last executing test programs:

1m51.699443299s ago: executing program 4 (id=264):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m51.528317434s ago: executing program 4 (id=272):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x30, 0x3a, 0xff, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x7f, '\x00', {0xb, 0x6, "b208ab", 0x4000, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000001c0), 0x4000000000001e9, 0x10162, 0x0)

1m51.527756354s ago: executing program 4 (id=274):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r1}, 0x20)

1m51.419987206s ago: executing program 4 (id=278):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x2411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x40000000, 0x0)
ptrace$peek(0x1, r1, &(0x7f0000000200))

1m51.330163118s ago: executing program 4 (id=281):
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/stat\x00')
getdents(r0, &(0x7f0000006b00)=""/42, 0x2a)
getdents64(r0, 0x0, 0x43)

1m51.157417183s ago: executing program 4 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c084)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x4000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

1m51.088594054s ago: executing program 32 (id=286):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, 0x0, 0xc000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c084)
getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, 0x0, 0x4000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0)

1m30.916802988s ago: executing program 5 (id=597):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d7061746830")

1m30.83091407s ago: executing program 5 (id=599):
mount$9p_fd(0x0, 0x0, 0x0, 0x2004412, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
umount2(0x0, 0x5)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0))
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
setns(0xffffffffffffffff, 0x20000000)
socket$inet(0x2, 0x5, 0x0)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0)
userfaultfd(0x801)
statx(0xffffffffffffffff, 0x0, 0x6000, 0x40, 0x0)
getuid()
mount$fuseblk(&(0x7f00000000c0), &(0x7f0000000600)='./proc\x00', &(0x7f0000000640), 0x4000, &(0x7f00000007c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1m30.83011022s ago: executing program 5 (id=600):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x401, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22'])

1m29.965961012s ago: executing program 5 (id=622):
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$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")
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000000, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x2411, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
wait4(r1, 0x0, 0x40000000, 0x0)
ptrace$peek(0x1, r1, &(0x7f0000000200))

1m29.806484466s ago: executing program 5 (id=626):
r0 = socket(0x1e, 0x1, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x10)
connect$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000140), 0x2000011a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000001c0)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, r3, 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000004d40)='./file0\x00', 0x0, 0x200000, &(0x7f0000004dc0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
sendmsg$netlink(r0, &(0x7f0000009100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000009080)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x30, 0x20004104}, 0x90)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

1m29.590451302s ago: executing program 5 (id=631):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
fcntl$lock(r0, 0x26, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x9})
close_range(r1, 0xffffffffffffffff, 0x0)

1m29.457726515s ago: executing program 33 (id=631):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
fcntl$lock(r0, 0x26, &(0x7f0000000680)={0x0, 0x0, 0x9, 0x9})
close_range(r1, 0xffffffffffffffff, 0x0)

49.020042305s ago: executing program 3 (id=1452):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2c2, &(0x7f0000002d40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)

48.850576349s ago: executing program 3 (id=1456):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x2, 0x10b)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e40)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000e80)='./tracing\x00', &(0x7f0000000ec0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./tracing/uprobe_events\x00', 0x601, 0xd)
writev(r0, &(0x7f0000000f40)=[{&(0x7f0000000f80)='\v', 0x1}, {&(0x7f0000000fc0)='s', 0x1}], 0x2)

48.775460581s ago: executing program 3 (id=1458):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000100)='8', 0x1)
userfaultfd(0x80001)

48.388514791s ago: executing program 3 (id=1469):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0x0)
setitimer(0x1, &(0x7f0000000940)={{}, {0x8000000005, 0x5}}, 0x0)
getitimer(0x1, &(0x7f0000000980))
mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r0, 0x8008af26, &(0x7f0000000a00)=0x0)
mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x200)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3c5})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000140)={&(0x7f00001e6000/0x3000)=nil, &(0x7f00008f1000/0x1000)=nil, 0x3000, 0x2})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x781eece4fc9ea1c5, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x3, 'syz0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x7ff, 0x918a, 0x10000, 'snmp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800010, 0x0)

48.301641903s ago: executing program 3 (id=1473):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
openat(0xffffffffffffff9c, 0x0, 0x442, 0x10)
unshare(0x400)
getdents64(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x10, 0x2, 0x10)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000240)=0xffffffffffffffff)

48.200183356s ago: executing program 3 (id=1477):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0xffff, 0x0, 0xac3a, {[@mss={0x2, 0x4, 0xffff}, @mptcp=@mp_join={0x1e, 0x3, 0xd}]}}}}}}}}, 0x0)

48.147970457s ago: executing program 34 (id=1477):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffd, @local, 0x2}, 0x1c)
listen(r0, 0xfff)
syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0xffff, 0x0, 0xac3a, {[@mss={0x2, 0x4, 0xffff}, @mptcp=@mp_join={0x1e, 0x3, 0xd}]}}}}}}}}, 0x0)

12.602611734s ago: executing program 1 (id=1909):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x400, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='mountaddr\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000100)=0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x40, 0x4, 0xfe, 0xa4}, {0x30, 0x1, 0x1, 0xe406}, {0x5, 0x15, 0x2, 0xb}]}, 0x10)

11.303668907s ago: executing program 1 (id=1917):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0xfffffffffffffcc1, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000001000810400c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x404c004, &(0x7f0000000000)={0x11, 0x10, r2, 0x1, 0x12, 0x6, @multicast}, 0x14)

11.171093111s ago: executing program 1 (id=1919):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000d80)={0xa, 0x4e24, 0x0, @loopback, 0x800000e}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000dc0)={0x200000000000001}, 0x8)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000e40), 0x171}}], 0x400000000000172, 0x4001c00)

11.143034271s ago: executing program 1 (id=1920):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@debug}]}, 0xfc, 0x57d, &(0x7f0000001500)="$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")
setxattr$system_posix_acl(&(0x7f0000000a00)='.\x00', &(0x7f0000000a40)='system.posix_acl_default\x00', &(0x7f0000000a80), 0x24, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x8, &(0x7f0000000b80)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

10.821017419s ago: executing program 1 (id=1925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd66, 0xfffffffe, {0xa, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1100}, [@RTA_PRIORITY={0x8, 0x6, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008880}, 0x4002050)

7.484567473s ago: executing program 1 (id=1947):
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c636f6465706167653d3836322c636865636b3d7374726963742c696f636861727365743d63703835372c757466383d302c696f636861727365743d6370313235302c696f636861727365743d6d616363656c7469632c757466383d302c00683047dc26bcd1d49acc85c22ce7045d4133396fd2d4e046f0118e81e469"], 0x3, 0x28e, &(0x7f0000000680)="$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")
socket$igmp(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

7.451345763s ago: executing program 35 (id=1947):
syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000500)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="726f6469722c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c757466383d312c6e6f6e756d7461696c3d302c757466383d312c6e6f6e756d7461696c3d302c636f6465706167653d3836322c636865636b3d7374726963742c696f636861727365743d63703835372c757466383d302c696f636861727365743d6370313235302c696f636861727365743d6d616363656c7469632c757466383d302c00683047dc26bcd1d49acc85c22ce7045d4133396fd2d4e046f0118e81e469"], 0x3, 0x28e, &(0x7f0000000680)="$eJzs3c9qK2UUAPAzTdIkukgWrkS4A7pwdbn1CVqkglgQlAjqQotNQZJQaCHQKsaufAKfQPBt3Igv4AMo7uxCHEln8q9OUlNtU7y/36aHc76T70xmSlfz9dNXBr2jk7Pjyy9/jkYjia3d2I2rJNqxFRNfR6mffi3PAwCP3FWWxW9Zrp6nzhdX1JZ0VrfufTgA4F7M//3f9CwAwMN4/8OP3tk7ONh/L00bEYNvhp0k8p95fe84Po9+dONZtOKPiGwqj996+2A/qulYO14bjIadcefgkx+Kz9/7JeK6fyda0S7v30lzc/2jYacWLxT77/aj++530YqXyvvfKOmPzna8/urc/E+jFT9+FifRj6Nitkn/Vztp+mb27e9ffDzOjvuT0bBTn64rVlce9MYAAAAAAAAAAAAAAAAAAAAAAPC/9jSdai+evzM5+H9FfcX5QKO583mepWmaJfn6WX81Xq5GdZPXDgAAAAAAAAAAAAAAAAAAAI/F2flF77Df756uEXxw65rJa/0lpfhzMVOPiLV2XwierNsVlWK0fhKx3l61qF933r64suZVNMfzdE+TavQOv8/udlNuBsk005wvPYl8r3GmmQdzmX+7ab8R18Hk6eodJrfd3EbZQ7IsqPzzebKSx295+/bNTLO4gpLFzRW7b794p68uay0pJRFRm36Zqz+n9p/cwdlvCgAAAAAAAAAAAAAAAAAA8MBmL/2WFC83MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbMDs//+vEYyK5r+VslbE+UUvq4wz1ShKG75EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngN/BQAA//+6Smay")
socket$igmp(0x2, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

5.380555955s ago: executing program 7 (id=1999):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./trace/current_tracer\x00', 0x2, 0x0)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000480)=""/237, 0xed}], 0x1, 0x11, 0x94b8)

5.358723076s ago: executing program 7 (id=2001):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000d40)=0x8, 0x4)
r1 = socket(0x2, 0x3, 0x66)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000d80)='bridge0\x00', 0x52c)
sendto$unix(r1, 0x0, 0x0, 0x40, &(0x7f00000007c0)=@abs={0x0, 0x7, 0x6a0010dc}, 0x6e)

5.281160928s ago: executing program 7 (id=2002):
io_setup(0x482, &(0x7f0000000600)=<r0=>0x0)
io_submit(r0, 0x20000022, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffffff, 0x0}])

5.148473721s ago: executing program 7 (id=2004):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)

5.148400881s ago: executing program 7 (id=2005):
connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x100008)

5.097782173s ago: executing program 7 (id=2006):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0xffffffffffffffff, &(0x7f0000000000)=0x28)

4.975639545s ago: executing program 36 (id=2006):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, 0xffffffffffffffff, &(0x7f0000000000)=0x28)

4.350482421s ago: executing program 0 (id=2034):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c, &(0x7f0000000240)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc622b336c622a91291a63f9644964e5a679ea1b5005b9d987d6094ed4e1af157499d5fb2850161224a441240ea52dda516bc06ff3ade3c08c653108720c3e34727b0ae3db5da52511edb4325a2dd02b05f06a9e39764a8fbe0eb4eee5b51895703128cade291bc5c1acfae9ec5d34e71f75d8b5046aafd108b487be169a7bd49de322163858ae595e084074253c72d65f402752618d636a30c7800d77cbe196c326ca4d210f12f442868cba3ea9a0cbca8f59b1054675e2b1e898305a7245aae76525aaf2460152e5647f"], 0x1, 0x2aa, &(0x7f0000000600)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./file7\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file7/file0\x00', 0x800020, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./file7/file0\x00', 0x2)

4.275699563s ago: executing program 0 (id=2038):
timer_create(0x3, 0x0, &(0x7f00000003c0))
timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x77359400}, {0x0, 0x9}}, 0x0)
timer_create(0xfffffffd, 0x0, &(0x7f0000000440)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)

3.936604781s ago: executing program 0 (id=2046):
r0 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x9, 0x4)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000300)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000340)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c)
connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}, 0x1c)
listen(r0, 0xf30)

1.496801602s ago: executing program 9 (id=2084):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000000000000000100003007665746830", 0x29}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x2, 0x0, [{0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}]})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

873.313458ms ago: executing program 6 (id=2095):
mount_setattr(0xffffffffffffff9c, 0x0, 0x8100, &(0x7f00000021c0)={0x97, 0x1000f8, 0x40000}, 0x20)

846.300268ms ago: executing program 8 (id=2098):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00')
pread64(r0, &(0x7f00000000c0)=""/102400, 0x19000, 0x100008)

776.44613ms ago: executing program 6 (id=2099):
r0 = syz_clone(0x282400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, 0x0, 0x0, 0x8, 0x0)
ptrace$getsig(0x4202, r0, 0x2, &(0x7f0000000180))

776.26387ms ago: executing program 8 (id=2100):
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x0)

744.880351ms ago: executing program 0 (id=2055):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x205031, 0xffffffffffffffff, 0x9f417000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./proc\x00', 0x20480c0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/kernel/osrelease\x00', 0x0, 0x0)
read(r1, 0x0, 0x0)

676.507032ms ago: executing program 8 (id=2102):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='6', 0x1)

676.348663ms ago: executing program 6 (id=2103):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000300752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20)
syz_emit_ethernet(0xfef3, &(0x7f0000000100)=ANY=[], 0x0)

676.225043ms ago: executing program 8 (id=2104):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
recvfrom(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000500)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000600)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbc", 0xac}], 0x3}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="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", 0xdea}], 0x1}}], 0x2, 0x800)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xc983c000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001540)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001580)=""/4067, 0xfe3, 0x0, 0x0}, &(0x7f0000002580)=0x40)

646.466744ms ago: executing program 2 (id=2105):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500020000000000bf010000000000008500000056000000b70000000200100095"], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r2, 0x25, 0x4, @void}, 0x10)
syz_emit_ethernet(0x1ae, &(0x7f0000000940)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "24a9a2", 0x178, 0x3a, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @empty, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc, '\x00', @mcast2, [{0x4, 0xf, "45071305ecb6ae4fdeea56f822a3b01556742e7f6fb61133154b3da71847817f41fcf28f920eabee44e1ff762be02ae8347e0bcbd11480d605ade894380facf76e624c8c871cea132fb8e98e10cf6b76533e9dfb57938458ff49586126fd9a3c54ee6b963d7be44b62c00e5bc43a026e375042069a10a506b60f81c708"}, {0x1f, 0x1c, "22d49abf5aad96b549a6f1ca51a22b83a48003241cea2a13812a0cd64884b1e116f4e2e0b4ab0f0bcaff58036a1d0ab9ced5595a1889759683e5afc6b2ba227f9373daa691e9cde3d2bc9baf31ab29a41d4198e7caf21ebf0ec8f5881b1c39cb50d46e42fe8209ff418cdae4597b1ef0d81c83afbaaba5b814e1df94bf77b18abeb1343764209b71a07771dcdebfae2916ccac415ba6ca095e65200f557b1d05ca8b6fe3c486e3d372b5f0a69faf5c9b4b3aff6dd62e16b79addb254a6160803c9ed0c1e2a8c259a6ad3e4bd4c913c6d9183205c1bc552d88ab04e84329b50"}]}}}}}}, 0x0)

597.779955ms ago: executing program 2 (id=2106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004e80)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004f00)={&(0x7f0000004f40)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x1e6, 0x5}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040044)

540.553796ms ago: executing program 6 (id=2107):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180))

528.632436ms ago: executing program 6 (id=2108):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000004c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000740)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e20, @multicast2}}]}, 0x110)
r2 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000880)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

519.584157ms ago: executing program 2 (id=2109):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c)

518.523247ms ago: executing program 9 (id=2110):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0xdfffffee, 0x80000000, 0xfffffffd, 0x13, "a15f06e3975c6e28a8d1002000008b8d2b697b"})
r1 = syz_open_pts(r0, 0x40601)
setreuid(0xffffffffffffffff, 0xee01)
ioctl$TIOCCONS(r1, 0x541d)

481.135128ms ago: executing program 8 (id=2111):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000002c0)={0x200004, 0x200004, 0x3})
sendmsg(0xffffffffffffffff, 0x0, 0x4)
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

424.549729ms ago: executing program 2 (id=2112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='3', 0x4e)
request_key(0x0, 0x0, 0x0, 0xffffffffffffffff)

424.360899ms ago: executing program 9 (id=2113):
r0 = memfd_create(&(0x7f00000006c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6)
fallocate(r0, 0x0, 0x0, 0x400001)
fcntl$addseals(r0, 0x409, 0xa)
lseek(r0, 0x0, 0x0)

423.901729ms ago: executing program 6 (id=2114):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000015c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

423.714099ms ago: executing program 8 (id=2115):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f0000000000", 0x1a}], 0x1}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

407.630309ms ago: executing program 2 (id=2116):
socket(0xa, 0x5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, <r0=>0x0}, 0x6)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00005a5000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0xc, 0x51, 0x0, 0x1e00, 0x22, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1faeb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x274}, 0x10)
r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x2, 0x39d})
io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

407.532999ms ago: executing program 9 (id=2117):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe)
prlimit64(0x0, 0x9, &(0x7f00000001c0)={0x2000}, 0x0)
r2 = syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x4)
bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0xff00, @none, 0x2000}, 0xe)

347.665131ms ago: executing program 9 (id=2118):
syz_mount_image$ext4(&(0x7f0000020280)='ext4\x00', &(0x7f00000202c0)='./file1\x00', 0x2000c16, &(0x7f0000020300)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000020340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000020a80)='./file1\x00', 0x42, 0x40)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setreuid(0x0, 0xee01)
fallocate(r0, 0x0, 0x8e14, 0xe229)

181.795695ms ago: executing program 0 (id=2119):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f0000000600)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@nfs_stale_rw}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@numtail}]}, 0x81, 0x2ae, &(0x7f0000001980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
getdents64(r0, &(0x7f0000000280)=""/59, 0x5e)

137.505436ms ago: executing program 2 (id=2120):
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230)
syz_emit_ethernet(0x2a, &(0x7f0000001900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0)

60.154498ms ago: executing program 0 (id=2121):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_virt_wifi\x00', &(0x7f0000000000)=@ethtool_ringparam={0x10, 0x2000000, 0xfffffffc, 0xd239, 0x7, 0x6, 0x4380, 0x1, 0x6}})

0s ago: executing program 9 (id=2122):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x7, 0xfffffffc, 0x800007ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0xffffffe4, 0x0, 0x20000010}, 0x20000000)

kernel console output (not intermixed with test programs):

x251/0x9a0
[  101.923418][ T4032]  do_syscall_64+0x4c/0xa0
[  101.927880][ T4032]  ? clear_bhb_loop+0x50/0xa0
[  101.932596][ T4032]  ? clear_bhb_loop+0x50/0xa0
[  101.937320][ T4032]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  101.943250][ T4032] RIP: 0033:0x7f0544531559
[  101.947696][ T4032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  101.967375][ T4032] RSP: 002b:00007f0542f8a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  101.975862][ T4032] RAX: ffffffffffffffda RBX: 00007f05447b8fa8 RCX: 00007f0544531559
[  101.983881][ T4032] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f05447b8fac
[  101.991896][ T4032] RBP: 00007f05447b8fa0 R08: 002abe5dda1cdb30 R09: 0000000000000000
[  101.999905][ T4032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  102.007937][ T4032] R13: 00007f05447b9038 R14: 00007fff8377c080 R15: 00007fff8377c168
[  102.015961][ T4032]  </TASK>
[  102.069947][ T4044] loop6: detected capacity change from 0 to 128
[  102.090148][ T4044] FAT-fs (loop6): Unrecognized mount option "ín`JšÊ¼^:l°Ô½÷nF-͉Çxæ–+(•4w<x¿´ÛÿŠÜ‚ZuËaª"F–ó¬" or missing value
[  102.120037][ T4046] loop1: detected capacity change from 0 to 16
[  102.172127][ T4046] erofs: (device loop1): mounted with root inode @ nid 36.
[  102.186771][   T30] audit: type=1400 audit(1792200143.760:329): avc:  denied  { execute } for  pid=4045 comm="syz.1.1422" path="/263/file2/file1" dev="loop1" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  102.218100][ T4046] attempt to access beyond end of device
[  102.218100][ T4046] loop1: rw=524288, want=1342177528, limit=16
[  102.238063][ T4046] attempt to access beyond end of device
[  102.238063][ T4046] loop1: rw=0, want=1342177280, limit=16
[  102.253690][ T4046] attempt to access beyond end of device
[  102.253690][ T4046] loop1: rw=0, want=1342177280, limit=16
[  102.263039][   T30] audit: type=1400 audit(1792200143.830:330): avc:  denied  { mount } for  pid=4052 comm="syz.2.1425" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  102.289935][ T4046] attempt to access beyond end of device
[  102.289935][ T4046] loop1: rw=0, want=1342177280, limit=16
[  102.309642][ T4046] attempt to access beyond end of device
[  102.309642][ T4046] loop1: rw=0, want=1342177280, limit=16
[  102.469133][   T30] audit: type=1400 audit(1792200144.040:331): avc:  denied  { create } for  pid=4064 comm="syz.1.1428" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  102.534099][   T30] audit: type=1400 audit(1792200144.090:332): avc:  denied  { unlink } for  pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=1495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  102.674984][ T4069] loop1: detected capacity change from 0 to 128
[  102.729852][ T4069] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  102.776458][ T4069] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.804717][   T30] audit: type=1400 audit(1792200144.380:333): avc:  denied  { mount } for  pid=4068 comm="syz.1.1430" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  102.849675][ T1186] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  102.868605][   T30] audit: type=1400 audit(1792200144.420:334): avc:  denied  { unmount } for  pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  103.130325][   T30] audit: type=1400 audit(1792200144.710:335): avc:  denied  { execute } for  pid=4082 comm="syz.0.1436" path="/435/file1" dev="tmpfs" ino=2415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  103.228735][ T4091] FAULT_INJECTION: forcing a failure.
[  103.228735][ T4091] name failslab, interval 1, probability 0, space 0, times 0
[  103.262176][ T4091] CPU: 1 PID: 4091 Comm: syz.1.1439 Not tainted syzkaller #0
[  103.269625][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.279716][ T4091] Call Trace:
[  103.283017][ T4091]  <TASK>
[  103.285966][ T4091]  __dump_stack+0x21/0x30
[  103.290318][ T4091]  dump_stack_lvl+0x110/0x170
[  103.295014][ T4091]  ? show_regs_print_info+0x20/0x20
[  103.300235][ T4091]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  103.306583][ T4091]  dump_stack+0x15/0x20
[  103.310750][ T4091]  should_fail+0x3ab/0x500
[  103.315185][ T4091]  __should_failslab+0xa4/0xe0
[  103.319968][ T4091]  should_failslab+0x9/0x20
[  103.324491][ T4091]  slab_pre_alloc_hook+0x39/0xd0
[  103.329444][ T4091]  ? __alloc_file+0x28/0x2a0
[  103.334063][ T4091]  kmem_cache_alloc+0x44/0x260
[  103.338846][ T4091]  __alloc_file+0x28/0x2a0
[  103.343288][ T4091]  alloc_empty_file+0x97/0x180
[  103.348063][ T4091]  alloc_file+0x59/0x580
[  103.352320][ T4091]  alloc_file_pseudo+0x180/0x200
[  103.357269][ T4091]  ? alloc_empty_file_noaccount+0x80/0x80
[  103.363010][ T4091]  ? __kasan_check_write+0x14/0x20
[  103.368140][ T4091]  ? clear_nlink+0x8a/0xe0
[  103.372605][ T4091]  __shmem_file_setup+0x1df/0x2b0
[  103.377649][ T4091]  shmem_zero_setup+0x99/0x1e0
[  103.382424][ T4091]  mmap_region+0x1247/0x1700
[  103.387035][ T4091]  do_mmap+0x812/0xf10
[  103.391120][ T4091]  vm_mmap_pgoff+0x1d6/0x410
[  103.395817][ T4091]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  103.402168][ T4091]  ? account_locked_vm+0x270/0x270
[  103.407294][ T4091]  ksys_mmap_pgoff+0xf6/0x1d0
[  103.411989][ T4091]  __x64_sys_mmap+0xfa/0x110
[  103.416595][ T4091]  x64_sys_call+0x83/0x9a0
[  103.421025][ T4091]  do_syscall_64+0x4c/0xa0
[  103.425464][ T4091]  ? clear_bhb_loop+0x50/0xa0
[  103.430169][ T4091]  ? clear_bhb_loop+0x50/0xa0
[  103.434862][ T4091]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  103.440783][ T4091] RIP: 0033:0x7f0544531559
[  103.445215][ T4091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.464869][ T4091] RSP: 002b:00007f0542f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  103.473300][ T4091] RAX: ffffffffffffffda RBX: 00007f05447b8fa0 RCX: 00007f0544531559
[  103.481285][ T4091] RDX: 0000000002000007 RSI: 0000000000c00000 RDI: 0000000000000000
[  103.489268][ T4091] RBP: 00007f05445c8ab8 R08: ffffffffffffffff R09: 0000000000000000
[  103.497258][ T4091] R10: 000000000401d031 R11: 0000000000000246 R12: 0000000000000000
[  103.505245][ T4091] R13: 00007f05447b9038 R14: 00007f05447b8fa0 R15: 00007fff8377c168
[  103.513238][ T4091]  </TASK>
[  103.727463][   T30] audit: type=1400 audit(1792200145.300:336): avc:  denied  { attach_queue } for  pid=4105 comm="syz.6.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  103.993463][ T4118] FAULT_INJECTION: forcing a failure.
[  103.993463][ T4118] name failslab, interval 1, probability 0, space 0, times 0
[  104.023252][ T4118] CPU: 1 PID: 4118 Comm: syz.6.1448 Not tainted syzkaller #0
[  104.030686][ T4118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.040914][ T4118] Call Trace:
[  104.044221][ T4118]  <TASK>
[  104.047178][ T4118]  __dump_stack+0x21/0x30
[  104.051551][ T4118]  dump_stack_lvl+0x110/0x170
[  104.056283][ T4118]  ? show_regs_print_info+0x20/0x20
[  104.061527][ T4118]  ? trace_event_raw_event_timer_class+0x14f/0x220
[  104.068080][ T4118]  dump_stack+0x15/0x20
[  104.072281][ T4118]  should_fail+0x3ab/0x500
[  104.076742][ T4118]  __should_failslab+0xa4/0xe0
[  104.081592][ T4118]  should_failslab+0x9/0x20
[  104.086138][ T4118]  slab_pre_alloc_hook+0x39/0xd0
[  104.091117][ T4118]  __kmalloc+0x6d/0x2c0
[  104.095310][ T4118]  ? __netlink_kernel_create+0x2e3/0x910
[  104.100995][ T4118]  __netlink_kernel_create+0x2e3/0x910
[  104.106501][ T4118]  ? __netlink_kernel_create+0x7dc/0x910
[  104.112172][ T4118]  ? netlink_set_err+0x3f0/0x3f0
[  104.117150][ T4118]  ? memcpy+0x56/0x70
[  104.121164][ T4118]  genl_pernet_init+0xb6/0x170
[  104.125971][ T4118]  ? ctrl_dumppolicy_done+0x40/0x40
[  104.131219][ T4118]  ? rtnetlink_net_init+0xbd/0x140
[  104.136379][ T4118]  ? genl_pernet_exit+0x60/0x60
[  104.141283][ T4118]  ? genl_rcv+0x40/0x40
[  104.145515][ T4118]  ? rtnetlink_rcv+0x20/0x20
[  104.150143][ T4118]  ? memset+0x35/0x40
[  104.154173][ T4118]  ? __mutex_init+0xcd/0x1a0
[  104.158795][ T4118]  ops_init+0x2c0/0x470
[  104.162997][ T4118]  setup_net+0x331/0xa30
[  104.167276][ T4118]  ? copy_net_ns+0x5c0/0x5c0
[  104.171907][ T4118]  copy_net_ns+0x355/0x5c0
[  104.176367][ T4118]  create_new_namespaces+0x3a8/0x660
[  104.181694][ T4118]  unshare_nsproxy_namespaces+0x120/0x170
[  104.187758][ T4118]  ksys_unshare+0x4d7/0x810
[  104.192315][ T4118]  ? sighand_ctor+0x60/0x60
[  104.196861][ T4118]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  104.203264][ T4118]  __x64_sys_unshare+0x38/0x40
[  104.208120][ T4118]  x64_sys_call+0x442/0x9a0
[  104.212674][ T4118]  do_syscall_64+0x4c/0xa0
[  104.217131][ T4118]  ? clear_bhb_loop+0x50/0xa0
[  104.221859][ T4118]  ? clear_bhb_loop+0x50/0xa0
[  104.226584][ T4118]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  104.232515][ T4118] RIP: 0033:0x7f3d2a350559
[  104.236979][ T4118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.256626][ T4118] RSP: 002b:00007f3d28da9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  104.265096][ T4118] RAX: ffffffffffffffda RBX: 00007f3d2a5d7fa0 RCX: 00007f3d2a350559
[  104.273104][ T4118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  104.281122][ T4118] RBP: 00007f3d2a3e7ab8 R08: 0000000000000000 R09: 0000000000000000
[  104.289134][ T4118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.297140][ T4118] R13: 00007f3d2a5d8038 R14: 00007f3d2a5d7fa0 R15: 00007ffc98398318
[  104.305159][ T4118]  </TASK>
[  104.364444][ T4127] loop3: detected capacity change from 0 to 256
[  104.600617][ T4143] FAULT_INJECTION: forcing a failure.
[  104.600617][ T4143] name failslab, interval 1, probability 0, space 0, times 0
[  104.638483][ T4143] CPU: 1 PID: 4143 Comm: syz.3.1458 Not tainted syzkaller #0
[  104.645925][ T4143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  104.656015][ T4143] Call Trace:
[  104.659363][ T4143]  <TASK>
[  104.662324][ T4143]  __dump_stack+0x21/0x30
[  104.666708][ T4143]  dump_stack_lvl+0x110/0x170
[  104.671417][ T4143]  ? show_regs_print_info+0x20/0x20
[  104.676652][ T4143]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  104.683008][ T4143]  dump_stack+0x15/0x20
[  104.687202][ T4143]  should_fail+0x3ab/0x500
[  104.691661][ T4143]  __should_failslab+0xa4/0xe0
[  104.696468][ T4143]  should_failslab+0x9/0x20
[  104.701015][ T4143]  slab_pre_alloc_hook+0x39/0xd0
[  104.706000][ T4143]  ? security_file_alloc+0x33/0x120
[  104.711248][ T4143]  kmem_cache_alloc+0x44/0x260
[  104.716059][ T4143]  security_file_alloc+0x33/0x120
[  104.721120][ T4143]  __alloc_file+0xb5/0x2a0
[  104.725609][ T4143]  alloc_empty_file+0x97/0x180
[  104.730411][ T4143]  alloc_file+0x59/0x580
[  104.734704][ T4143]  alloc_file_pseudo+0x180/0x200
[  104.739694][ T4143]  ? alloc_empty_file_noaccount+0x80/0x80
[  104.745529][ T4143]  ? alloc_anon_inode+0x225/0x300
[  104.750590][ T4143]  ? memcpy+0x56/0x70
[  104.754592][ T4143]  ? security_inode_init_security_anon+0x84/0xa0
[  104.760943][ T4143]  __anon_inode_getfd+0x26b/0x3d0
[  104.765996][ T4143]  ? anon_inode_getfd+0x40/0x40
[  104.770879][ T4143]  anon_inode_getfd_secure+0x3b/0x50
[  104.776188][ T4143]  __se_sys_userfaultfd+0x20c/0x3c0
[  104.781409][ T4143]  __x64_sys_userfaultfd+0x38/0x40
[  104.786546][ T4143]  x64_sys_call+0x514/0x9a0
[  104.791073][ T4143]  do_syscall_64+0x4c/0xa0
[  104.795519][ T4143]  ? clear_bhb_loop+0x50/0xa0
[  104.800230][ T4143]  ? clear_bhb_loop+0x50/0xa0
[  104.804946][ T4143]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  104.810980][ T4143] RIP: 0033:0x7fa1cd7f9559
[  104.815426][ T4143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.835077][ T4143] RSP: 002b:00007fa1cc252028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[  104.843514][ T4143] RAX: ffffffffffffffda RBX: 00007fa1cda80fa0 RCX: 00007fa1cd7f9559
[  104.851504][ T4143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001
[  104.859493][ T4143] RBP: 00007fa1cd890ab8 R08: 0000000000000000 R09: 0000000000000000
[  104.867612][ T4143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  104.875627][ T4143] R13: 00007fa1cda81038 R14: 00007fa1cda80fa0 R15: 00007fff29c866d8
[  104.883639][ T4143]  </TASK>
[  104.917471][ T4153] overlayfs: failed to clone upperpath
[  104.926311][ T4155] netlink: 'syz.6.1465': attribute type 4 has an invalid length.
[  104.942223][ T4155] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1465'.
[  105.025110][ T4164] overlayfs: missing 'lowerdir'
[  105.110201][ T1186] tipc: Left network mode
[  105.225020][ T4188] FAULT_INJECTION: forcing a failure.
[  105.225020][ T4188] name failslab, interval 1, probability 0, space 0, times 0
[  105.256402][ T4188] CPU: 0 PID: 4188 Comm: syz.1.1481 Not tainted syzkaller #0
[  105.263836][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  105.273968][ T4188] Call Trace:
[  105.277315][ T4188]  <TASK>
[  105.280301][ T4188]  __dump_stack+0x21/0x30
[  105.284683][ T4188]  dump_stack_lvl+0x110/0x170
[  105.289404][ T4188]  ? show_regs_print_info+0x20/0x20
[  105.294646][ T4188]  ? trace_buffer_unlock_commit_regs+0x12e/0x5f0
[  105.301031][ T4188]  dump_stack+0x15/0x20
[  105.305223][ T4188]  should_fail+0x3ab/0x500
[  105.309674][ T4188]  __should_failslab+0xa4/0xe0
[  105.314488][ T4188]  should_failslab+0x9/0x20
[  105.319029][ T4188]  slab_pre_alloc_hook+0x39/0xd0
[  105.324003][ T4188]  ? security_file_alloc+0x33/0x120
[  105.329252][ T4188]  kmem_cache_alloc+0x44/0x260
[  105.334074][ T4188]  security_file_alloc+0x33/0x120
[  105.339143][ T4188]  __alloc_file+0xb5/0x2a0
[  105.343617][ T4188]  alloc_empty_file+0x97/0x180
[  105.348516][ T4188]  alloc_file+0x59/0x580
[  105.352798][ T4188]  alloc_file_pseudo+0x180/0x200
[  105.357778][ T4188]  ? alloc_empty_file_noaccount+0x80/0x80
[  105.363545][ T4188]  ? alloc_anon_inode+0x225/0x300
[  105.368619][ T4188]  ? memcpy+0x56/0x70
[  105.372643][ T4188]  ? security_inode_init_security_anon+0x84/0xa0
[  105.379207][ T4188]  __anon_inode_getfd+0x26b/0x3d0
[  105.384274][ T4188]  ? anon_inode_getfd+0x40/0x40
[  105.389171][ T4188]  anon_inode_getfd_secure+0x3b/0x50
[  105.394500][ T4188]  __se_sys_userfaultfd+0x20c/0x3c0
[  105.399742][ T4188]  __x64_sys_userfaultfd+0x38/0x40
[  105.404881][ T4188]  x64_sys_call+0x514/0x9a0
[  105.409402][ T4188]  do_syscall_64+0x4c/0xa0
[  105.413839][ T4188]  ? clear_bhb_loop+0x50/0xa0
[  105.418533][ T4188]  ? clear_bhb_loop+0x50/0xa0
[  105.423282][ T4188]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  105.429210][ T4188] RIP: 0033:0x7f0544531559
[  105.433648][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  105.455099][ T4188] RSP: 002b:00007f0542f8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143
[  105.463563][ T4188] RAX: ffffffffffffffda RBX: 00007f05447b8fa0 RCX: 00007f0544531559
[  105.471553][ T4188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001
[  105.479564][ T4188] RBP: 00007f05445c8ab8 R08: 0000000000000000 R09: 0000000000000000
[  105.487555][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  105.495556][ T4188] R13: 00007f05447b9038 R14: 00007f05447b8fa0 R15: 00007fff8377c168
[  105.503556][ T4188]  </TASK>
[  105.770138][ T4202] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.780808][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.788799][ T4202] device bridge_slave_0 entered promiscuous mode
[  105.796505][ T4202] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.803790][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.812881][ T4202] device bridge_slave_1 entered promiscuous mode
[  105.820457][ T1186] device bridge_slave_1 left promiscuous mode
[  105.826974][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.835254][ T1186] device bridge_slave_0 left promiscuous mode
[  105.841886][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.851353][ T1186] device veth1_macvtap left promiscuous mode
[  105.862043][ T1186] device veth0_vlan left promiscuous mode
[  105.964280][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  105.964297][   T30] audit: type=1400 audit(1792200147.542:338): avc:  denied  { ioctl } for  pid=4219 comm="syz.6.1494" path="socket:[53797]" dev="sockfs" ino=53797 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  106.047294][ T4220] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1494'.
[  106.234812][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.248166][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.284065][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.310870][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.320534][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.327654][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.336021][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.345746][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.361129][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.368321][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  106.403208][ T4241] loop2: detected capacity change from 0 to 256
[  106.405558][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  106.422453][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  106.431253][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  106.439643][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  106.449323][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  106.475529][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.484937][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.502527][ T4241] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  106.518415][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.526957][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.550113][ T4202] device veth0_vlan entered promiscuous mode
[  106.557031][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.565474][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.592233][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.603179][ T4202] device veth1_macvtap entered promiscuous mode
[  106.618396][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.627515][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.653429][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.672231][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.042585][ T4286] FAULT_INJECTION: forcing a failure.
[  107.042585][ T4286] name failslab, interval 1, probability 0, space 0, times 0
[  107.079425][ T4286] CPU: 0 PID: 4286 Comm: syz.2.1521 Not tainted syzkaller #0
[  107.086862][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.097048][ T4286] Call Trace:
[  107.100369][ T4286]  <TASK>
[  107.103343][ T4286]  __dump_stack+0x21/0x30
[  107.107719][ T4286]  dump_stack_lvl+0x110/0x170
[  107.112433][ T4286]  ? show_regs_print_info+0x20/0x20
[  107.117679][ T4286]  ? 0xffffffffa0010000
[  107.121868][ T4286]  ? is_bpf_text_address+0x177/0x190
[  107.127198][ T4286]  dump_stack+0x15/0x20
[  107.131390][ T4286]  should_fail+0x3ab/0x500
[  107.135868][ T4286]  __should_failslab+0xa4/0xe0
[  107.140684][ T4286]  should_failslab+0x9/0x20
[  107.145226][ T4286]  slab_pre_alloc_hook+0x39/0xd0
[  107.150214][ T4286]  __kmalloc+0x6d/0x2c0
[  107.154409][ T4286]  ? kvmalloc_node+0x211/0x320
[  107.159207][ T4286]  ? stack_trace_save+0xa6/0xf0
[  107.164096][ T4286]  kvmalloc_node+0x211/0x320
[  107.168729][ T4286]  ? security_capable+0x87/0xb0
[  107.173622][ T4286]  ? vm_mmap+0xb0/0xb0
[  107.177724][ T4286]  ? ns_capable_noaudit+0x8f/0xf0
[  107.182779][ T4286]  proc_sys_call_handler+0x3b0/0x7c0
[  107.188089][ T4286]  ? proc_sys_open+0x280/0x280
[  107.192882][ T4286]  proc_sys_read+0x1f/0x30
[  107.197318][ T4286]  generic_file_splice_read+0x3ea/0x5f0
[  107.202911][ T4286]  ? splice_shrink_spd+0xb0/0xb0
[  107.207883][ T4286]  ? __kasan_check_read+0x11/0x20
[  107.212924][ T4286]  ? fsnotify_perm+0x269/0x5b0
[  107.217968][ T4286]  ? security_file_permission+0x83/0xa0
[  107.223557][ T4286]  ? rw_verify_area+0xa7/0x1c0
[  107.228361][ T4286]  splice_direct_to_actor+0x40f/0xb40
[  107.233751][ T4286]  ? do_splice_direct+0x2d0/0x2d0
[  107.238794][ T4286]  ? pipe_to_sendpage+0x320/0x320
[  107.243839][ T4286]  ? security_file_permission+0x83/0xa0
[  107.249401][ T4286]  ? rw_verify_area+0xa7/0x1c0
[  107.254179][ T4286]  do_splice_direct+0x1c2/0x2d0
[  107.259046][ T4286]  ? splice_direct_to_actor+0xb40/0xb40
[  107.264611][ T4286]  ? security_file_permission+0x83/0xa0
[  107.270177][ T4286]  do_sendfile+0x515/0xe20
[  107.274625][ T4286]  ? do_preadv+0x390/0x390
[  107.279060][ T4286]  ? trace_event_buffer_commit+0x252/0x880
[  107.284894][ T4286]  __x64_sys_sendfile64+0x199/0x1f0
[  107.290111][ T4286]  ? __ia32_sys_sendfile+0x190/0x190
[  107.295416][ T4286]  ? trace_sys_enter+0x3d/0x50
[  107.300193][ T4286]  x64_sys_call+0x88d/0x9a0
[  107.304717][ T4286]  do_syscall_64+0x4c/0xa0
[  107.309152][ T4286]  ? clear_bhb_loop+0x50/0xa0
[  107.313846][ T4286]  ? clear_bhb_loop+0x50/0xa0
[  107.318538][ T4286]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.324454][ T4286] RIP: 0033:0x7f1b33a1f559
[  107.328886][ T4286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.348599][ T4286] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  107.357032][ T4286] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  107.365022][ T4286] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  107.373008][ T4286] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  107.380992][ T4286] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000
[  107.388977][ T4286] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  107.396967][ T4286]  </TASK>
[  107.597070][ T4296] FAULT_INJECTION: forcing a failure.
[  107.597070][ T4296] name failslab, interval 1, probability 0, space 0, times 0
[  107.622504][ T4296] CPU: 1 PID: 4296 Comm: syz.2.1526 Not tainted syzkaller #0
[  107.629944][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  107.640123][ T4296] Call Trace:
[  107.643437][ T4296]  <TASK>
[  107.646404][ T4296]  __dump_stack+0x21/0x30
[  107.650773][ T4296]  dump_stack_lvl+0x110/0x170
[  107.655491][ T4296]  ? show_regs_print_info+0x20/0x20
[  107.660739][ T4296]  dump_stack+0x15/0x20
[  107.664970][ T4296]  should_fail+0x3ab/0x500
[  107.669431][ T4296]  __should_failslab+0xa4/0xe0
[  107.674238][ T4296]  should_failslab+0x9/0x20
[  107.678790][ T4296]  slab_pre_alloc_hook+0x39/0xd0
[  107.683772][ T4296]  ? __d_alloc+0x2d/0x690
[  107.688144][ T4296]  kmem_cache_alloc+0x44/0x260
[  107.692955][ T4296]  ? replace_fd+0x160/0x160
[  107.697503][ T4296]  __d_alloc+0x2d/0x690
[  107.701700][ T4296]  ? _raw_spin_lock+0x94/0xf0
[  107.706421][ T4296]  d_alloc_pseudo+0x1d/0x70
[  107.710961][ T4296]  alloc_file_pseudo+0xe0/0x200
[  107.715855][ T4296]  ? alloc_empty_file_noaccount+0x80/0x80
[  107.721615][ T4296]  __anon_inode_getfd+0x26b/0x3d0
[  107.726682][ T4296]  ? anon_inode_getfd+0x40/0x40
[  107.731574][ T4296]  ? memset+0x35/0x40
[  107.735609][ T4296]  anon_inode_getfd+0x31/0x40
[  107.740331][ T4296]  __se_sys_timerfd_create+0x221/0x2a0
[  107.745835][ T4296]  __x64_sys_timerfd_create+0x5b/0x70
[  107.751259][ T4296]  x64_sys_call+0x7f3/0x9a0
[  107.755799][ T4296]  do_syscall_64+0x4c/0xa0
[  107.760255][ T4296]  ? clear_bhb_loop+0x50/0xa0
[  107.764980][ T4296]  ? clear_bhb_loop+0x50/0xa0
[  107.769710][ T4296]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  107.775641][ T4296] RIP: 0033:0x7f1b33a1f559
[  107.780098][ T4296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.799746][ T4296] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b
[  107.808297][ T4296] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  107.816311][ T4296] RDX: 0000000000000000 RSI: 0000000000080800 RDI: 0000000000000008
[  107.824312][ T4296] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  107.832353][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.840352][ T4296] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  107.848347][ T4296]  </TASK>
[  110.161906][ T4347] FAULT_INJECTION: forcing a failure.
[  110.161906][ T4347] name failslab, interval 1, probability 0, space 0, times 0
[  110.175877][ T4347] CPU: 0 PID: 4347 Comm: syz.6.1546 Not tainted syzkaller #0
[  110.183302][ T4347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  110.193395][ T4347] Call Trace:
[  110.196713][ T4347]  <TASK>
[  110.199671][ T4347]  __dump_stack+0x21/0x30
[  110.204028][ T4347]  dump_stack_lvl+0x110/0x170
[  110.208734][ T4347]  ? show_regs_print_info+0x20/0x20
[  110.213976][ T4347]  ? kasan_quarantine_put+0x34/0x190
[  110.219301][ T4347]  ? kfree+0xc4/0x270
[  110.223329][ T4347]  dump_stack+0x15/0x20
[  110.227504][ T4347]  should_fail+0x3ab/0x500
[  110.231941][ T4347]  __should_failslab+0xa4/0xe0
[  110.236724][ T4347]  should_failslab+0x9/0x20
[  110.241254][ T4347]  slab_pre_alloc_hook+0x39/0xd0
[  110.246211][ T4347]  __kmalloc+0x6d/0x2c0
[  110.250382][ T4347]  ? iter_file_splice_write+0x19f/0xce0
[  110.255968][ T4347]  iter_file_splice_write+0x19f/0xce0
[  110.261364][ T4347]  ? splice_from_pipe+0x180/0x180
[  110.266405][ T4347]  ? generic_file_splice_read+0x460/0x5f0
[  110.272203][ T4347]  ? splice_shrink_spd+0xb0/0xb0
[  110.277164][ T4347]  ? __kasan_check_read+0x11/0x20
[  110.282206][ T4347]  ? fsnotify_perm+0x269/0x5b0
[  110.287016][ T4347]  ? splice_from_pipe+0x180/0x180
[  110.292059][ T4347]  direct_splice_actor+0xe9/0x120
[  110.297102][ T4347]  splice_direct_to_actor+0x4d8/0xb40
[  110.302491][ T4347]  ? do_splice_direct+0x2d0/0x2d0
[  110.307556][ T4347]  ? pipe_to_sendpage+0x320/0x320
[  110.312596][ T4347]  ? security_file_permission+0x83/0xa0
[  110.318166][ T4347]  ? rw_verify_area+0xa7/0x1c0
[  110.322950][ T4347]  do_splice_direct+0x1c2/0x2d0
[  110.327820][ T4347]  ? splice_direct_to_actor+0xb40/0xb40
[  110.333388][ T4347]  ? security_file_permission+0x83/0xa0
[  110.338963][ T4347]  do_sendfile+0x515/0xe20
[  110.343414][ T4347]  ? do_preadv+0x390/0x390
[  110.347856][ T4347]  ? trace_event_buffer_commit+0x252/0x880
[  110.353697][ T4347]  __x64_sys_sendfile64+0x199/0x1f0
[  110.358922][ T4347]  ? __ia32_sys_sendfile+0x190/0x190
[  110.364230][ T4347]  ? trace_sys_enter+0x3d/0x50
[  110.369009][ T4347]  x64_sys_call+0x88d/0x9a0
[  110.373528][ T4347]  do_syscall_64+0x4c/0xa0
[  110.377955][ T4347]  ? clear_bhb_loop+0x50/0xa0
[  110.382660][ T4347]  ? clear_bhb_loop+0x50/0xa0
[  110.387351][ T4347]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  110.393265][ T4347] RIP: 0033:0x7f3d2a350559
[  110.397697][ T4347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.417317][ T4347] RSP: 002b:00007f3d28da9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  110.425749][ T4347] RAX: ffffffffffffffda RBX: 00007f3d2a5d7fa0 RCX: 00007f3d2a350559
[  110.433734][ T4347] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003
[  110.441720][ T4347] RBP: 00007f3d2a3e7ab8 R08: 0000000000000000 R09: 0000000000000000
[  110.449714][ T4347] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000000
[  110.457696][ T4347] R13: 00007f3d2a5d8038 R14: 00007f3d2a5d7fa0 R15: 00007ffc98398318
[  110.465691][ T4347]  </TASK>
[  110.780120][ T4382] device macsec1 entered promiscuous mode
[  111.026393][ T4398] loop2: detected capacity change from 0 to 512
[  111.122362][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,acl,usrquota,errors=remount-ro,. Quota mode: writeback.
[  111.154903][   T30] audit: type=1400 audit(1792200152.724:339): avc:  denied  { watch } for  pid=4397 comm="syz.2.1565" path="/268/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  111.166038][ T4398] EXT4-fs error (device loop2): ext4_readdir:223: inode #2: comm syz.2.1565: path /268/file0: directory fails checksum at offset 0
[  111.198556][ T4398] EXT4-fs (loop2): Remounting filesystem read-only
[  112.504777][ T4466] loop1: detected capacity change from 0 to 2048
[  112.559510][ T4466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  112.594466][ T4479] loop2: detected capacity change from 0 to 256
[  112.610682][ T4466] EXT4-fs error (device loop1): ext4_iget_extra_inode:4604: inode #12: comm syz.1.1587: corrupted in-inode xattr
[  112.729581][   T30] audit: type=1400 audit(1792200154.305:340): avc:  denied  { create } for  pid=4487 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.794246][   T30] audit: type=1400 audit(1792200154.365:341): avc:  denied  { write } for  pid=4487 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.828699][ T4488] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1599'.
[  112.844355][   T30] audit: type=1400 audit(1792200154.365:342): avc:  denied  { nlmsg_write } for  pid=4487 comm="syz.0.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  112.867577][   T30] audit: type=1400 audit(1792200154.395:343): avc:  denied  { bind } for  pid=4490 comm="syz.2.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  113.062046][   T30] audit: type=1400 audit(1792200154.635:344): avc:  denied  { create } for  pid=4511 comm="syz.2.1606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  113.111077][   T30] audit: type=1400 audit(1792200154.665:345): avc:  denied  { module_request } for  pid=4511 comm="syz.2.1606" kmod="net-pf-45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  114.219602][ T4536] loop2: detected capacity change from 0 to 256
[  114.649551][   T45] tipc: Left network mode
[  114.781642][ T4557] loop6: detected capacity change from 0 to 256
[  114.940704][ T4567] loop7: detected capacity change from 0 to 256
[  115.004386][ T4567] FAT-fs (loop7): Unrecognized mount option "uni_xlate=" or missing value
[  115.168874][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.202676][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.211148][ T4568] device bridge_slave_0 entered promiscuous mode
[  115.221426][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.228823][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.237694][ T4568] device bridge_slave_1 entered promiscuous mode
[  115.253755][   T45] device bridge_slave_1 left promiscuous mode
[  115.272099][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.313231][   T45] device bridge_slave_0 left promiscuous mode
[  115.323118][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.336132][   T45] device veth1_macvtap left promiscuous mode
[  115.352507][   T45] device veth0_vlan left promiscuous mode
[  115.907405][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1650'.
[  115.925665][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.940192][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.977737][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.993230][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.009666][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.016837][  T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.040431][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.063940][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.086051][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.093217][  T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.130017][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.162720][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.194275][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.235970][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.290092][ T4568] device veth0_vlan entered promiscuous mode
[  116.318408][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  116.344360][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  116.351947][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  116.407384][ T4568] device veth1_macvtap entered promiscuous mode
[  116.486747][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.518617][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.543034][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.038731][ T4653] overlayfs: failed to clone upperpath
[  119.134477][ T4660] 9pnet: Insufficient options for proto=fd
[  120.102053][ T4670] FAULT_INJECTION: forcing a failure.
[  120.102053][ T4670] name failslab, interval 1, probability 0, space 0, times 0
[  120.189969][ T4662] loop1: detected capacity change from 0 to 1024
[  120.197473][ T4670] CPU: 0 PID: 4670 Comm: syz.2.1666 Not tainted syzkaller #0
[  120.204895][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  120.215018][ T4670] Call Trace:
[  120.218326][ T4670]  <TASK>
[  120.221288][ T4670]  __dump_stack+0x21/0x30
[  120.225656][ T4670]  dump_stack_lvl+0x110/0x170
[  120.230369][ T4670]  ? show_regs_print_info+0x20/0x20
[  120.235620][ T4670]  dump_stack+0x15/0x20
[  120.239813][ T4670]  should_fail+0x3ab/0x500
[  120.244273][ T4670]  __should_failslab+0xa4/0xe0
[  120.249074][ T4670]  should_failslab+0x9/0x20
[  120.253632][ T4670]  slab_pre_alloc_hook+0x39/0xd0
[  120.258616][ T4670]  kmem_cache_alloc_trace+0x48/0x270
[  120.263935][ T4670]  ? __get_vm_area_node+0x11d/0x350
[  120.269188][ T4670]  __get_vm_area_node+0x11d/0x350
[  120.274258][ T4670]  __vmalloc_node_range+0xe8/0xad0
[  120.279408][ T4670]  ? bpf_prog_calc_tag+0x100/0x720
[  120.284556][ T4670]  ? __kasan_kmalloc+0xd4/0x100
[  120.289442][ T4670]  ? __kmalloc+0x13d/0x2c0
[  120.293901][ T4670]  ? kvmalloc_node+0x211/0x320
[  120.298705][ T4670]  ? bpf_prog_load+0x10c5/0x1620
[  120.303686][ T4670]  ? __x64_sys_bpf+0x7c/0x90
[  120.308309][ T4670]  ? x64_sys_call+0x4b9/0x9a0
[  120.313029][ T4670]  ? bpf_prog_calc_tag+0x100/0x720
[  120.318176][ T4670]  vmalloc+0x78/0x90
[  120.322118][ T4670]  ? bpf_prog_calc_tag+0x100/0x720
[  120.327274][ T4670]  bpf_prog_calc_tag+0x100/0x720
[  120.332259][ T4670]  ? __bpf_prog_free+0xe0/0xe0
[  120.337058][ T4670]  ? sort_r+0x7d/0xe20
[  120.341166][ T4670]  ? find_subprog+0x120/0x120
[  120.345879][ T4670]  resolve_pseudo_ldimm64+0xd0/0x10f0
[  120.351289][ T4670]  ? check_attach_btf_id+0x440/0xd80
[  120.356618][ T4670]  ? sort+0x37/0x50
[  120.360492][ T4670]  ? verbose+0x2b0/0x2b0
[  120.364770][ T4670]  ? add_subprog+0x26b/0x3b0
[  120.369402][ T4670]  ? check_attach_btf_id+0xd80/0xd80
[  120.374723][ T4670]  ? __mark_reg_known+0x1b0/0x1b0
[  120.379814][ T4670]  ? security_capable+0x87/0xb0
[  120.384708][ T4670]  bpf_check+0x2cfc/0xf750
[  120.389164][ T4670]  ? is_bpf_text_address+0x177/0x190
[  120.394487][ T4670]  ? bpf_get_btf_vmlinux+0x70/0x70
[  120.399639][ T4670]  ? unwind_get_return_address+0x4d/0x90
[  120.405313][ T4670]  ? stack_trace_save+0xf0/0xf0
[  120.410204][ T4670]  ? arch_stack_walk+0xee/0x140
[  120.415096][ T4670]  ? stack_trace_save+0xa6/0xf0
[  120.419980][ T4670]  ? __stack_depot_save+0x34/0x480
[  120.425124][ T4670]  ? __kasan_kmalloc+0xe6/0x100
[  120.429992][ T4670]  ? __kasan_kmalloc+0xd4/0x100
[  120.434861][ T4670]  ? kmem_cache_alloc_trace+0x119/0x270
[  120.440433][ T4670]  ? selinux_bpf_prog_alloc+0x51/0x140
[  120.445934][ T4670]  ? security_bpf_prog_alloc+0x62/0x90
[  120.451417][ T4670]  ? bpf_prog_load+0x9d4/0x1620
[  120.456290][ T4670]  ? __sys_bpf+0x51d/0x7d0
[  120.460746][ T4670]  ? __x64_sys_bpf+0x7c/0x90
[  120.465356][ T4670]  ? x64_sys_call+0x4b9/0x9a0
[  120.470054][ T4670]  ? do_syscall_64+0x4c/0xa0
[  120.474660][ T4670]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  120.480756][ T4670]  ? check_stack_object+0x81/0x150
[  120.485894][ T4670]  ? memset+0x35/0x40
[  120.489895][ T4670]  ? bpf_obj_name_cpy+0x193/0x1e0
[  120.494941][ T4670]  bpf_prog_load+0x10c5/0x1620
[  120.499740][ T4670]  ? map_freeze+0x370/0x370
[  120.504260][ T4670]  ? selinux_bpf+0xc7/0xf0
[  120.508691][ T4670]  ? security_bpf+0x82/0xa0
[  120.513213][ T4670]  __sys_bpf+0x51d/0x7d0
[  120.517482][ T4670]  ? bpf_link_show_fdinfo+0x330/0x330
[  120.522896][ T4670]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  120.529255][ T4670]  __x64_sys_bpf+0x7c/0x90
[  120.533695][ T4670]  x64_sys_call+0x4b9/0x9a0
[  120.538217][ T4670]  do_syscall_64+0x4c/0xa0
[  120.542650][ T4670]  ? clear_bhb_loop+0x50/0xa0
[  120.547347][ T4670]  ? clear_bhb_loop+0x50/0xa0
[  120.552041][ T4670]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  120.557972][ T4670] RIP: 0033:0x7f1b33a1f559
[  120.562409][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  120.582033][ T4670] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  120.590470][ T4670] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  120.598459][ T4670] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  120.606448][ T4670] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  120.614436][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  120.622425][ T4670] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  120.630422][ T4670]  </TASK>
[  120.645644][ T4670] syz.2.1666: vmalloc error: size 64, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0
[  120.671857][ T4662] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature
[  120.689972][ T4670] CPU: 1 PID: 4670 Comm: syz.2.1666 Not tainted syzkaller #0
[  120.697398][ T4670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  120.707495][ T4670] Call Trace:
[  120.710806][ T4670]  <TASK>
[  120.713769][ T4670]  __dump_stack+0x21/0x30
[  120.715525][ T4691] loop6: detected capacity change from 0 to 4096
[  120.718135][ T4670]  dump_stack_lvl+0x110/0x170
[  120.718162][ T4670]  ? show_regs_print_info+0x20/0x20
[  120.734399][ T4670]  ? pr_cont_kernfs_name+0xe3/0xf0
[  120.739565][ T4670]  dump_stack+0x15/0x20
[  120.743756][ T4670]  warn_alloc+0x1dc/0x200
[  120.748118][ T4670]  ? trace_event_raw_event_kmem_alloc+0xd6/0x100
[  120.754476][ T4670]  ? zone_watermark_ok_safe+0x270/0x270
[  120.760054][ T4670]  ? kmem_cache_alloc_trace+0x119/0x270
[  120.765624][ T4670]  ? __get_vm_area_node+0x11d/0x350
[  120.770846][ T4670]  ? __get_vm_area_node+0x33e/0x350
[  120.776066][ T4670]  __vmalloc_node_range+0x15e/0xad0
[  120.781289][ T4670]  ? __kasan_kmalloc+0xd4/0x100
[  120.786153][ T4670]  ? __kmalloc+0x13d/0x2c0
[  120.790591][ T4670]  ? kvmalloc_node+0x211/0x320
[  120.795376][ T4670]  ? x64_sys_call+0x4b9/0x9a0
[  120.800073][ T4670]  ? bpf_prog_calc_tag+0x100/0x720
[  120.805209][ T4670]  vmalloc+0x78/0x90
[  120.809125][ T4670]  ? bpf_prog_calc_tag+0x100/0x720
[  120.814250][ T4670]  bpf_prog_calc_tag+0x100/0x720
[  120.819207][ T4670]  ? __bpf_prog_free+0xe0/0xe0
[  120.823994][ T4670]  ? sort_r+0x7d/0xe20
[  120.828081][ T4670]  ? find_subprog+0x120/0x120
[  120.832774][ T4670]  resolve_pseudo_ldimm64+0xd0/0x10f0
[  120.838167][ T4670]  ? check_attach_btf_id+0x440/0xd80
[  120.843474][ T4670]  ? sort+0x37/0x50
[  120.847298][ T4670]  ? verbose+0x2b0/0x2b0
[  120.851554][ T4670]  ? add_subprog+0x26b/0x3b0
[  120.856159][ T4670]  ? check_attach_btf_id+0xd80/0xd80
[  120.861462][ T4670]  ? __mark_reg_known+0x1b0/0x1b0
[  120.866507][ T4670]  ? security_capable+0x87/0xb0
[  120.871390][ T4670]  bpf_check+0x2cfc/0xf750
[  120.875831][ T4670]  ? is_bpf_text_address+0x177/0x190
[  120.881138][ T4670]  ? bpf_get_btf_vmlinux+0x70/0x70
[  120.886274][ T4670]  ? unwind_get_return_address+0x4d/0x90
[  120.891932][ T4670]  ? stack_trace_save+0xf0/0xf0
[  120.896803][ T4670]  ? arch_stack_walk+0xee/0x140
[  120.901691][ T4670]  ? stack_trace_save+0xa6/0xf0
[  120.906559][ T4670]  ? __stack_depot_save+0x34/0x480
[  120.911693][ T4670]  ? __kasan_kmalloc+0xe6/0x100
[  120.916567][ T4670]  ? __kasan_kmalloc+0xd4/0x100
[  120.921432][ T4670]  ? kmem_cache_alloc_trace+0x119/0x270
[  120.926998][ T4670]  ? selinux_bpf_prog_alloc+0x51/0x140
[  120.932474][ T4670]  ? security_bpf_prog_alloc+0x62/0x90
[  120.937950][ T4670]  ? bpf_prog_load+0x9d4/0x1620
[  120.942822][ T4670]  ? __sys_bpf+0x51d/0x7d0
[  120.947256][ T4670]  ? __x64_sys_bpf+0x7c/0x90
[  120.951857][ T4670]  ? x64_sys_call+0x4b9/0x9a0
[  120.956550][ T4670]  ? do_syscall_64+0x4c/0xa0
[  120.961151][ T4670]  ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  120.967242][ T4670]  ? check_stack_object+0x81/0x150
[  120.972369][ T4670]  ? memset+0x35/0x40
[  120.976369][ T4670]  ? bpf_obj_name_cpy+0x193/0x1e0
[  120.981410][ T4670]  bpf_prog_load+0x10c5/0x1620
[  120.986195][ T4670]  ? map_freeze+0x370/0x370
[  120.990714][ T4670]  ? selinux_bpf+0xc7/0xf0
[  120.995151][ T4670]  ? security_bpf+0x82/0xa0
[  120.999683][ T4670]  __sys_bpf+0x51d/0x7d0
[  121.003942][ T4670]  ? bpf_link_show_fdinfo+0x330/0x330
[  121.009351][ T4670]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  121.015699][ T4670]  __x64_sys_bpf+0x7c/0x90
[  121.020135][ T4670]  x64_sys_call+0x4b9/0x9a0
[  121.024656][ T4670]  do_syscall_64+0x4c/0xa0
[  121.029086][ T4670]  ? clear_bhb_loop+0x50/0xa0
[  121.033781][ T4670]  ? clear_bhb_loop+0x50/0xa0
[  121.038473][ T4670]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.044392][ T4670] RIP: 0033:0x7f1b33a1f559
[  121.048827][ T4670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.068450][ T4670] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  121.076878][ T4670] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  121.084866][ T4670] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005
[  121.092850][ T4670] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  121.100833][ T4670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.108822][ T4670] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  121.116817][ T4670]  </TASK>
[  121.126136][ T4670] Mem-Info:
[  121.129299][ T4670] active_anon:53 inactive_anon:27609 isolated_anon:0
[  121.129299][ T4670]  active_file:20690 inactive_file:3187 isolated_file:0
[  121.129299][ T4670]  unevictable:16454 dirty:127 writeback:0
[  121.129299][ T4670]  slab_reclaimable:10212 slab_unreclaimable:72009
[  121.129299][ T4670]  mapped:32648 shmem:20131 pagetables:675 bounce:0
[  121.129299][ T4670]  kernel_misc_reclaimable:0
[  121.129299][ T4670]  free:1505367 free_pcp:17349 free_cma:0
[  121.178267][ T4670] Node 0 active_anon:212kB inactive_anon:110336kB active_file:82760kB inactive_file:12748kB unevictable:65816kB isolated(anon):0kB isolated(file):0kB mapped:130592kB dirty:508kB writeback:0kB shmem:80524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4428kB pagetables:2600kB all_unreclaimable? no
[  121.210963][ T4670] DMA32 free:2978772kB min:62660kB low:78324kB high:93988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2982740kB mlocked:0kB bounce:0kB free_pcp:3968kB local_pcp:0kB free_cma:0kB
[  121.226948][ T4691] EXT4-fs (loop6): Ignoring removed orlov option
[  121.262093][ T4670] lowmem_reserve[]: 0 3941 3941
[  121.276163][ T4670] Normal free:3042696kB min:84792kB low:105988kB high:127184kB reserved_highatomic:0KB active_anon:212kB inactive_anon:109636kB active_file:82760kB inactive_file:12748kB unevictable:65816kB writepending:508kB present:5242880kB managed:4036096kB mlocked:0kB bounce:0kB free_pcp:66972kB local_pcp:39852kB free_cma:0kB
[  121.307377][ T4670] lowmem_reserve[]: 0 0 0
[  121.312019][ T4691] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,max_dir_size_kb=0x000000004f2040d2,auto_da_alloc,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  121.349968][ T4670] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 3*2048kB (UM) 724*4096kB (M) = 2978772kB
[  121.408347][ T4670] Normal: 481*4kB (ME) 247*8kB (UME) 205*16kB (ME) 118*32kB (ME) 173*64kB (ME) 113*128kB (UME) 58*256kB (UME) 34*512kB (UM) 20*1024kB (UM) 2*2048kB (M) 720*4096kB (UM) = 3042444kB
[  121.439772][ T4670] 57547 total pagecache pages
[  121.444637][ T4670] 60 pages in swap cache
[  121.449001][ T4670] Swap cache stats: add 477, delete 435, find 77/77
[  121.455834][ T4670] Free swap  = 124472kB
[  121.465197][ T4670] Total swap = 124996kB
[  121.469393][ T4670] 2097051 pages RAM
[  121.482222][ T4706] overlayfs: failed to clone upperpath
[  121.498630][ T4670] 0 pages HighMem/MovableOnly
[  121.507163][ T4670] 342342 pages reserved
[  121.520378][ T4670] 0 pages cma reserved
[  121.577088][ T4718] usb usb8: usbfs: process 4718 (syz.2.1685) did not claim interface 0 before use
[  121.584305][ T4715] FAULT_INJECTION: forcing a failure.
[  121.584305][ T4715] name failslab, interval 1, probability 0, space 0, times 0
[  121.640698][ T4715] CPU: 0 PID: 4715 Comm: syz.6.1680 Not tainted syzkaller #0
[  121.648133][ T4715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.658230][ T4715] Call Trace:
[  121.661538][ T4715]  <TASK>
[  121.664497][ T4715]  __dump_stack+0x21/0x30
[  121.668863][ T4715]  dump_stack_lvl+0x110/0x170
[  121.673577][ T4715]  ? show_regs_print_info+0x20/0x20
[  121.678810][ T4715]  ? __kasan_check_read+0x11/0x20
[  121.683875][ T4715]  dump_stack+0x15/0x20
[  121.688073][ T4715]  should_fail+0x3ab/0x500
[  121.692526][ T4715]  __should_failslab+0xa4/0xe0
[  121.697314][ T4715]  should_failslab+0x9/0x20
[  121.701832][ T4715]  slab_pre_alloc_hook+0x39/0xd0
[  121.706787][ T4715]  ? security_inode_alloc+0x33/0x110
[  121.712096][ T4715]  kmem_cache_alloc+0x44/0x260
[  121.716902][ T4715]  security_inode_alloc+0x33/0x110
[  121.722061][ T4715]  inode_init_always+0x72c/0x9b0
[  121.727021][ T4715]  new_inode_pseudo+0x91/0x210
[  121.731805][ T4715]  alloc_anon_inode+0x21/0x300
[  121.736593][ T4715]  aio_setup_ring+0xfc/0xba0
[  121.741198][ T4715]  ? free_ioctx_reqs+0x160/0x160
[  121.746158][ T4715]  ioctx_alloc+0x31d/0x6d0
[  121.750593][ T4715]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  121.756943][ T4715]  __se_sys_io_setup+0x6f/0x220
[  121.761813][ T4715]  __x64_sys_io_setup+0x5b/0x70
[  121.766678][ T4715]  x64_sys_call+0x767/0x9a0
[  121.771200][ T4715]  do_syscall_64+0x4c/0xa0
[  121.775634][ T4715]  ? clear_bhb_loop+0x50/0xa0
[  121.780324][ T4715]  ? clear_bhb_loop+0x50/0xa0
[  121.785017][ T4715]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  121.790926][ T4715] RIP: 0033:0x7f3d2a350559
[  121.795354][ T4715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  121.814976][ T4715] RSP: 002b:00007f3d28da9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  121.823471][ T4715] RAX: ffffffffffffffda RBX: 00007f3d2a5d7fa0 RCX: 00007f3d2a350559
[  121.831489][ T4715] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000239f
[  121.839486][ T4715] RBP: 00007f3d2a3e7ab8 R08: 0000000000000000 R09: 0000000000000000
[  121.847484][ T4715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  121.855478][ T4715] R13: 00007f3d2a5d8038 R14: 00007f3d2a5d7fa0 R15: 00007ffc98398318
[  121.863480][ T4715]  </TASK>
[  121.888728][ T4727] loop2: detected capacity change from 0 to 512
[  121.975796][ T4727] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,stripe=0x000000000000f7b2,grpquota,. Quota mode: writeback.
[  122.023943][ T4727] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  122.091931][ T4727] EXT4-fs (loop2): shut down requested (2)
[  122.124600][   T30] audit: type=1400 audit(1792200163.710:346): avc:  denied  { setattr } for  pid=4726 comm="syz.2.1687" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  122.190177][   T30] audit: type=1400 audit(1792200163.730:347): avc:  denied  { read } for  pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  122.238238][ T4737] FAULT_INJECTION: forcing a failure.
[  122.238238][ T4737] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  122.261564][   T30] audit: type=1400 audit(1792200163.730:348): avc:  denied  { search } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.301977][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[  122.313027][ T4737] CPU: 0 PID: 4737 Comm: syz.7.1689 Not tainted syzkaller #0
[  122.319641][   T30] audit: type=1400 audit(1792200163.730:349): avc:  denied  { write } for  pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.320478][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.351748][ T4737] Call Trace:
[  122.355069][ T4737]  <TASK>
[  122.358049][ T4737]  __dump_stack+0x21/0x30
[  122.362416][ T4737]  dump_stack_lvl+0x110/0x170
[  122.367128][ T4737]  ? show_regs_print_info+0x20/0x20
[  122.372371][ T4737]  ? __kasan_check_read+0x11/0x20
[  122.377183][   T30] audit: type=1400 audit(1792200163.730:350): avc:  denied  { add_name } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  122.377438][ T4737]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  122.403761][ T4737]  dump_stack+0x15/0x20
[  122.407942][ T4737]  should_fail+0x3ab/0x500
[  122.412381][ T4737]  should_fail_alloc_page+0x55/0x80
[  122.417598][ T4737]  prepare_alloc_pages+0x13f/0x590
[  122.422735][ T4737]  ? __alloc_pages_bulk+0xab0/0xab0
[  122.427949][ T4737]  ? security_file_alloc+0x33/0x120
[  122.433169][ T4737]  __alloc_pages+0x11d/0x460
[  122.437792][ T4737]  ? prep_new_page+0x110/0x110
[  122.442689][ T4737]  ? xas_load+0x2dc/0x300
[  122.447062][ T4737]  pagecache_get_page+0xacc/0xdd0
[  122.452118][ T4737]  ? alloc_file+0x448/0x580
[  122.456655][ T4737]  ? page_cache_prev_miss+0x290/0x290
[  122.462053][ T4737]  ? memcpy+0x56/0x70
[  122.466170][ T4737]  ? alloc_anon_inode+0x225/0x300
[  122.471352][ T4737]  aio_setup_ring+0x39d/0xba0
[  122.476070][ T4737]  ? free_ioctx_reqs+0x160/0x160
[  122.481039][ T4737]  ioctx_alloc+0x31d/0x6d0
[  122.485471][ T4737]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  122.491821][ T4737]  __se_sys_io_setup+0x6f/0x220
[  122.496695][ T4737]  __x64_sys_io_setup+0x5b/0x70
[  122.501568][ T4737]  x64_sys_call+0x767/0x9a0
[  122.506088][ T4737]  do_syscall_64+0x4c/0xa0
[  122.510524][ T4737]  ? clear_bhb_loop+0x50/0xa0
[  122.515222][ T4737]  ? clear_bhb_loop+0x50/0xa0
[  122.519916][ T4737]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.525828][ T4737] RIP: 0033:0x7f8e27413559
[  122.530263][ T4737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.549883][ T4737] RSP: 002b:00007f8e25e4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  122.558322][ T4737] RAX: ffffffffffffffda RBX: 00007f8e2769b090 RCX: 00007f8e27413559
[  122.566327][ T4737] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 000000000000003f
[  122.574314][ T4737] RBP: 00007f8e274aaab8 R08: 0000000000000000 R09: 0000000000000000
[  122.582298][ T4737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.590290][ T4737] R13: 00007f8e2769b128 R14: 00007f8e2769b090 R15: 00007ffeaffd4618
[  122.598282][ T4737]  </TASK>
[  122.605012][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.615511][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[  122.624262][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.632514][   T30] audit: type=1400 audit(1792200163.730:351): avc:  denied  { create } for  pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  122.654324][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.666046][ T4750] FAULT_INJECTION: forcing a failure.
[  122.666046][ T4750] name failslab, interval 1, probability 0, space 0, times 0
[  122.681818][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.690163][   T30] audit: type=1400 audit(1792200163.730:352): avc:  denied  { append open } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  122.714064][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.722787][ T4750] CPU: 1 PID: 4750 Comm: syz.2.1695 Not tainted syzkaller #0
[  122.730197][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  122.740280][ T4750] Call Trace:
[  122.743589][ T4750]  <TASK>
[  122.746548][ T4750]  __dump_stack+0x21/0x30
[  122.750912][ T4750]  dump_stack_lvl+0x110/0x170
[  122.755627][ T4750]  ? show_regs_print_info+0x20/0x20
[  122.760864][ T4750]  dump_stack+0x15/0x20
[  122.765053][ T4750]  should_fail+0x3ab/0x500
[  122.769505][ T4750]  __should_failslab+0xa4/0xe0
[  122.774305][ T4750]  should_failslab+0x9/0x20
[  122.778851][ T4750]  slab_pre_alloc_hook+0x39/0xd0
[  122.783830][ T4750]  kmem_cache_alloc_trace+0x48/0x270
[  122.789154][ T4750]  ? call_usermodehelper_setup+0x8e/0x210
[  122.794914][ T4750]  call_usermodehelper_setup+0x8e/0x210
[  122.800497][ T4750]  ? __request_module+0x920/0x920
[  122.805564][ T4750]  __request_module+0x391/0x920
[  122.810451][ T4750]  ? _trace_android_vh_delayacct_thrashing_end+0x110/0x110
[  122.817783][ T4750]  ? __kasan_check_write+0x14/0x20
[  122.822927][ T4750]  ? _raw_spin_lock+0x94/0xf0
[  122.827636][ T4750]  inet6_create+0x2ee/0xf50
[  122.832175][ T4750]  __sock_create+0x38d/0x7a0
[  122.836797][ T4750]  __sys_socket+0xec/0x190
[  122.841247][ T4750]  __x64_sys_socket+0x7a/0x90
[  122.845960][ T4750]  x64_sys_call+0x8c5/0x9a0
[  122.850500][ T4750]  do_syscall_64+0x4c/0xa0
[  122.854955][ T4750]  ? clear_bhb_loop+0x50/0xa0
[  122.859664][ T4750]  ? clear_bhb_loop+0x50/0xa0
[  122.864378][ T4750]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  122.870301][ T4750] RIP: 0033:0x7f1b33a1f559
[  122.874750][ T4750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  122.894422][ T4750] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  122.902879][ T4750] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  122.910883][ T4750] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a
[  122.919053][ T4750] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  122.927072][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  122.935060][ T4750] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  122.943057][ T4750]  </TASK>
[  122.961092][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.989186][   T30] audit: type=1400 audit(1792200163.740:353): avc:  denied  { getattr } for  pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  123.016984][ T4755] netlink: 'syz.0.1697': attribute type 12 has an invalid length.
[  123.049193][   T30] audit: type=1400 audit(1792200164.620:354): avc:  denied  { read } for  pid=4757 comm="syz.6.1699" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.084523][   T30] audit: type=1400 audit(1792200164.620:355): avc:  denied  { open } for  pid=4757 comm="syz.6.1699" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  123.180782][ T4769] loop6: detected capacity change from 0 to 512
[  123.190565][ T4770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1705'.
[  123.228410][ T4769] EXT4-fs (loop6): Ignoring removed oldalloc option
[  123.254398][ T4769] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  123.268373][ T4769] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  123.307260][ T4769] EXT4-fs (loop6): 1 orphan inode deleted
[  123.365042][ T4769] EXT4-fs (loop6): 1 truncate cleaned up
[  123.378640][ T4769] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsddf,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback.
[  123.407720][ T4784] loop7: detected capacity change from 0 to 256
[  123.520519][ T4784] FAT-fs (loop7): Directory bread(block 64) failed
[  123.532875][ T4784] FAT-fs (loop7): Directory bread(block 65) failed
[  123.543963][ T4784] FAT-fs (loop7): Directory bread(block 66) failed
[  123.554949][ T4784] FAT-fs (loop7): Directory bread(block 67) failed
[  123.566061][ T4784] FAT-fs (loop7): Directory bread(block 68) failed
[  123.573669][ T4769] EXT4-fs error (device loop6): empty_inline_dir:1904: inode #12: block 7: comm syz.6.1704: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[  123.625710][ T4784] FAT-fs (loop7): Directory bread(block 69) failed
[  123.640221][ T4769] EXT4-fs (loop6): Remounting filesystem read-only
[  123.654703][ T4784] FAT-fs (loop7): Directory bread(block 70) failed
[  123.665622][ T4769] EXT4-fs warning (device loop6): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  123.684797][ T4784] FAT-fs (loop7): Directory bread(block 71) failed
[  123.698875][ T4784] FAT-fs (loop7): Directory bread(block 72) failed
[  123.715609][ T4784] FAT-fs (loop7): Directory bread(block 73) failed
[  124.216201][ T4804] loop6: detected capacity change from 0 to 512
[  124.253099][ T4804] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.1718: inode has both inline data and extents flags
[  124.276813][ T4804] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.1718: couldn't read orphan inode 15 (err -117)
[  124.299571][ T4804] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,usrquota,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  124.841178][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.848330][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.856026][ T4863] device bridge_slave_0 entered promiscuous mode
[  124.863338][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.870445][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.880376][ T4863] device bridge_slave_1 entered promiscuous mode
[  124.930858][   T45] device bridge_slave_1 left promiscuous mode
[  124.951828][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.973411][   T45] device bridge_slave_0 left promiscuous mode
[  124.986839][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.996749][   T45] device veth1_macvtap left promiscuous mode
[  125.002903][   T45] device veth0_vlan left promiscuous mode
[  125.309615][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.316783][ T4863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.324184][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.331307][ T4863] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.387635][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  125.413315][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.438877][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.460747][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  125.473846][ T4903] FAULT_INJECTION: forcing a failure.
[  125.473846][ T4903] name failslab, interval 1, probability 0, space 0, times 0
[  125.487169][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.493664][ T4903] CPU: 0 PID: 4903 Comm: syz.2.1762 Not tainted syzkaller #0
[  125.494397][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.501622][ T4903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  125.501635][ T4903] Call Trace:
[  125.501643][ T4903]  <TASK>
[  125.501650][ T4903]  __dump_stack+0x21/0x30
[  125.501679][ T4903]  dump_stack_lvl+0x110/0x170
[  125.534197][ T4903]  ? show_regs_print_info+0x20/0x20
[  125.539445][ T4903]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  125.545303][ T4903]  dump_stack+0x15/0x20
[  125.549490][ T4903]  should_fail+0x3ab/0x500
[  125.553946][ T4903]  __should_failslab+0xa4/0xe0
[  125.558741][ T4903]  should_failslab+0x9/0x20
[  125.563334][ T4903]  slab_pre_alloc_hook+0x39/0xd0
[  125.568862][ T4903]  ? __d_alloc+0x2d/0x690
[  125.573223][ T4903]  kmem_cache_alloc+0x44/0x260
[  125.578013][ T4903]  __d_alloc+0x2d/0x690
[  125.582189][ T4903]  d_alloc_pseudo+0x1d/0x70
[  125.586710][ T4903]  alloc_file_pseudo+0xe0/0x200
[  125.591585][ T4903]  ? alloc_empty_file_noaccount+0x80/0x80
[  125.597332][ T4903]  ? alloc_anon_inode+0x225/0x300
[  125.602388][ T4903]  ? memcpy+0x56/0x70
[  125.606390][ T4903]  ? alloc_anon_inode+0x225/0x300
[  125.611434][ T4903]  aio_setup_ring+0x1f2/0xba0
[  125.616131][ T4903]  ? free_ioctx_reqs+0x160/0x160
[  125.621095][ T4903]  ioctx_alloc+0x31d/0x6d0
[  125.625536][ T4903]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  125.631878][ T4903]  __se_sys_io_setup+0x6f/0x220
[  125.637063][ T4903]  __x64_sys_io_setup+0x5b/0x70
[  125.641955][ T4903]  x64_sys_call+0x767/0x9a0
[  125.646480][ T4903]  do_syscall_64+0x4c/0xa0
[  125.650919][ T4903]  ? clear_bhb_loop+0x50/0xa0
[  125.655620][ T4903]  ? clear_bhb_loop+0x50/0xa0
[  125.660329][ T4903]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  125.666245][ T4903] RIP: 0033:0x7f1b33a1f559
[  125.670684][ T4903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.690312][ T4903] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  125.698752][ T4903] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  125.706747][ T4903] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000239f
[  125.714734][ T4903] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  125.722748][ T4903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  125.730738][ T4903] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  125.738729][ T4903]  </TASK>
[  125.746828][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  125.761994][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  125.784262][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.791430][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.889925][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  125.898351][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  125.914874][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  125.923405][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.904948][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  126.913877][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  126.929896][ T4863] device veth0_vlan entered promiscuous mode
[  126.936314][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  126.945078][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  126.987339][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  127.005760][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  127.036226][ T4863] device veth1_macvtap entered promiscuous mode
[  127.048864][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  127.059227][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  127.087481][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.399460][ T4947] FAULT_INJECTION: forcing a failure.
[  128.399460][ T4947] name failslab, interval 1, probability 0, space 0, times 0
[  128.430665][ T4947] CPU: 0 PID: 4947 Comm: syz.7.1778 Not tainted syzkaller #0
[  128.438108][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  128.448203][ T4947] Call Trace:
[  128.451508][ T4947]  <TASK>
[  128.454465][ T4947]  __dump_stack+0x21/0x30
[  128.458828][ T4947]  dump_stack_lvl+0x110/0x170
[  128.463530][ T4947]  ? show_regs_print_info+0x20/0x20
[  128.468760][ T4947]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  128.474598][ T4947]  dump_stack+0x15/0x20
[  128.478820][ T4947]  should_fail+0x3ab/0x500
[  128.483271][ T4947]  __should_failslab+0xa4/0xe0
[  128.488069][ T4947]  should_failslab+0x9/0x20
[  128.492600][ T4947]  slab_pre_alloc_hook+0x39/0xd0
[  128.497583][ T4947]  ? __d_alloc+0x2d/0x690
[  128.501938][ T4947]  kmem_cache_alloc+0x44/0x260
[  128.506729][ T4947]  __d_alloc+0x2d/0x690
[  128.510914][ T4947]  d_alloc_pseudo+0x1d/0x70
[  128.515461][ T4947]  alloc_file_pseudo+0xe0/0x200
[  128.520338][ T4947]  ? alloc_empty_file_noaccount+0x80/0x80
[  128.526085][ T4947]  ? alloc_anon_inode+0x225/0x300
[  128.531139][ T4947]  ? memcpy+0x56/0x70
[  128.535158][ T4947]  ? alloc_anon_inode+0x225/0x300
[  128.540215][ T4947]  aio_setup_ring+0x1f2/0xba0
[  128.544928][ T4947]  ? free_ioctx_reqs+0x160/0x160
[  128.549893][ T4947]  ioctx_alloc+0x31d/0x6d0
[  128.554334][ T4947]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  128.560715][ T4947]  __se_sys_io_setup+0x6f/0x220
[  128.565593][ T4947]  __x64_sys_io_setup+0x5b/0x70
[  128.570467][ T4947]  x64_sys_call+0x767/0x9a0
[  128.574998][ T4947]  do_syscall_64+0x4c/0xa0
[  128.579443][ T4947]  ? clear_bhb_loop+0x50/0xa0
[  128.584154][ T4947]  ? clear_bhb_loop+0x50/0xa0
[  128.588869][ T4947]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  128.594785][ T4947] RIP: 0033:0x7f8e27413559
[  128.599229][ T4947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.618864][ T4947] RSP: 002b:00007f8e25e6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  128.627308][ T4947] RAX: ffffffffffffffda RBX: 00007f8e2769afa0 RCX: 00007f8e27413559
[  128.635312][ T4947] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000239f
[  128.643308][ T4947] RBP: 00007f8e274aaab8 R08: 0000000000000000 R09: 0000000000000000
[  128.651304][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  128.659299][ T4947] R13: 00007f8e2769b038 R14: 00007f8e2769afa0 R15: 00007ffeaffd4618
[  128.667302][ T4947]  </TASK>
[  128.694882][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.712173][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  128.720853][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  128.729560][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  128.794616][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  128.794633][   T30] audit: type=1400 audit(1792200170.373:382): avc:  denied  { name_bind } for  pid=4960 comm="syz.0.1785" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  129.285803][   T30] audit: type=1400 audit(1792200170.863:383): avc:  denied  { read write } for  pid=4984 comm="syz.6.1791" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  129.367964][   T30] audit: type=1400 audit(1792200170.933:384): avc:  denied  { open } for  pid=4984 comm="syz.6.1791" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  129.412254][ T4988] FAULT_INJECTION: forcing a failure.
[  129.412254][ T4988] name failslab, interval 1, probability 0, space 0, times 0
[  129.431847][ T4990] FAULT_INJECTION: forcing a failure.
[  129.431847][ T4990] name failslab, interval 1, probability 0, space 0, times 0
[  129.445616][ T4990] CPU: 1 PID: 4990 Comm: syz.6.1793 Not tainted syzkaller #0
[  129.453055][ T4990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  129.463151][ T4990] Call Trace:
[  129.466468][ T4990]  <TASK>
[  129.469435][ T4990]  __dump_stack+0x21/0x30
[  129.473805][ T4990]  dump_stack_lvl+0x110/0x170
[  129.478523][ T4990]  ? show_regs_print_info+0x20/0x20
[  129.483788][ T4990]  ? __kasan_check_write+0x14/0x20
[  129.488942][ T4990]  ? _raw_spin_lock+0x94/0xf0
[  129.493653][ T4990]  dump_stack+0x15/0x20
[  129.497843][ T4990]  should_fail+0x3ab/0x500
[  129.502301][ T4990]  __should_failslab+0xa4/0xe0
[  129.507100][ T4990]  should_failslab+0x9/0x20
[  129.511636][ T4990]  slab_pre_alloc_hook+0x39/0xd0
[  129.516607][ T4990]  ? __kernfs_new_node+0xe1/0x670
[  129.521676][ T4990]  kmem_cache_alloc+0x44/0x260
[  129.526489][ T4990]  __kernfs_new_node+0xe1/0x670
[  129.531395][ T4990]  ? kernfs_new_node+0x260/0x260
[  129.536374][ T4990]  ? kernfs_create_dir_ns+0x114/0x130
[  129.541785][ T4990]  ? sysfs_create_dir_ns+0x163/0x290
[  129.547103][ T4990]  ? __kasan_check_write+0x14/0x20
[  129.552259][ T4990]  kernfs_new_node+0x150/0x260
[  129.557063][ T4990]  __kernfs_create_file+0x4e/0x270
[  129.562214][ T4990]  sysfs_add_file_mode_ns+0x29a/0x350
[  129.567636][ T4990]  sysfs_create_file_ns+0x12a/0x1b0
[  129.572881][ T4990]  ? sysfs_add_file_mode_ns+0x350/0x350
[  129.578467][ T4990]  ? dev_fwnode+0x50/0x80
[  129.582834][ T4990]  device_add+0x494/0xe90
[  129.587313][ T4990]  hci_register_dev+0x2e4/0x840
[  129.592227][ T4990]  hci_uart_tty_ioctl+0x91e/0xae0
[  129.597298][ T4990]  ? hci_uart_tty_write+0x10/0x10
[  129.602362][ T4990]  tty_ioctl+0x8db/0xc60
[  129.606639][ T4990]  ? tty_get_icount+0xa0/0xa0
[  129.611350][ T4990]  __se_sys_ioctl+0x121/0x1a0
[  129.616058][ T4990]  __x64_sys_ioctl+0x7b/0x90
[  129.620671][ T4990]  x64_sys_call+0x2f/0x9a0
[  129.625103][ T4990]  do_syscall_64+0x4c/0xa0
[  129.629541][ T4990]  ? clear_bhb_loop+0x50/0xa0
[  129.634241][ T4990]  ? clear_bhb_loop+0x50/0xa0
[  129.638941][ T4990]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.644876][ T4990] RIP: 0033:0x7f3d2a350559
[  129.649312][ T4990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.668940][ T4990] RSP: 002b:00007f3d28da9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  129.677374][ T4990] RAX: ffffffffffffffda RBX: 00007f3d2a5d7fa0 RCX: 00007f3d2a350559
[  129.685384][ T4990] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000003
[  129.693368][ T4990] RBP: 00007f3d2a3e7ab8 R08: 0000000000000000 R09: 0000000000000000
[  129.701358][ T4990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.709342][ T4990] R13: 00007f3d2a5d8038 R14: 00007f3d2a5d7fa0 R15: 00007ffc98398318
[  129.717337][ T4990]  </TASK>
[  129.736320][ T4988] CPU: 0 PID: 4988 Comm: syz.1.1792 Not tainted syzkaller #0
[  129.743754][ T4988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  129.753837][ T4988] Call Trace:
[  129.757146][ T4988]  <TASK>
[  129.760102][ T4988]  __dump_stack+0x21/0x30
[  129.764471][ T4988]  dump_stack_lvl+0x110/0x170
[  129.769177][ T4988]  ? show_regs_print_info+0x20/0x20
[  129.774406][ T4988]  ? __kasan_check_read+0x11/0x20
[  129.779471][ T4988]  dump_stack+0x15/0x20
[  129.783663][ T4988]  should_fail+0x3ab/0x500
[  129.788121][ T4988]  __should_failslab+0xa4/0xe0
[  129.792921][ T4988]  should_failslab+0x9/0x20
[  129.797479][ T4988]  slab_pre_alloc_hook+0x39/0xd0
[  129.802457][ T4988]  ? security_inode_alloc+0x33/0x110
[  129.807784][ T4988]  kmem_cache_alloc+0x44/0x260
[  129.812581][ T4988]  security_inode_alloc+0x33/0x110
[  129.817757][ T4988]  inode_init_always+0x72c/0x9b0
[  129.822742][ T4988]  new_inode_pseudo+0x91/0x210
[  129.827545][ T4988]  alloc_anon_inode+0x21/0x300
[  129.832348][ T4988]  aio_setup_ring+0xfc/0xba0
[  129.836975][ T4988]  ? free_ioctx_reqs+0x160/0x160
[  129.841948][ T4988]  ioctx_alloc+0x31d/0x6d0
[  129.846401][ T4988]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  129.852768][ T4988]  __se_sys_io_setup+0x6f/0x220
[  129.857651][ T4988]  __x64_sys_io_setup+0x5b/0x70
[  129.862537][ T4988]  x64_sys_call+0x767/0x9a0
[  129.867115][ T4988]  do_syscall_64+0x4c/0xa0
[  129.871577][ T4988]  ? clear_bhb_loop+0x50/0xa0
[  129.876288][ T4988]  ? clear_bhb_loop+0x50/0xa0
[  129.881007][ T4988]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.886973][ T4988] RIP: 0033:0x7fbf71ecb559
[  129.891508][ T4988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.911141][ T4988] RSP: 002b:00007fbf70924028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  129.919594][ T4988] RAX: ffffffffffffffda RBX: 00007fbf72152fa0 RCX: 00007fbf71ecb559
[  129.927583][ T4988] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000239f
[  129.935686][ T4988] RBP: 00007fbf71f62ab8 R08: 0000000000000000 R09: 0000000000000000
[  129.943685][ T4988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  129.951688][ T4988] R13: 00007fbf72153038 R14: 00007fbf72152fa0 R15: 00007ffc8dd480a8
[  129.959689][ T4988]  </TASK>
[  129.972946][ T4990] Bluetooth: Can't register HCI device
[  130.082921][   T30] audit: type=1400 audit(1792200171.664:385): avc:  denied  { setopt } for  pid=5001 comm="syz.6.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  130.121920][ T5006] loop7: detected capacity change from 0 to 512
[  130.153287][   T30] audit: type=1400 audit(1792200171.734:386): avc:  denied  { setopt } for  pid=5007 comm="syz.6.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  130.239696][ T5006] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  130.286553][ T5006] EXT4-fs (loop7): 1 truncate cleaned up
[  130.292257][ T5006] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,quota,lazytime,errors=remount-ro,quota,quota,. Quota mode: writeback.
[  130.323510][ T5016] loop6: detected capacity change from 0 to 8192
[  130.361062][ T4997] loop1: detected capacity change from 0 to 128
[  130.396631][ T5016] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.478940][ T4997] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  130.504704][ T4997] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.504948][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.535457][ T5016] FAT-fs (loop6): Filesystem has been set read-only
[  130.542436][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.574981][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.615549][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.624716][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.633724][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.642658][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.651661][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.660646][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  130.669642][ T5016] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1046)
[  131.114189][ T5039] loop2: detected capacity change from 0 to 256
[  131.375609][ T5046] loop7: detected capacity change from 0 to 128
[  131.389300][ T5043] loop1: detected capacity change from 0 to 2048
[  131.423670][ T5046] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none.
[  131.439861][ T5046] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  131.442267][ T5043] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.475105][ T5043] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.500966][   T30] audit: type=1400 audit(1792200173.084:387): avc:  denied  { add_name } for  pid=5045 comm="syz.7.1812" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  131.545134][ T5043] fs-verity: sha512 using implementation "sha512-avx2"
[  131.546676][   T30] audit: type=1400 audit(1792200173.114:388): avc:  denied  { create } for  pid=5045 comm="syz.7.1812" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  131.575067][   T30] audit: type=1400 audit(1792200173.114:389): avc:  denied  { read write open } for  pid=5045 comm="syz.7.1812" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  131.626185][   T30] audit: type=1400 audit(1792200173.124:390): avc:  denied  { ioctl } for  pid=5045 comm="syz.7.1812" path="/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop7" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[  131.672094][   T30] audit: type=1400 audit(1792200173.134:391): avc:  denied  { ioctl } for  pid=5040 comm="syz.1.1811" path="/4/file0/file0/file0" dev="loop1" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  131.871953][ T5072] loop7: detected capacity change from 0 to 256
[  132.102068][ T5043] syz.1.1811 (5043) used greatest stack depth: 20488 bytes left
[  132.191407][ T5083] loop1: detected capacity change from 0 to 512
[  132.275282][ T5083] EXT4-fs (loop1): Ignoring removed oldalloc option
[  132.288000][ T5083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  132.312397][ T5083] EXT4-fs (loop1): 1 truncate cleaned up
[  132.319718][ T5083] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,oldalloc,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  132.401362][ T4863] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  132.427049][ T4863] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  132.447506][ T5100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'.
[  132.540674][ T5102] loop1: detected capacity change from 0 to 256
[  132.556782][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'.
[  132.622412][ T5104] bridge2: port 1(erspan0) entered blocking state
[  132.646260][ T5104] bridge2: port 1(erspan0) entered disabled state
[  132.666240][ T5104] device erspan0 entered promiscuous mode
[  132.680062][ T5104] bridge2: port 1(erspan0) entered blocking state
[  132.686691][ T5104] bridge2: port 1(erspan0) entered forwarding state
[  133.888930][ T5139] ip_tables: iptables: counters copy to user failed while replacing table
[  134.005185][ T5151] loop7: detected capacity change from 0 to 128
[  134.036129][ T5151] EXT4-fs (loop7): dax option not supported
[  134.558183][ T5165] EXT4-fs (loop2): Ignoring removed orlov option
[  134.628826][ T5167] ip_tables: iptables: counters copy to user failed while replacing table
[  134.655091][ T5165] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,journal_ioprio=0x0000000000000007,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[  134.730624][ T5165] EXT4-fs error (device loop2): ext4_free_inode:355: comm syz.2.1861: bit already cleared for inode 15
[  134.759290][ T5171] xt_hashlimit: size too large, truncated to 1048576
[  134.869845][ T5176] ip_tables: iptables: counters copy to user failed while replacing table
[  135.182151][ T5184] set_capacity_and_notify: 2 callbacks suppressed
[  135.182171][ T5184] loop2: detected capacity change from 0 to 512
[  135.297946][ T5184] EXT4-fs (loop2): Ignoring removed oldalloc option
[  135.322262][ T5184] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.375159][ T5184] EXT4-fs (loop2): 1 orphan inode deleted
[  135.390053][ T5184] EXT4-fs (loop2): 1 truncate cleaned up
[  135.408689][ T5184] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,bsddf,inode_readahead_blks=0x0000000000000200,jqfmt=vfsv0,quota,grpid,oldalloc,. Quota mode: writeback.
[  135.476297][ T5184] EXT4-fs error (device loop2): empty_inline_dir:1904: inode #12: block 7: comm syz.2.1868: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0
[  135.587574][ T5184] EXT4-fs (loop2): Remounting filesystem read-only
[  135.601148][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  135.601163][   T30] audit: type=1326 audit(1792200177.186:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  135.606327][ T5184] EXT4-fs warning (device loop2): empty_inline_dir:1911: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  135.648499][   T30] audit: type=1326 audit(1792200177.236:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  135.686578][   T30] audit: type=1326 audit(1792200177.236:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  135.739177][   T30] audit: type=1326 audit(1792200177.236:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  135.781824][   T30] audit: type=1326 audit(1792200177.236:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  135.830456][ T5201] FAULT_INJECTION: forcing a failure.
[  135.830456][ T5201] name fail_futex, interval 1, probability 0, space 0, times 0
[  135.859187][ T5201] CPU: 0 PID: 5201 Comm: syz.1.1873 Not tainted syzkaller #0
[  135.866622][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  135.876722][ T5201] Call Trace:
[  135.880036][ T5201]  <TASK>
[  135.883006][ T5201]  __dump_stack+0x21/0x30
[  135.887380][ T5201]  dump_stack_lvl+0x110/0x170
[  135.892097][ T5201]  ? show_regs_print_info+0x20/0x20
[  135.897339][ T5201]  ? compat_start_thread+0x20/0x20
[  135.902495][ T5201]  dump_stack+0x15/0x20
[  135.906838][ T5201]  should_fail+0x3ab/0x500
[  135.911298][ T5201]  get_futex_key+0x143/0xb60
[  135.915942][ T5201]  ? futex_wait_restart+0x250/0x250
[  135.921190][ T5201]  futex_wake+0x133/0x8f0
[  135.925565][ T5201]  ? futex_wait+0x8f0/0x8f0
[  135.930107][ T5201]  ? 0xffffffffa0010000
[  135.934297][ T5201]  ? is_bpf_text_address+0x177/0x190
[  135.939627][ T5201]  ? __kernel_text_address+0xa0/0x100
[  135.945043][ T5201]  ? unwind_get_return_address+0x4d/0x90
[  135.950729][ T5201]  do_futex+0xd8d/0x2800
[  135.955018][ T5201]  ? futex_exit_release+0x1e0/0x1e0
[  135.960264][ T5201]  ? __kasan_check_read+0x11/0x20
[  135.965327][ T5201]  ? __rb_reserve_next+0x734/0xc90
[  135.970483][ T5201]  ? ring_buffer_lock_reserve+0xbd5/0xf60
[  135.976245][ T5201]  ? __kasan_check_read+0x11/0x20
[  135.981310][ T5201]  ? rb_commit+0x75a/0x7b0
[  135.985763][ T5201]  ? __kasan_check_read+0x11/0x20
[  135.990831][ T5201]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  135.996678][ T5201]  __se_sys_futex+0x135/0x330
[  136.001401][ T5201]  ? __x64_sys_futex+0x100/0x100
[  136.006383][ T5201]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  136.012756][ T5201]  __x64_sys_futex+0xe5/0x100
[  136.014714][   T30] audit: type=1326 audit(1792200177.236:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  136.017501][ T5201]  x64_sys_call+0x251/0x9a0
[  136.017529][ T5201]  do_syscall_64+0x4c/0xa0
[  136.051217][ T5201]  ? clear_bhb_loop+0x50/0xa0
[  136.055938][ T5201]  ? clear_bhb_loop+0x50/0xa0
[  136.060660][ T5201]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  136.066589][ T5201] RIP: 0033:0x7fbf71ecb559
[  136.071040][ T5201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  136.084847][   T30] audit: type=1326 audit(1792200177.266:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  136.090771][ T5201] RSP: 002b:00007fbf709240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  136.090799][ T5201] RAX: ffffffffffffffda RBX: 00007fbf72152fa8 RCX: 00007fbf71ecb559
[  136.131966][ T5201] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf72152fac
[  136.139999][ T5201] RBP: 00007fbf72152fa0 R08: 00308716d0cf2e87 R09: 0000000000000000
[  136.148119][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  136.156128][ T5201] R13: 00007fbf72153038 R14: 00007ffc8dd47fc0 R15: 00007ffc8dd480a8
[  136.163897][   T30] audit: type=1326 audit(1792200177.266:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.1872" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf71ecb559 code=0x7ffc0000
[  136.164142][ T5201]  </TASK>
[  136.395205][ T5209] loop6: detected capacity change from 0 to 256
[  138.218136][ T5242] loop6: detected capacity change from 0 to 1024
[  138.247049][ T5242] EXT4-fs (loop6): Mount option "dioread_nolock" incompatible with ext3
[  138.468748][ T5242] loop6: detected capacity change from 0 to 128
[  138.541142][ T5242] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  138.554143][ T5242] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.600776][ T5242] EXT4-fs (loop6): shut down requested (1)
[  138.868129][ T5272] loop1: detected capacity change from 0 to 1024
[  139.024619][ T5272] EXT4-fs (loop1): test_dummy_encryption requires encrypt feature
[  139.562435][ T5271] bridge0: port 3(syz_tun) entered blocking state
[  139.568909][ T5271] bridge0: port 3(syz_tun) entered disabled state
[  139.711535][ T5271] device syz_tun entered promiscuous mode
[  139.791640][ T5280] device veth1_macvtap left promiscuous mode
[  140.886443][   T30] audit: type=1400 audit(1792200182.469:414): avc:  denied  { ioctl } for  pid=5298 comm="syz.6.1913" path="/dev/usbmon5" dev="devtmpfs" ino=170 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  141.771258][ T5311] FAULT_INJECTION: forcing a failure.
[  141.771258][ T5311] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  141.784664][ T5311] CPU: 0 PID: 5311 Comm: syz.7.1914 Not tainted syzkaller #0
[  141.792065][ T5311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  141.802146][ T5311] Call Trace:
[  141.805453][ T5311]  <TASK>
[  141.808411][ T5311]  __dump_stack+0x21/0x30
[  141.812772][ T5311]  dump_stack_lvl+0x110/0x170
[  141.817476][ T5311]  ? show_regs_print_info+0x20/0x20
[  141.822706][ T5311]  dump_stack+0x15/0x20
[  141.826919][ T5311]  should_fail+0x3ab/0x500
[  141.831361][ T5311]  should_fail_alloc_page+0x55/0x80
[  141.836605][ T5311]  prepare_alloc_pages+0x13f/0x590
[  141.841749][ T5311]  ? __alloc_pages_bulk+0xab0/0xab0
[  141.846988][ T5311]  __alloc_pages+0x11d/0x460
[  141.851602][ T5311]  ? unlock_page_memcg+0x114/0x130
[  141.856745][ T5311]  ? prep_new_page+0x110/0x110
[  141.861535][ T5311]  ? page_remove_rmap+0xc6d/0xf40
[  141.866588][ T5311]  ? page_add_file_rmap+0x700/0x700
[  141.871808][ T5311]  ? __kasan_check_write+0x14/0x20
[  141.876957][ T5311]  ? _raw_spin_lock+0x94/0xf0
[  141.881664][ T5311]  __get_free_pages+0x10/0x30
[  141.886373][ T5311]  __tlb_remove_page_size+0x18a/0x310
[  141.891789][ T5311]  unmap_page_range+0x1059/0x1e00
[  141.896874][ T5311]  ? mmu_notifier_invalidate_range_end+0xe0/0xe0
[  141.903232][ T5311]  ? lru_cache_add+0x7e0/0x7e0
[  141.908034][ T5311]  unmap_vmas+0x26d/0x380
[  141.912420][ T5311]  ? unmap_page_range+0x1e00/0x1e00
[  141.917811][ T5311]  ? __kasan_check_write+0x14/0x20
[  141.922963][ T5311]  ? tlb_gather_mmu_fullmm+0x144/0x1c0
[  141.928463][ T5311]  exit_mmap+0x412/0x8b0
[  141.932741][ T5311]  ? vm_brk+0x30/0x30
[  141.936759][ T5311]  ? mutex_unlock+0x8f/0x230
[  141.941383][ T5311]  ? uprobe_clear_state+0x2c6/0x320
[  141.946623][ T5311]  __mmput+0x92/0x300
[  141.950639][ T5311]  mmput+0x50/0x150
[  141.954476][ T5311]  do_exit+0xacc/0x29a0
[  141.958664][ T5311]  ? put_task_struct+0x90/0x90
[  141.963470][ T5311]  ? trace_event_raw_event_signal_deliver+0x334/0x470
[  141.970278][ T5311]  ? cgroup_freezing+0x86/0xb0
[  141.975086][ T5311]  do_group_exit+0x149/0x310
[  141.979707][ T5311]  ? __kasan_check_write+0x14/0x20
[  141.984848][ T5311]  ? recalc_sigpending+0x1ac/0x230
[  141.989987][ T5311]  get_signal+0x64f/0x1430
[  141.994442][ T5311]  arch_do_signal_or_restart+0xe2/0x1100
[  142.000115][ T5311]  ? __kasan_check_read+0x11/0x20
[  142.005175][ T5311]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  142.011025][ T5311]  ? get_sigframe_size+0x10/0x10
[  142.016034][ T5311]  ? trace_event_buffer_commit+0x252/0x880
[  142.021883][ T5311]  ? trace_event_raw_event_sys_exit+0xae/0xc0
[  142.027989][ T5311]  exit_to_user_mode_loop+0xa7/0xe0
[  142.033250][ T5311]  exit_to_user_mode_prepare+0x87/0xd0
[  142.038740][ T5311]  syscall_exit_to_user_mode+0x1a/0x30
[  142.044232][ T5311]  do_syscall_64+0x58/0xa0
[  142.048680][ T5311]  ? clear_bhb_loop+0x50/0xa0
[  142.053602][ T5311]  ? clear_bhb_loop+0x50/0xa0
[  142.058310][ T5311]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.064243][ T5311] RIP: 0033:0x7f8e27413559
[  142.068694][ T5311] Code: Unable to access opcode bytes at RIP 0x7f8e2741352f.
[  142.076114][ T5311] RSP: 002b:00007f8e25e6c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  142.084563][ T5311] RAX: fffffffffffffe00 RBX: 00007f8e2769afa8 RCX: 00007f8e27413559
[  142.092573][ T5311] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e2769afa8
[  142.100576][ T5311] RBP: 00007f8e2769afa0 R08: 0000000000000000 R09: 0000000000000000
[  142.108715][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.116719][ T5311] R13: 00007f8e2769b038 R14: 00007ffeaffd4530 R15: 00007ffeaffd4618
[  142.124741][ T5311]  </TASK>
[  142.248036][ T5332] loop1: detected capacity change from 0 to 1024
[  142.259861][   T30] audit: type=1400 audit(1792200183.860:415): avc:  denied  { write } for  pid=5333 comm="syz.2.1921" name="usb_gadget" dev="configfs" ino=13172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  142.299624][ T5332] EXT4-fs (loop1): Ignoring removed nobh option
[  142.306022][ T5332] EXT4-fs (loop1): Ignoring removed bh option
[  142.336176][   T30] audit: type=1400 audit(1792200183.880:416): avc:  denied  { add_name } for  pid=5333 comm="syz.2.1921" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  142.346988][ T5332] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[  142.365696][ T5332] System zones: 0-1, 3-12
[  142.390208][ T5332] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none.
[  142.414388][   T30] audit: type=1400 audit(1792200183.880:417): avc:  denied  { create } for  pid=5333 comm="syz.2.1921" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[  142.434472][   T30] audit: type=1400 audit(1792200183.930:418): avc:  denied  { unmount } for  pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  142.437727][ T5342] FAULT_INJECTION: forcing a failure.
[  142.437727][ T5342] name failslab, interval 1, probability 0, space 0, times 0
[  142.473804][ T5339] loop6: detected capacity change from 0 to 256
[  142.531113][ T5342] CPU: 1 PID: 5342 Comm: syz.2.1923 Not tainted syzkaller #0
[  142.538556][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  142.548647][ T5342] Call Trace:
[  142.551970][ T5342]  <TASK>
[  142.554934][ T5342]  __dump_stack+0x21/0x30
[  142.559301][ T5342]  dump_stack_lvl+0x110/0x170
[  142.564103][ T5342]  ? show_regs_print_info+0x20/0x20
[  142.569341][ T5342]  ? kernfs_add_one+0x542/0x680
[  142.574230][ T5342]  dump_stack+0x15/0x20
[  142.578408][ T5342]  should_fail+0x3ab/0x500
[  142.582849][ T5342]  ? dev_uevent_filter+0xb0/0xb0
[  142.587833][ T5342]  __should_failslab+0xa4/0xe0
[  142.592642][ T5342]  should_failslab+0x9/0x20
[  142.597192][ T5342]  slab_pre_alloc_hook+0x39/0xd0
[  142.602165][ T5342]  ? dev_uevent_filter+0xb0/0xb0
[  142.607142][ T5342]  kmem_cache_alloc_trace+0x48/0x270
[  142.612498][ T5342]  ? kobject_uevent_env+0x271/0x700
[  142.617744][ T5342]  ? dev_uevent_filter+0xb0/0xb0
[  142.622733][ T5342]  kobject_uevent_env+0x271/0x700
[  142.627804][ T5342]  kobject_uevent+0x1d/0x30
[  142.632347][ T5342]  device_add+0x9fe/0xe90
[  142.636723][ T5342]  netdev_register_kobject+0x18e/0x330
[  142.642222][ T5342]  ? raw_notifier_call_chain+0xe9/0x100
[  142.647804][ T5342]  register_netdevice+0xeaa/0x1490
[  142.652951][ T5342]  ? netif_stacked_transfer_operstate+0x220/0x220
[  142.659404][ T5342]  ? kmem_cache_alloc_trace+0x119/0x270
[  142.664986][ T5342]  register_vlan_dev+0x2a7/0x630
[  142.669960][ T5342]  vlan_newlink+0x44b/0x610
[  142.674503][ T5342]  ? vlan_validate+0x650/0x650
[  142.679304][ T5342]  rtnl_newlink+0x137f/0x1900
[  142.684011][ T5342]  ? rtnl_setlink+0x4d0/0x4d0
[  142.688733][ T5342]  ? __kasan_check_read+0x11/0x20
[  142.693809][ T5342]  ? __rb_reserve_next+0x734/0xc90
[  142.698975][ T5342]  ? memcpy+0x56/0x70
[  142.703013][ T5342]  ? __kasan_check_write+0x14/0x20
[  142.708202][ T5342]  ? wait_for_completion_killable_timeout+0x10/0x10
[  142.714833][ T5342]  ? ns_capable+0x8c/0xf0
[  142.719215][ T5342]  ? netlink_net_capable+0x125/0x160
[  142.724807][ T5342]  ? rtnl_setlink+0x4d0/0x4d0
[  142.729532][ T5342]  rtnetlink_rcv_msg+0x9fd/0xcb0
[  142.734517][ T5342]  ? 0xffffffffa0010000
[  142.738698][ T5342]  ? rtnetlink_bind+0x80/0x80
[  142.743491][ T5342]  ? avc_has_perm_noaudit+0x390/0x490
[  142.748901][ T5342]  ? memcpy+0x56/0x70
[  142.752922][ T5342]  ? avc_has_perm_noaudit+0x30a/0x490
[  142.758341][ T5342]  ? arch_stack_walk+0xee/0x140
[  142.763246][ T5342]  ? avc_denied+0x1b0/0x1b0
[  142.767774][ T5342]  ? stack_trace_save+0xa6/0xf0
[  142.772644][ T5342]  ? avc_has_perm+0x163/0x250
[  142.777349][ T5342]  ? avc_has_perm_noaudit+0x490/0x490
[  142.782746][ T5342]  ? x64_sys_call+0x4b/0x9a0
[  142.787355][ T5342]  ? selinux_nlmsg_lookup+0x38f/0x440
[  142.792753][ T5342]  netlink_rcv_skb+0x1e9/0x430
[  142.797543][ T5342]  ? rtnetlink_bind+0x80/0x80
[  142.802240][ T5342]  ? netlink_ack+0xb10/0xb10
[  142.806848][ T5342]  ? _copy_from_iter+0x4a4/0x10a0
[  142.811893][ T5342]  ? __netlink_lookup+0x387/0x3b0
[  142.816947][ T5342]  rtnetlink_rcv+0x1c/0x20
[  142.821385][ T5342]  netlink_unicast+0x86c/0xa30
[  142.826184][ T5342]  netlink_sendmsg+0x879/0xb80
[  142.830974][ T5342]  ? netlink_getsockopt+0x530/0x530
[  142.836197][ T5342]  ? security_socket_sendmsg+0x82/0xa0
[  142.841674][ T5342]  ? netlink_getsockopt+0x530/0x530
[  142.846893][ T5342]  ____sys_sendmsg+0x5be/0x8f0
[  142.851683][ T5342]  ? __sys_sendmsg_sock+0x40/0x40
[  142.856764][ T5342]  ? import_iovec+0x7c/0xb0
[  142.861293][ T5342]  ___sys_sendmsg+0x236/0x2e0
[  142.865990][ T5342]  ? __sys_sendmsg+0x280/0x280
[  142.870775][ T5342]  ? __fdget+0x1a1/0x230
[  142.875038][ T5342]  __x64_sys_sendmsg+0x201/0x2d0
[  142.880000][ T5342]  ? ___sys_sendmsg+0x2e0/0x2e0
[  142.884890][ T5342]  ? trace_sys_enter+0x3d/0x50
[  142.889695][ T5342]  x64_sys_call+0x4b/0x9a0
[  142.894143][ T5342]  do_syscall_64+0x4c/0xa0
[  142.898586][ T5342]  ? clear_bhb_loop+0x50/0xa0
[  142.903281][ T5342]  ? clear_bhb_loop+0x50/0xa0
[  142.907977][ T5342]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.913896][ T5342] RIP: 0033:0x7f1b33a1f559
[  142.918329][ T5342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  142.937957][ T5342] RSP: 002b:00007f1b32478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  142.946418][ T5342] RAX: ffffffffffffffda RBX: 00007f1b33ca6fa0 RCX: 00007f1b33a1f559
[  142.954415][ T5342] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000005
[  142.962409][ T5342] RBP: 00007f1b33ab6ab8 R08: 0000000000000000 R09: 0000000000000000
[  142.970401][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.978392][ T5342] R13: 00007f1b33ca7038 R14: 00007f1b33ca6fa0 R15: 00007ffdc70643e8
[  142.986389][ T5342]  </TASK>
[  142.992519][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.019077][  T140] device veth1_macvtap entered promiscuous mode
[  143.039776][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  143.069511][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.076693][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.129518][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.138591][ T4863] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.178152][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.191333][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.213748][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.280013][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.286711][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.345444][ T5359] loop2: detected capacity change from 0 to 256
[  143.359366][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.369514][ T4863] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.408768][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.423561][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.451445][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.527375][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.548869][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.572179][ T5362] loop2: detected capacity change from 0 to 512
[  143.615701][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.626063][ T4863] EXT4-fs error (device loop1): empty_inline_dir:1904: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0
[  143.658523][ T5362] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback.
[  143.672291][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.688732][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.703205][ T4863] EXT4-fs error (device loop1): ext4_read_inline_dir:1649: inode #12: block 7: comm syz-executor: path /21/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  143.727308][ T5362] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.738454][ T4863] EXT4-fs (loop1): Remounting filesystem read-only
[  143.842428][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.905538][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  143.930549][ T5370] loop7: detected capacity change from 0 to 1024
[  143.941654][ T5372] overlayfs: failed to clone upperpath
[  143.982150][ T5370] EXT4-fs (loop7): Ignoring removed bh option
[  144.009064][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.075073][ T5376] netlink: 532 bytes leftover after parsing attributes in process `syz.2.1934'.
[  144.086483][ T5370] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none.
[  144.110508][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.154145][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.331028][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  144.362628][ T4863] EXT4-fs warning (device loop1): empty_inline_dir:1911: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60
[  145.022598][ T5393] loop7: detected capacity change from 0 to 512
[  145.124443][ T5393] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  145.155268][ T5393] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.840797][ T5411] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1946'.
[  146.153112][ T5425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'.
[  146.208098][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1955'.
[  146.209332][   T30] audit: type=1400 audit(1792200187.812:419): avc:  denied  { create } for  pid=5430 comm="syz.6.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  146.366593][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.400702][ T5419] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.418517][ T5419] device bridge_slave_0 entered promiscuous mode
[  146.466249][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.494064][ T5419] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.508033][ T5419] device bridge_slave_1 entered promiscuous mode
[  146.694714][ T5419] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.701885][ T5419] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.709275][ T5419] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.716339][ T5419] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.748635][   T10] device bridge_slave_1 left promiscuous mode
[  146.755002][   T10] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.769876][   T10] device bridge_slave_0 left promiscuous mode
[  146.777031][   T10] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.801807][   T10] device veth1_macvtap left promiscuous mode
[  146.810137][   T10] device veth0_vlan left promiscuous mode
[  146.976554][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.987906][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.004434][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.024707][ T5465] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1970'.
[  147.039414][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.069613][  T311] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.076705][  T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.118196][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.131080][  T311] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.138235][  T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.164900][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.177632][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.207303][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.228965][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.238817][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.246607][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.248158][ T5489] overlayfs: failed to clone upperpath
[  147.260701][ T5419] device veth0_vlan entered promiscuous mode
[  147.281317][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.293176][ T5419] device veth1_macvtap entered promiscuous mode
[  147.308185][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.317808][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.353865][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.386545][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.433453][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'.
[  147.513303][ T5518] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  147.668592][ T5530] FAULT_INJECTION: forcing a failure.
[  147.668592][ T5530] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  147.682298][ T5530] CPU: 1 PID: 5530 Comm: syz.7.1995 Not tainted syzkaller #0
[  147.689716][ T5530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  147.699812][ T5530] Call Trace:
[  147.703120][ T5530]  <TASK>
[  147.706077][ T5530]  __dump_stack+0x21/0x30
[  147.710459][ T5530]  dump_stack_lvl+0x110/0x170
[  147.715183][ T5530]  ? show_regs_print_info+0x20/0x20
[  147.720427][ T5530]  dump_stack+0x15/0x20
[  147.724631][ T5530]  should_fail+0x3ab/0x500
[  147.729103][ T5530]  should_fail_usercopy+0x1a/0x20
[  147.734836][ T5530]  _copy_from_user+0x20/0xd0
[  147.739506][ T5530]  get_timespec64+0x93/0x1b0
[  147.745059][ T5530]  ? timespec64_add_safe+0x1f0/0x1f0
[  147.750397][ T5530]  ? __kasan_check_write+0x14/0x20
[  147.755558][ T5530]  ? _copy_from_user+0x95/0xd0
[  147.760359][ T5530]  __se_sys_rt_sigtimedwait+0x1bd/0x2b0
[  147.765948][ T5530]  ? __x64_sys_rt_sigtimedwait+0xb0/0xb0
[  147.771641][ T5530]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  147.778022][ T5530]  __x64_sys_rt_sigtimedwait+0x9b/0xb0
[  147.783536][ T5530]  x64_sys_call+0x7b4/0x9a0
[  147.788080][ T5530]  do_syscall_64+0x4c/0xa0
[  147.792537][ T5530]  ? clear_bhb_loop+0x50/0xa0
[  147.797258][ T5530]  ? clear_bhb_loop+0x50/0xa0
[  147.801991][ T5530]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  147.807929][ T5530] RIP: 0033:0x7f8e27413559
[  147.812383][ T5530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  147.832033][ T5530] RSP: 002b:00007f8e25e6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000080
[  147.840497][ T5530] RAX: ffffffffffffffda RBX: 00007f8e2769afa0 RCX: 00007f8e27413559
[  147.848606][ T5530] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000200000000080
[  147.856615][ T5530] RBP: 00007f8e274aaab8 R08: 0000000000000000 R09: 0000000000000000
[  147.864624][ T5530] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[  147.872752][ T5530] R13: 00007f8e2769b038 R14: 00007f8e2769afa0 R15: 00007ffeaffd4618
[  147.880782][ T5530]  </TASK>
[  148.010710][ T5545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'.
[  148.021369][ T5546] raw_sendmsg: syz.7.2001 forgot to set AF_INET. Fix it!
[  148.405734][ T5556] overlayfs: failed to clone upperpath
[  148.414321][ T5558] loop8: detected capacity change from 0 to 256
[  148.584174][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2014'.
[  148.707516][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.723774][ T5567] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.739900][ T5567] device bridge_slave_0 entered promiscuous mode
[  148.767079][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.774405][ T5567] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.782348][ T5567] device bridge_slave_1 entered promiscuous mode
[  148.844281][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'.
[  148.938368][ T5567] bridge0: port 2(bridge_slave_1) entered blocking state
[  148.945503][ T5567] bridge0: port 2(bridge_slave_1) entered forwarding state
[  148.952910][ T5567] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.960029][ T5567] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.034631][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.056948][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.064640][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.101932][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.110693][ T5622] overlayfs: failed to clone upperpath
[  149.116701][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.123846][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.137611][ T5622] overlayfs: failed to clone lowerpath
[  149.147786][   T30] audit: type=1400 audit(1792200190.743:420): avc:  denied  { mounton } for  pid=5625 comm="syz.6.2039" path="/248/file0" dev="ramfs" ino=61979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  149.148016][ T5626] overlayfs: missing 'lowerdir'
[  149.193389][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.207538][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.214689][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.235171][   T30] audit: type=1400 audit(1792200190.823:421): avc:  denied  { unmount } for  pid=2099 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  149.255525][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.284243][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.343993][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  149.418969][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  149.448397][ T5567] device veth0_vlan entered promiscuous mode
[  149.454968][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  149.464085][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  149.473134][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  149.481179][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  149.518217][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  149.529963][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  149.547345][ T5567] device veth1_macvtap entered promiscuous mode
[  149.633386][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  149.644238][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  149.654282][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  149.678677][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  149.689077][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  150.632894][ T1186] tipc: Left network mode
[  150.632921][ T5698] loop9: detected capacity change from 0 to 128
[  150.716953][ T5698] FAT-fs (loop9): Directory bread(block 1048) failed
[  150.723792][ T5698] FAT-fs (loop9): Directory bread(block 1049) failed
[  150.758509][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.793550][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.803863][ T5698] FAT-fs (loop9): Directory bread(block 1050) failed
[  150.815807][ T5696] device bridge_slave_0 entered promiscuous mode
[  150.827576][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.834744][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.842430][ T5696] device bridge_slave_1 entered promiscuous mode
[  150.849516][ T5698] FAT-fs (loop9): Directory bread(block 1051) failed
[  150.856578][ T5698] FAT-fs (loop9): Directory bread(block 1052) failed
[  150.863313][ T5698] FAT-fs (loop9): Directory bread(block 1053) failed
[  150.911594][ T5698] FAT-fs (loop9): Directory bread(block 1054) failed
[  150.936180][ T5716] FAULT_INJECTION: forcing a failure.
[  150.936180][ T5716] name fail_futex, interval 1, probability 0, space 0, times 0
[  150.940795][ T5698] FAT-fs (loop9): Directory bread(block 1055) failed
[  150.973208][ T5716] CPU: 1 PID: 5716 Comm: syz.6.2070 Not tainted syzkaller #0
[  150.980647][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  150.990753][ T5716] Call Trace:
[  150.994062][ T5716]  <TASK>
[  150.997021][ T5716]  __dump_stack+0x21/0x30
[  151.000201][ T5698] FAT-fs (loop9): Directory bread(block 1048) failed
[  151.001384][ T5716]  dump_stack_lvl+0x110/0x170
[  151.001411][ T5716]  ? show_regs_print_info+0x20/0x20
[  151.017991][ T5716]  dump_stack+0x15/0x20
[  151.021407][ T5698] FAT-fs (loop9): Directory bread(block 1049) failed
[  151.022183][ T5716]  should_fail+0x3ab/0x500
[  151.033304][ T5716]  get_futex_key+0x143/0xb60
[  151.037939][ T5716]  ? get_mem_cgroup_from_mm+0x18f/0x230
[  151.043525][ T5716]  ? bsearch+0x92/0xb0
[  151.047640][ T5716]  ? futex_wait_restart+0x250/0x250
[  151.052886][ T5716]  ? search_extable+0x8c/0xd0
[  151.057602][ T5716]  futex_wake+0x133/0x8f0
[  151.061970][ T5716]  ? strncpy_from_user+0x201/0x2d0
[  151.067138][ T5716]  ? futex_wait+0x8f0/0x8f0
[  151.071680][ T5716]  ? kernelmode_fixup_or_oops+0x85/0xd0
[  151.077267][ T5716]  ? __bad_area_nosemaphore+0xb5/0x470
[  151.082771][ T5716]  do_futex+0xd8d/0x2800
[  151.087047][ T5716]  ? bad_area+0x74/0x90
[  151.091234][ T5716]  ? do_user_addr_fault+0x103d/0x11c0
[  151.096647][ T5716]  ? futex_exit_release+0x1e0/0x1e0
[  151.101890][ T5716]  ? __kasan_check_read+0x11/0x20
[  151.106962][ T5716]  ? __rb_reserve_next+0x734/0xc90
[  151.112122][ T5716]  ? ring_buffer_lock_reserve+0xbd5/0xf60
[  151.117881][ T5716]  ? __kasan_check_read+0x11/0x20
[  151.122951][ T5716]  ? rb_commit+0x75a/0x7b0
[  151.127404][ T5716]  ? __kasan_check_read+0x11/0x20
[  151.132470][ T5716]  ? ring_buffer_unlock_commit+0x46f/0x5d0
[  151.138318][ T5716]  __se_sys_futex+0x135/0x330
[  151.143036][ T5716]  ? __x64_sys_futex+0x100/0x100
[  151.148014][ T5716]  ? trace_event_raw_event_sys_enter+0x127/0x140
[  151.154417][ T5716]  __x64_sys_futex+0xe5/0x100
[  151.159144][ T5716]  x64_sys_call+0x251/0x9a0
[  151.163688][ T5716]  do_syscall_64+0x4c/0xa0
[  151.168149][ T5716]  ? clear_bhb_loop+0x50/0xa0
[  151.172864][ T5716]  ? clear_bhb_loop+0x50/0xa0
[  151.177588][ T5716]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  151.178339][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.183520][ T5716] RIP: 0033:0x7f3d2a350559
[  151.183542][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  151.183564][ T5716] RSP: 002b:00007f3d28da90e8 EFLAGS: 00000246
[  151.190698][ T5696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.195038][ T5716]  ORIG_RAX: 00000000000000ca
[  151.195049][ T5716] RAX: ffffffffffffffda RBX: 00007f3d2a5d7fa8 RCX: 00007f3d2a350559
[  151.195066][ T5716] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3d2a5d7fac
[  151.195082][ T5716] RBP: 00007f3d2a5d7fa0 R08: 003788d7213b4a3f R09: 0000000000000000
[  151.195098][ T5716] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  151.215298][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.220812][ T5716] R13: 00007f3d2a5d8038 R14: 00007ffc98398230 R15: 00007ffc98398318
[  151.228153][ T5696] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.232708][ T5716]  </TASK>
[  151.384120][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  151.406151][  T311] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.414305][  T311] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.424628][ T5734] loop9: detected capacity change from 0 to 512
[  151.434505][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  151.465591][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.472691][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.482556][ T1186] bridge2: port 1(erspan0) entered disabled state
[  151.494523][ T1186] device erspan0 left promiscuous mode
[  151.500769][ T1186] bridge2: port 1(erspan0) entered disabled state
[  151.511649][ T5734] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  151.533272][   T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.548541][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.555678][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.569265][ T5734] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  151.605315][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'.
[  151.628710][   T45] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  151.682340][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.719004][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.745984][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.764031][   T30] audit: type=1400 audit(1792200193.354:422): avc:  denied  { shutdown } for  pid=5747 comm="syz.9.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  151.801089][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.846318][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.863603][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.910955][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.920418][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.933392][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.945852][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.970405][ T5759] loop8: detected capacity change from 0 to 128
[  151.977460][ T5696] device veth0_vlan entered promiscuous mode
[  151.996377][ T1186] device bridge_slave_1 left promiscuous mode
[  152.017281][ T1186] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.024946][ T5759] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  152.043468][ T1186] device bridge_slave_0 left promiscuous mode
[  152.058393][ T1186] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.082085][ T1186] device veth0_vlan left promiscuous mode
[  152.090462][  T311] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  152.383699][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.401501][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.437215][ T5696] device veth1_macvtap entered promiscuous mode
[  152.456998][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.471070][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.490003][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.522114][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.540684][  T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.770280][ T5808] bridge_slave_0: default FDB implementation only supports local addresses
[  152.895390][ T5820] overlayfs: upper fs does not support tmpfile.
[  153.035060][ T5838] loop9: detected capacity change from 0 to 128
[  153.146252][ T5841] loop0: detected capacity change from 0 to 256
[  153.157921][ T5838] EXT4-fs (loop9): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  153.199356][ T5838] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.267822][ T5844] ip_tables: iptables: counters copy to user failed while replacing table
[  153.348439][ T5850] ==================================================================
[  153.356598][ T5850] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x88e/0x3200
[  153.364796][ T5850] Read of size 8 at addr ffff888117b599c0 by task syz.9.2122/5850
[  153.372635][ T5850] 
[  153.374989][ T5850] CPU: 1 PID: 5850 Comm: syz.9.2122 Not tainted syzkaller #0
[  153.382397][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  153.392498][ T5850] Call Trace:
[  153.395813][ T5850]  <TASK>
[  153.398810][ T5850]  __dump_stack+0x21/0x30
[  153.403181][ T5850]  dump_stack_lvl+0x110/0x170
[  153.407899][ T5850]  ? show_regs_print_info+0x20/0x20
[  153.413155][ T5850]  ? load_image+0x3f0/0x3f0
[  153.417702][ T5850]  print_address_description+0x7f/0x2c0
[  153.423288][ T5850]  ? tc_setup_flow_action+0x88e/0x3200
[  153.428793][ T5850]  kasan_report+0x10f/0x150
[  153.433350][ T5850]  ? tc_setup_flow_action+0x88e/0x3200
[  153.438868][ T5850]  __asan_report_load8_noabort+0x14/0x20
[  153.444560][ T5850]  tc_setup_flow_action+0x88e/0x3200
[  153.449892][ T5850]  mall_replace_hw_filter+0x2db/0x8d0
[  153.455305][ T5850]  ? mall_set_parms+0x520/0x520
[  153.460196][ T5850]  ? tcf_exts_destroy+0xb0/0xb0
[  153.465088][ T5850]  ? pcpu_alloc+0x1118/0x16f0
[  153.469807][ T5850]  ? mall_set_parms+0x1e4/0x520
[  153.474703][ T5850]  mall_change+0x544/0x760
[  153.479155][ T5850]  ? __kasan_check_write+0x14/0x20
[  153.484320][ T5850]  ? mall_get+0xa0/0xa0
[  153.488529][ T5850]  ? tcf_chain_tp_insert_unique+0x946/0xa70
[  153.494470][ T5850]  ? mall_get+0xa0/0xa0
[  153.498658][ T5850]  tc_new_tfilter+0x13df/0x1990
[  153.503568][ T5850]  ? tcf_gate_entry_destructor+0x20/0x20
[  153.509256][ T5850]  ? security_capable+0x87/0xb0
[  153.514154][ T5850]  ? ns_capable+0x8c/0xf0
[  153.518523][ T5850]  ? netlink_net_capable+0x125/0x160
[  153.523848][ T5850]  ? tcf_gate_entry_destructor+0x20/0x20
[  153.529520][ T5850]  rtnetlink_rcv_msg+0x83c/0xcb0
[  153.534503][ T5850]  ? 0xffffffffa0010000
[  153.538689][ T5850]  ? rtnetlink_bind+0x80/0x80
[  153.543409][ T5850]  ? avc_has_perm_noaudit+0x390/0x490
[  153.548832][ T5850]  ? memcpy+0x56/0x70
[  153.552861][ T5850]  ? avc_has_perm_noaudit+0x30a/0x490
[  153.558277][ T5850]  ? arch_stack_walk+0xee/0x140
[  153.563173][ T5850]  ? avc_denied+0x1b0/0x1b0
[  153.567729][ T5850]  ? stack_trace_save+0xa6/0xf0
[  153.572623][ T5850]  ? avc_has_perm+0x163/0x250
[  153.577345][ T5850]  ? avc_has_perm_noaudit+0x490/0x490
[  153.582762][ T5850]  ? x64_sys_call+0x4b/0x9a0
[  153.587390][ T5850]  ? selinux_nlmsg_lookup+0x39d/0x440
[  153.592822][ T5850]  netlink_rcv_skb+0x1e9/0x430
[  153.597629][ T5850]  ? rtnetlink_bind+0x80/0x80
[  153.602350][ T5850]  ? netlink_ack+0xb10/0xb10
[  153.606988][ T5850]  ? _copy_from_iter+0x4a4/0x10a0
[  153.612061][ T5850]  ? __netlink_lookup+0x387/0x3b0
[  153.617133][ T5850]  rtnetlink_rcv+0x1c/0x20
[  153.621594][ T5850]  netlink_unicast+0x86c/0xa30
[  153.626405][ T5850]  netlink_sendmsg+0x879/0xb80
[  153.631734][ T5850]  ? netlink_getsockopt+0x530/0x530
[  153.636983][ T5850]  ? security_socket_sendmsg+0x82/0xa0
[  153.642486][ T5850]  ? netlink_getsockopt+0x530/0x530
[  153.647726][ T5850]  ____sys_sendmsg+0x5be/0x8f0
[  153.652529][ T5850]  ? __sys_sendmsg_sock+0x40/0x40
[  153.657593][ T5850]  ? import_iovec+0x7c/0xb0
[  153.662142][ T5850]  ___sys_sendmsg+0x236/0x2e0
[  153.666860][ T5850]  ? __sys_sendmsg+0x280/0x280
[  153.671679][ T5850]  ? __fdget+0x1a1/0x230
[  153.675960][ T5850]  __x64_sys_sendmsg+0x201/0x2d0
[  153.680947][ T5850]  ? ___sys_sendmsg+0x2e0/0x2e0
[  153.685844][ T5850]  ? trace_sys_enter+0x3d/0x50
[  153.690659][ T5850]  x64_sys_call+0x4b/0x9a0
[  153.695110][ T5850]  do_syscall_64+0x4c/0xa0
[  153.699560][ T5850]  ? clear_bhb_loop+0x50/0xa0
[  153.704277][ T5850]  ? clear_bhb_loop+0x50/0xa0
[  153.708994][ T5850]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.714933][ T5850] RIP: 0033:0x7f5863e8e559
[  153.719406][ T5850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  153.739078][ T5850] RSP: 002b:00007f58628e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  153.747527][ T5850] RAX: ffffffffffffffda RBX: 00007f5864115fa0 RCX: 00007f5863e8e559
[  153.755532][ T5850] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003
[  153.763546][ T5850] RBP: 00007f5863f25ab8 R08: 0000000000000000 R09: 0000000000000000
[  153.771560][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  153.779568][ T5850] R13: 00007f5864116038 R14: 00007f5864115fa0 R15: 00007ffdc530ec28
[  153.787587][ T5850]  </TASK>
[  153.790632][ T5850] 
[  153.792984][ T5850] Allocated by task 5850:
[  153.797333][ T5850]  __kasan_kmalloc+0xd4/0x100
[  153.802053][ T5850]  __kmalloc+0x13d/0x2c0
[  153.806344][ T5850]  tcf_idr_create+0x5f/0x790
[  153.810978][ T5850]  tcf_idr_create_from_flags+0x61/0x70
[  153.816492][ T5850]  tcf_gact_init+0x342/0x570
[  153.821126][ T5850]  tcf_action_init_1+0x3fd/0x6b0
[  153.826107][ T5850]  tcf_action_init+0x233/0x7a0
[  153.830912][ T5850]  tcf_exts_validate+0x24a/0x580
[  153.835886][ T5850]  mall_set_parms+0x48/0x520
[  153.840516][ T5850]  mall_change+0x478/0x760
[  153.844971][ T5850]  tc_new_tfilter+0x13df/0x1990
[  153.849866][ T5850]  rtnetlink_rcv_msg+0x83c/0xcb0
[  153.854849][ T5850]  netlink_rcv_skb+0x1e9/0x430
[  153.859653][ T5850]  rtnetlink_rcv+0x1c/0x20
[  153.864109][ T5850]  netlink_unicast+0x86c/0xa30
[  153.868910][ T5850]  netlink_sendmsg+0x879/0xb80
[  153.873708][ T5850]  ____sys_sendmsg+0x5be/0x8f0
[  153.878505][ T5850]  ___sys_sendmsg+0x236/0x2e0
[  153.883218][ T5850]  __x64_sys_sendmsg+0x201/0x2d0
[  153.888192][ T5850]  x64_sys_call+0x4b/0x9a0
[  153.892659][ T5850]  do_syscall_64+0x4c/0xa0
[  153.897113][ T5850]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  153.903046][ T5850] 
[  153.905396][ T5850] The buggy address belongs to the object at ffff888117b59900
[  153.905396][ T5850]  which belongs to the cache kmalloc-192 of size 192
[  153.919486][ T5850] The buggy address is located 0 bytes to the right of
[  153.919486][ T5850]  192-byte region [ffff888117b59900, ffff888117b599c0)
[  153.933156][ T5850] The buggy address belongs to the page:
[  153.938833][ T5850] page:ffffea00045ed640 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888117b59d00 pfn:0x117b59
[  153.950450][ T5850] flags: 0x4000000000000200(slab|zone=1)
[  153.956137][ T5850] raw: 4000000000000200 ffffea0004ab50c0 0000000c0000000c ffff888100042c00
[  153.964753][ T5850] raw: ffff888117b59d00 000000008010000e 00000001ffffffff 0000000000000000
[  153.973359][ T5850] page dumped because: kasan: bad access detected
[  153.979795][ T5850] page_owner tracks the page as allocated
[  153.985545][ T5850] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 101, ts 5900079097, free_ts 0
[  154.000614][ T5850]  post_alloc_hook+0x192/0x1b0
[  154.005421][ T5850]  prep_new_page+0x1c/0x110
[  154.009959][ T5850]  get_page_from_freelist+0x2c3a/0x2cd0
[  154.015549][ T5850]  __alloc_pages+0x1a2/0x460
[  154.020172][ T5850]  new_slab+0xa0/0x4d0
[  154.024266][ T5850]  ___slab_alloc+0x3ac/0x840
[  154.028896][ T5850]  __slab_alloc+0x49/0x90
[  154.033261][ T5850]  kmem_cache_alloc_trace+0x146/0x270
[  154.038670][ T5850]  kernfs_fop_open+0x375/0xbb0
[  154.043470][ T5850]  do_dentry_open+0x82a/0x1010
[  154.048290][ T5850]  vfs_open+0x73/0x80
[  154.052295][ T5850]  path_openat+0x26e6/0x2f80
[  154.056906][ T5850]  do_filp_open+0x1df/0x400
[  154.061426][ T5850]  do_sys_openat2+0x15e/0x7f0
[  154.066118][ T5850]  __x64_sys_openat+0x136/0x160
[  154.070979][ T5850]  x64_sys_call+0x219/0x9a0
[  154.075499][ T5850] page_owner free stack trace missing
[  154.080882][ T5850] 
[  154.083234][ T5850] Memory state around the buggy address:
[  154.088875][ T5850]  ffff888117b59880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  154.096945][ T5850]  ffff888117b59900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  154.105018][ T5850] >ffff888117b59980: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  154.113091][ T5850]                                            ^
[  154.119254][ T5850]  ffff888117b59a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  154.127335][ T5850]  ffff888117b59a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  154.135426][ T5850] ==================================================================
[  154.143492][ T5850] Disabling lock debugging due to kernel taint