326 audit(1755436616.441:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.382891][   T29] audit: type=1326 audit(1755436616.441:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.407596][   T29] audit: type=1326 audit(1755436616.441:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.433079][   T29] audit: type=1326 audit(1755436616.441:19229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.433979][T10830] netlink: 'syz.2.2628': attribute type 10 has an invalid length.
[  204.457844][   T29] audit: type=1326 audit(1755436616.441:19230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.477539][T10821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.489826][   T29] audit: type=1326 audit(1755436616.441:19231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef46a9ebe9 code=0x7ffc0000
[  204.543867][T10830] team0: Device ipvlan0 failed to register rx_handler
[  204.656242][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.767735][T10852] sd 0:0:1:0: device reset
[  204.905245][T10864] loop1: detected capacity change from 0 to 1024
[  204.932258][T10864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.946706][T10864] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.151947][T10873] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  205.246440][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.331220][T10899] sd 0:0:1:0: device reset
[  205.478137][T10915] siw: device registration error -23
[  205.533355][T10921] netlink: 'syz.2.2660': attribute type 10 has an invalid length.
[  205.543122][T10921] team0: Device ipvlan0 failed to register rx_handler
[  205.587250][T10928] loop0: detected capacity change from 0 to 1024
[  205.605445][T10928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.618622][T10928] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.670349][T10928] __nla_validate_parse: 74 callbacks suppressed
[  205.670370][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.686204][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.695210][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.709041][T10941] 9pnet_fd: Insufficient options for proto=fd
[  205.749352][T10946] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2663: lblock 3 mapped to illegal pblock 3 (length 13)
[  205.750240][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.773498][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.782706][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.790896][T10946] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  205.805225][T10946] EXT4-fs (loop0): This should not happen!! Data will be lost
[  205.805225][T10946] 
[  205.849757][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.858982][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.868227][T10928] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2663'.
[  205.909295][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.945737][T10960] netlink: 'syz.2.2674': attribute type 10 has an invalid length.
[  205.955517][T10960] team0: Device ipvlan0 failed to register rx_handler
[  205.976243][T10970] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2676'.
[  205.998049][T10965] sd 0:0:1:0: device reset
[  206.065852][T10980] sd 0:0:1:0: device reset
[  206.134342][T10995] siw: device registration error -23
[  206.186625][T11005] sd 0:0:1:0: device reset
[  206.275730][T11013] loop1: detected capacity change from 0 to 1024
[  206.297242][T11013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.324175][T11019] siw: device registration error -23
[  206.435134][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.541859][T11067] loop4: detected capacity change from 0 to 164
[  206.552945][T11064] loop0: detected capacity change from 0 to 1024
[  206.602330][T11064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  206.615927][T11064] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  206.666654][T11081] 9pnet_fd: Insufficient options for proto=fd
[  206.702785][T11087] netlink: 'syz.1.2732': attribute type 10 has an invalid length.
[  206.711380][T11087] team0: Device ipvlan0 failed to register rx_handler
[  206.798972][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.871757][T11117] netlink: 'syz.0.2744': attribute type 10 has an invalid length.
[  206.881003][T11117] team0: Device ipvlan0 failed to register rx_handler
[  206.976736][T11128] loop1: detected capacity change from 0 to 1024
[  207.012074][T11128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.191307][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.249654][T11144] netlink: 'syz.0.2756': attribute type 10 has an invalid length.
[  207.282775][T11144] team0: Device ipvlan0 failed to register rx_handler
[  207.417881][T11151] loop1: detected capacity change from 0 to 1024
[  207.500389][T11151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.513442][T11151] ext4 filesystem being mounted at /504/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.528246][T11161] sd 0:0:1:0: device reset
[  207.618945][T11170] loop4: detected capacity change from 0 to 1024
[  207.766289][T11170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.794222][T11151] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.2755: lblock 3 mapped to illegal pblock 3 (length 13)
[  207.818195][T11151] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  207.831009][T11151] EXT4-fs (loop1): This should not happen!! Data will be lost
[  207.831009][T11151] 
[  207.843322][T11151] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2755: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.870886][T11151] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2755: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.886392][T11151] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2755: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.901972][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.915947][T11151] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #15: block 3: comm syz.1.2755: lblock 3 mapped to illegal pblock 3 (length 1)
[  207.931256][T11178] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2755: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  207.954967][T11178] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem
[  208.113163][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.126068][T11197] netlink: 'syz.4.2771': attribute type 10 has an invalid length.
[  208.136559][T11197] team0: Device ipvlan0 failed to register rx_handler
[  208.182904][T11203] loop0: detected capacity change from 0 to 512
[  208.203020][T11203] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  208.223665][T11203] EXT4-fs (loop0): mount failed
[  208.257653][T11212] loop4: detected capacity change from 0 to 1024
[  208.277627][T11215] loop1: detected capacity change from 0 to 1024
[  208.311475][T11212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.326502][T11215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.337118][T11212] ext4 filesystem being mounted at /557/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  208.353091][ T4465] bond0: (slave syz_tun): Releasing backup interface
[  208.424846][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.483579][T11221] lo speed is unknown, defaulting to 1000
[  208.490378][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.528681][T11240] netlink: 'syz.4.2784': attribute type 10 has an invalid length.
[  208.549830][T11240] team0: Device ipvlan0 failed to register rx_handler
[  208.589462][T11221] chnl_net:caif_netlink_parms(): no params data found
[  208.597125][T11248] sd 0:0:1:0: device reset
[  208.632518][T11246] loop1: detected capacity change from 0 to 1024
[  208.653619][T11246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.675298][T11221] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.682532][T11221] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.690203][T11221] bridge_slave_0: entered allmulticast mode
[  208.696773][T11221] bridge_slave_0: entered promiscuous mode
[  208.703913][T11221] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.711023][T11221] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.718323][T11221] bridge_slave_1: entered allmulticast mode
[  208.725096][T11221] bridge_slave_1: entered promiscuous mode
[  208.762171][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.773794][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.798855][T11262] loop4: detected capacity change from 0 to 512
[  208.808445][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.808984][T11221] team0: Port device team_slave_0 added
[  208.824757][   T51] bridge_slave_1: left allmulticast mode
[  208.830871][   T51] bridge_slave_1: left promiscuous mode
[  208.836990][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.845700][T11262] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  208.847065][   T51] bridge_slave_0: left allmulticast mode
[  208.853929][T11262] EXT4-fs (loop4): orphan cleanup on readonly fs
[  208.859623][   T51] bridge_slave_0: left promiscuous mode
[  208.871787][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.873323][T11262] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2791: corrupted inode contents
[  208.899938][T11262] EXT4-fs (loop4): Remounting filesystem read-only
[  208.906952][T11262] EXT4-fs (loop4): 1 truncate cleaned up
[  208.913114][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  208.923744][   T31] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  208.934966][   T31] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[  208.954622][   T51] 0ªî{X¹¦ (unregistering): left promiscuous mode
[  208.956138][T11262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  209.012391][T11274] netlink: 'syz.0.2796': attribute type 10 has an invalid length.
[  209.022366][   T51] team0: Port device bond0 removed
[  209.033148][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.047216][T11276] sd 0:0:1:0: device reset
[  209.052131][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.061979][   T51] bond0 (unregistering): Released all slaves
[  209.081032][T11221] team0: Port device team_slave_1 added
[  209.094167][T11274] team0: Device ipvlan0 failed to register rx_handler
[  209.134086][   T51] tipc: Disabling bearer <udp:£>
[  209.139440][   T51] tipc: Left network mode
[  209.144546][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.151629][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.178124][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.189770][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.197361][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.224737][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.250494][   T29] kauditd_printk_skb: 968 callbacks suppressed
[  209.250566][   T29] audit: type=1400 audit(1755436621.441:20193): avc:  denied  { write } for  pid=11280 comm="syz.0.2799" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  209.304217][   T51] batadv_slave_1: left promiscuous mode
[  209.312272][   T51] hsr_slave_0: left promiscuous mode
[  209.318128][   T51] hsr_slave_1: left promiscuous mode
[  209.324381][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.332145][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.344185][   T29] audit: type=1326 audit(1755436621.531:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.368223][   T29] audit: type=1326 audit(1755436621.531:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.393031][   T29] audit: type=1326 audit(1755436621.531:20196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.417072][   T29] audit: type=1326 audit(1755436621.531:20197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.441187][   T29] audit: type=1326 audit(1755436621.531:20198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.465512][   T29] audit: type=1326 audit(1755436621.581:20199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.490339][   T29] audit: type=1326 audit(1755436621.581:20200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.514370][   T29] audit: type=1326 audit(1755436621.581:20201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.538765][   T29] audit: type=1326 audit(1755436621.581:20202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11282 comm="syz.1.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94900eebe9 code=0x7ffc0000
[  209.620345][ T8879] smc: removing ib device syz1
[  209.643558][   T51] team0 (unregistering): Port device team_slave_1 removed
[  209.653218][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.665803][T11288] loop0: detected capacity change from 0 to 1024
[  209.676081][   T51] team0 (unregistering): Port device team_slave_0 removed
[  209.690697][T11288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.764646][T11296] loop4: detected capacity change from 0 to 1024
[  209.798868][T11221] hsr_slave_0: entered promiscuous mode
[  209.807638][T11296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.822395][T11221] hsr_slave_1: entered promiscuous mode
[  209.828607][T11221] debugfs: 'hsr0' already exists in 'hsr'
[  209.834505][T11221] Cannot create hsr debugfs directory
[  209.845623][T11303] loop1: detected capacity change from 0 to 512
[  209.906412][T11303] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  209.926458][T11303] EXT4-fs (loop1): mount failed
[  209.935757][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.955812][T11310] siw: device registration error -23
[  209.984784][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.033621][T11318] sd 0:0:1:0: device reset
[  210.045469][T11320] loop3: detected capacity change from 0 to 1024
[  210.061690][T11320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.086023][T11320] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.141659][T11329] loop0: detected capacity change from 0 to 1024
[  210.152147][T11329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.172493][T11320] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.2811: lblock 3 mapped to illegal pblock 3 (length 13)
[  210.187316][T11320] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  210.200155][T11320] EXT4-fs (loop3): This should not happen!! Data will be lost
[  210.200155][T11320] 
[  210.293818][T11338] loop0: detected capacity change from 0 to 1024
[  210.305664][T11221] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  210.317885][T11221] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  210.328111][T11221] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  210.337776][T11221] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  210.395810][T11221] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.414032][T11349] loop0: detected capacity change from 0 to 1024
[  210.414665][T11221] 8021q: adding VLAN 0 to HW filter on device team0
[  210.433006][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.433270][T11349] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  210.441176][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.452159][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.467010][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.577817][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.732353][T11366] loop3: detected capacity change from 0 to 1024
[  210.736889][T11221] veth0_vlan: entered promiscuous mode
[  210.747873][T11349] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  210.748759][T11368] FAULT_INJECTION: forcing a failure.
[  210.748759][T11368] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  210.768823][T11368] CPU: 1 UID: 0 PID: 11368 Comm: syz.1.2818 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  210.768925][T11368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  210.769021][T11368] Call Trace:
[  210.769028][T11368]  <TASK>
[  210.769036][T11368]  __dump_stack+0x1d/0x30
[  210.769062][T11368]  dump_stack_lvl+0xe8/0x140
[  210.769086][T11368]  dump_stack+0x15/0x1b
[  210.769106][T11368]  should_fail_ex+0x265/0x280
[  210.769219][T11368]  should_fail_alloc_page+0xf2/0x100
[  210.769249][T11368]  __alloc_frozen_pages_noprof+0xff/0x360
[  210.769291][T11368]  alloc_pages_mpol+0xb3/0x250
[  210.769330][T11368]  folio_alloc_mpol_noprof+0x39/0x80
[  210.769395][T11368]  shmem_get_folio_gfp+0x3cf/0xd60
[  210.769450][T11368]  ? simple_xattr_get+0xb9/0x120
[  210.769489][T11368]  shmem_write_begin+0xa8/0x190
[  210.769535][T11368]  generic_perform_write+0x181/0x490
[  210.769639][T11368]  shmem_file_write_iter+0xc5/0xf0
[  210.769668][T11368]  iter_file_splice_write+0x669/0x9e0
[  210.769751][T11368]  ? __pfx_iter_file_splice_write+0x10/0x10
[  210.769852][T11368]  do_splice+0x974/0x10b0
[  210.769875][T11368]  ? bpf_trace_run2+0xf5/0x1c0
[  210.769903][T11368]  ? __rcu_read_unlock+0x4f/0x70
[  210.769971][T11368]  ? __fget_files+0x184/0x1c0
[  210.770003][T11368]  __se_sys_splice+0x26c/0x3a0
[  210.770031][T11368]  __x64_sys_splice+0x78/0x90
[  210.770062][T11368]  x64_sys_call+0x28a3/0x2ff0
[  210.770090][T11368]  do_syscall_64+0xd2/0x200
[  210.770171][T11368]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  210.770201][T11368]  ? irqentry_exit_to_user_mode+0x7e/0xa0
[  210.770285][T11368]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.770312][T11368] RIP: 0033:0x7f94900eebe9
[  210.770331][T11368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.770373][T11368] RSP: 002b:00007f948eb4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  210.770397][T11368] RAX: ffffffffffffffda RBX: 00007f9490315fa0 RCX: 00007f94900eebe9
[  210.770413][T11368] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000005
[  210.770507][T11368] RBP: 00007f948eb4f090 R08: 00000000088000cc R09: 0000000000000000
[  210.770520][T11368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  210.770534][T11368] R13: 00007f9490316038 R14: 00007f9490315fa0 R15: 00007ffd7c457868
[  210.770554][T11368]  </TASK>
[  210.778417][T11221] veth1_vlan: entered promiscuous mode
[  211.036500][T11221] veth0_macvtap: entered promiscuous mode
[  211.044844][T11221] veth1_macvtap: entered promiscuous mode
[  211.056708][T11221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.072156][T11221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.085681][   T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.100945][   T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.117365][   T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.146007][   T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.258851][T11398] __nla_validate_parse: 75 callbacks suppressed
[  211.258874][T11398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2780'.
[  211.435390][T11414] loop2: detected capacity change from 0 to 1024
[  211.522899][T11428] siw: device registration error -23
[  211.594546][T11440] loop1: detected capacity change from 0 to 512
[  211.604630][T11443] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2844'.
[  211.621311][T11440] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.671593][T11440] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  211.689327][T11440] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  211.702234][T11440] EXT4-fs (loop1): This should not happen!! Data will be lost
[  211.702234][T11440] 
[  211.712259][T11440] EXT4-fs (loop1): Total free blocks count 0
[  211.718650][T11440] EXT4-fs (loop1): Free/Dirty block details
[  211.724635][T11440] EXT4-fs (loop1): free_blocks=65280
[  211.730175][T11440] EXT4-fs (loop1): dirty_blocks=1029
[  211.735516][T11440] EXT4-fs (loop1): Block reservation details
[  211.740206][T11454] loop0: detected capacity change from 0 to 1024
[  211.741807][T11440] EXT4-fs (loop1): i_reserved_data_blocks=1029
[  211.763123][T11454] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.801799][T11458] siw: device registration error -23
[  211.805109][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.816476][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.826007][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.847490][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.856772][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.866131][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.890688][T11460] vhci_hcd: default hub control req: 0310 v0006 i0003 l0
[  211.904198][T11460] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.2853: lblock 3 mapped to illegal pblock 3 (length 13)
[  211.929275][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.938313][T11454] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2853'.
[  211.949004][T11460] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  211.961797][T11460] EXT4-fs (loop0): This should not happen!! Data will be lost
[  211.961797][T11460] 
[  211.973934][T11454] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2853: lblock 3 mapped to illegal pblock 3 (length 1)
[  211.989092][T11454] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2853: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.006300][T11454] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2853: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.022258][T11454] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.2853: lblock 3 mapped to illegal pblock 3 (length 1)
[  212.037673][T11460] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2853: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  212.058595][T11460] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  212.059966][T11469] siw: device registration error -23
[  212.109155][ T3302] ==================================================================
[  212.117735][ T3302] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru
[  212.126440][ T3302] 
[  212.128866][ T3302] read-write to 0xffff888237c26f50 of 8 bytes by task 11468 on cpu 0:
[  212.137456][ T3302]  find_get_block_common+0x4f0/0x960
[  212.143630][ T3302]  bdev_getblk+0x83/0x3b0
[  212.147978][ T3302]  __ext4_get_inode_loc+0x303/0x930
[  212.153332][ T3302]  ext4_reserve_inode_write+0xd7/0x250
[  212.158820][ T3302]  __ext4_mark_inode_dirty+0x8c/0x3f0
[  212.164224][ T3302]  ext4_dirty_inode+0x92/0xc0
[  212.169179][ T3302]  __mark_inode_dirty+0x15c/0x760
[  212.174336][ T3302]  file_update_time+0x288/0x2b0
[  212.179321][ T3302]  ext4_page_mkwrite+0x18c/0xb90
[  212.184374][ T3302]  handle_mm_fault+0x15cb/0x2c20
[  212.189686][ T3302]  do_user_addr_fault+0x636/0x1090
[  212.195207][ T3302]  exc_page_fault+0x62/0xa0
[  212.200089][ T3302]  asm_exc_page_fault+0x26/0x30
[  212.205389][ T3302] 
[  212.207895][ T3302] read to 0xffff888237c26f50 of 8 bytes by task 3302 on cpu 1:
[  212.215888][ T3302]  has_bh_in_lru+0x35/0x1f0
[  212.220609][ T3302]  smp_call_function_many_cond+0x2a6/0xc60
[  212.226531][ T3302]  on_each_cpu_cond_mask+0x3c/0x80
[  212.231660][ T3302]  invalidate_bh_lrus+0x2a/0x30
[  212.236623][ T3302]  invalidate_bdev+0x42/0x70
[  212.241499][ T3302]  ext4_put_super+0x624/0x7d0
[  212.246207][ T3302]  generic_shutdown_super+0xe3/0x210
[  212.251712][ T3302]  kill_block_super+0x2a/0x70
[  212.256585][ T3302]  ext4_kill_sb+0x42/0x80
[  212.261036][ T3302]  deactivate_locked_super+0x75/0x1c0
[  212.266697][ T3302]  deactivate_super+0x97/0xa0
[  212.271485][ T3302]  cleanup_mnt+0x269/0x2e0
[  212.276299][ T3302]  __cleanup_mnt+0x19/0x20
[  212.280753][ T3302]  task_work_run+0x12e/0x1a0
[  212.285456][ T3302]  exit_to_user_mode_loop+0xe4/0x100
[  212.290840][ T3302]  do_syscall_64+0x1d6/0x200
[  212.295662][ T3302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.301916][ T3302] 
[  212.304246][ T3302] value changed: 0xffff88810900ff70 -> 0xffff8881071e7478
[  212.311536][ T3302] 
[  212.313864][ T3302] Reported by Kernel Concurrency Sanitizer on:
[  212.320103][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(voluntary) 
[  212.333238][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  212.343591][ T3302] ==================================================================