last executing test programs: 6.549605233s ago: executing program 0 (id=1543): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0x6f0}, 0x8) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='\b', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x3f8, @loopback}, 0x1c) 6.490945958s ago: executing program 0 (id=1544): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9000000010680305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 6.485544458s ago: executing program 3 (id=1546): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1"], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xb000000, '\x00', 0x0, 0x0}, 0x48) 6.46508717s ago: executing program 0 (id=1547): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0xfffffffffffffff0) 5.934784683s ago: executing program 3 (id=1552): socket$netlink(0x10, 0x3, 0x0) getresgid(0x0, 0x0, 0x0) socket(0x0, 0x80003, 0x0) ftruncate(0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001be5902f4fa5dda1b000000000a40000000160a01020000c8081891995885e7582910000014000380d4ca73c8a9919f71080002400000000008000140000000000900020073797a32000000e3b0eea70073797a200000000014000000020a090000000000000000000059de3e0ae878bf7a0001000000569e000000000000000a3f350ae651fa2588fbb40bca8f5e91ae02dced1b3068a17e5689eea79046d0eb93ca97cd8550f4f04b04b105744633bd81214db4a887414f1eec99c9011745d2c0cbcfb6602e7b43a68a8440584ba597cf2cbb0e17386bdfd82b79d664c0533773c8c996c7567feb024e1fd8af113e98d72aa2e9c00bad2d6fcc72d43c53e659fe1ce216cb98bef034e99dcdccd874a928a2eec777cba35afe4cfc5f48743dffd3b9f20c456b2d3a74c41b8acb5f3798867f2b4decac1228d2c1bfc3df"], 0x7c}, 0x1, 0x0, 0x0, 0x4000894}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) personality(0x500006) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28}, {0x45, 0x0, 0x0, 0x800007}]}, 0x10) socket$netlink(0x10, 0x3, 0xa) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x25, 0x1, 0x93, 0x0, 0x0, 0x0, 0x81200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x8800, 0x0, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x6d, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b88beae798e814208e274211945fb789d76640177"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 5.934325003s ago: executing program 0 (id=1553): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@xdp={0x2c, 0x6, r0, 0x10}, {&(0x7f0000000040)=""/237, 0xed}, &(0x7f0000000140), 0x61}, 0xa0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000500)={&(0x7f0000000280), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x18c, r4, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xa}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x51e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x81}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x203}, {0x8, 0x15, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2b5d}, {0x8, 0x15, 0x401}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000540)=@loop={'/dev/loop', 0x0}, r5, &(0x7f0000000640)={0x8001, 0x0, 0x0, 0x2}) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000001a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/136, 0x88}, {&(0x7f00000008c0)=""/70, 0x46}, {&(0x7f0000000940)=""/226, 0xe2}], 0x4, &(0x7f0000000a80)=""/4096, 0x1000}, 0x40) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000001ac0)=""/218, 0xda, 0x23, &(0x7f0000001bc0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x80) (async) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r8, 0x0, 0xc, &(0x7f0000001c40)="5a5659218b80524cfece03e2ee6ccdd4ec480173d717341373355bdffafb7eaa9a64a9d919dec6edb29fd26f4be204917f1f71f6b20c0b9a991deb7e14869a9520aa6a5050ef2786b792144d38cca1d7a1994695292426c7f79a9d345309aa646a7827c0aac089b84dd8b766af19566a954116059c1c26303c8685542f91a0be5ecd69220d1fc80685855aa759d4971765a62273ec5374739f5c4ae5b74a48b62d62cda744e070321e2bea298881e7244c850709d88cbc92837cf9229220d380acbd916c6462ba545ae894e4f1b1232980f338818049be1c231ecf8bf337ff17d091a20a60a8a1dc011147ecab0aa51ab6", 0xf1) sendmsg$kcm(r7, &(0x7f0000002080)={&(0x7f0000001d40)=@llc={0x1a, 0x108, 0x5, 0x8, 0x48, 0xd2, @broadcast}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001dc0)="c1b35d30320eaa41d93c7afa2cde7ae6ff7da73b6f1653af3b70aa6d34b472bf86783d060a88f8efdb128ce552d61952b4a01bd18675cd9c95cb5a18038c501ce7b69dc3caf8b92beaeba7f03f48e10594aa988ccb4d9991fc8cf68d93ed2bf9ebd8b922aeeced120acb96f168f597c5b42fa79b76062b8f21ee9c5ab2db42f81269a39c44b03e4fb88cd2", 0x8b}, {&(0x7f0000001e80)="b83c", 0x2}, {&(0x7f0000001ec0)="ca46d7c2a178b66a12e94e3a86e3195f473be5b45f6bc96a47ae1810803c5ace88f2427c43eae425924894a51cc21bd149596aa7386e4b54e5938fc205c5f33447139f456a6c8d35e7f508b8fa8c1f3d55f4ac8a24ca4db183c7b0264e09536d1d3b8c2c73b6b536b7b08b8d3f4d4356ed8f302f5e9233c6c7be7a2978f0b3cba3ca497ad91c471264fc95b98bc0aab44e21bfc5c4e63bf281dc50cc13e571509a6b6fb8cc635703e63cacf7a4d207ec199f8957bc0962a0466105ff27341bca11f926d8b32668964254e921fae35b974b2b9dbce574011e76ad04e3dd06f773523f996a0298a461b79cd346e7b5dcb65f2d", 0xf2}, {&(0x7f0000001fc0)="5bc2c53ef4f8706c1d39309b37e2e5925962f13d47a8c363fd49d43fa2fd3e72bbce20ff53ff54d6a209499ccdc03ae4f10c87c814183a1d9f0460540d4de9d61782fb8b386b07916f378e70a5a44f5f82b6028148613606e536265272fec8ceeb54b181", 0x64}], 0x4}, 0x4008804) (async) dup3(r6, r7, 0x80000) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000020c0)={0x93, 0x24, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x50, {0x1, 0x12, 0x8, 0xc5c, [0xfffffffffffffff8, 0x3, 0xf, 0x80000001, 0x2b, 0x4b1ffd75, 0x1, 0x2, 0x0]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0xd, 0x7, [0xff, 0x0]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0xff, [0x7, 0x8, 0xdfa, 0x6, 0x7fff]}}, @jumbo, @ra={0x5, 0x2, 0x2b37}, @calipso={0x7, 0x50, {0x0, 0x12, 0x10, 0x3, [0x5, 0x2, 0x7, 0xf7, 0x4, 0x4, 0xfffffffffffffffd, 0x6ec, 0x6]}}]}, 0x130) symlinkat(&(0x7f0000002200)='./file0\x00', r3, &(0x7f0000002240)='./file0\x00') (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000002280)={0x0, 0x9, 0x8}, &(0x7f00000022c0)=0x8) (async) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000002340), r2) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0xecfd3fd2314a348c}, 0xc, &(0x7f0000002440)={&(0x7f0000002380)={0x90, r9, 0x11e, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x8040) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000002500), r3) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002540)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000002600)={'ip6_vti0\x00', &(0x7f0000002580)={'syztnl1\x00', r0, 0x29, 0x3, 0x8, 0x8, 0x2a, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x4, 0x1}}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002800)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002640)={0x168, r10, 0x1, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r12}, {0x100, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x38}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe98a}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000000}, 0x4000000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r3) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a40)={&(0x7f00000028c0)={0x150, r13, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x61}}}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7ff}, @NL80211_ATTR_IE={0x11d, 0x2a, [@mesh_id={0x72, 0x6}, @random={0x4, 0x9f, "02736bc3bd74bfc3f4134b5c28165a219e8e1ca806d6ea9c3a2552abe1038f4ec407a87fbce69deae422888006a2f7074548ada0f80f0b906627bf196b53151415d4eefffcdfc13676131298949d4f2e987d00d7ec0f2b06df213b380669bf68cb81dd30fecca7d28b52150976c00836e741f4579fa7dc013521382478923c3c237b3a279e85f412199b8f3afbd9112dcf19006ca5a74af25d16bd38c18f15"}, @chsw_timing={0x68, 0x4, {0xfffb, 0x8}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0x7c, 0x7c}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @fast_bss_trans={0x37, 0x52, {0x7, 0x0, "d6d508073f57fb6b3a4d9e9701e52546", "d7087d241980c73d56bfcf63a44f517bfeb1d8caab715eb47dc0bf41a8f3065f", "4676537266099c92c6a75d959f211c4f7d90a5f4129d245b9f13213e1a459395"}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000002ac0)=0x2, 0x4) (async, rerun: 32) epoll_create1(0x80000) (rerun: 32) fallocate(r7, 0x7d, 0xffff, 0x190) 5.897268417s ago: executing program 0 (id=1554): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x413, 0x0, 0x0, {0x0, 0x0, 0x8100, r1}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 5.634855948s ago: executing program 0 (id=1556): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0}, 0x90) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, &(0x7f00000005c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0xffffffff}}, {@usrjquota}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1637}}], [{@euid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x64, 0x32, 0x36, 0x65, 0x33, 0x37, 0x63], 0x2d, [0x37, 0x32, 0x32, 0x63], 0x2d, [0x36, 0x66, 0x63, 0x35], 0x2d, [0x30, 0x63, 0x35, 0x61], 0x2d, [0x64, 0x30, 0x39, 0x66, 0x63, 0x61, 0x66]}}}, {@subj_type={'subj_type', 0x3d, 'noauto_da_alloc'}}, {@flag='lazytime'}, {@hash}]}, 0xfb, 0x55d, &(0x7f0000004240)="$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") (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000540)=0x410, 0x4) sendmsg$can_bcm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=r4, @ANYBLOB="0000000001"], 0x48}}, 0x0) (async) read(r4, &(0x7f0000001480)=""/4096, 0x38) (async) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803d05fab087a0100000005481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0c1bcae5fa0f5f9dcdd51af51a", 0xb6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0xc, &(0x7f0000618000/0x2000)=nil) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x101301) 2.813874229s ago: executing program 3 (id=1650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}]}]}, 0x50}, 0x1, 0x0, 0x84}, 0x0) 2.813680499s ago: executing program 3 (id=1651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_io_uring_setup(0x2785, &(0x7f0000000680), &(0x7f0000000100), &(0x7f0000001440)) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = io_uring_setup(0x2e1b, &(0x7f00000002c0)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x4, 0x2000f000, r3) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/47, 0x2f, 0x0, &(0x7f0000000440)=""/92, 0x5c}, &(0x7f0000000500)=0x40) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @mcast2, 0x5}, 0x1c) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000000c0)=0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x6f00000) (async) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="08b30000000000007311410074fffffff000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) (async) r10 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r10, 0x6a, 0x3, 0x0, 0x20000071) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0100000000020000000004000000fede01387970081281ba22a1042759561b10cb6c4ba037339ab49a0af55a6374d36c044107c52c4a7bdf3cefe58ede027396b35293dc24343e4dc3cb698854a94dda8d690769bb9c84713ad2e27136b7209192abb5efcedfcfc97d123eb7a58302e0234284c62dae791af8ee9c117a63fc126c24d17b26d88057af585605b745a549e3361acb8953370c020078d4e25b60ee8b15e8a0455b72cb897c8151e18dfa"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.758581174s ago: executing program 3 (id=1654): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x3, 0x81ffffff, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 2.67885248s ago: executing program 3 (id=1655): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000240)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x28}}], 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0xfffffffffffffeb1, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc487e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x400000003, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32], 0x44}}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) close(r2) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000f2cff4)={0x77540947ed9a168d}) epoll_wait(r3, &(0x7f00000018c0)=[{}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0xb8fe) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)) getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@loopback}}}, &(0x7f0000000440)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(r6, 0x0, r7, 0x0, 0x8000f28, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) vmsplice(r7, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b4", 0x1}, {&(0x7f0000000300)="b8", 0x1}, {&(0x7f00000008c0)="ff", 0x1}, {0x0}], 0x5, 0x0) 1.282759334s ago: executing program 4 (id=1675): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000400)={0x1f, 0x0, @fixed}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), &(0x7f00000000c0)=0x31) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44893, &(0x7f00000001c0)={0xa, 0x4e21, 0x2, @loopback, 0x400}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x2d6, @loopback, 0xfffffff9}, 0x1c) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) inotify_init() inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x140000325) (async) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.upper\x00') (async) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1.278272745s ago: executing program 4 (id=1676): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000c6a000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x4c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0', [{0x20, '/dev/ppp\x00'}]}, 0x1001a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001439) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000000)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)=0x4) close(r4) 1.070870162s ago: executing program 4 (id=1678): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000007b0001000000000000000000021800000000fd000000ed0008000100ac141400080008000400"], 0x2c}}, 0x0) 1.070600611s ago: executing program 1 (id=1679): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x200000000006, 0x40, 0x0, 0x7ffc1ffb}, {0x0, 0x0, 0x9, 0x5}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @remote}) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1e03"], 0xffdd) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0xfffffffffffffffb) mremap(&(0x7f00006a5000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000b23000/0x3000)=nil) mremap(&(0x7f00008a0000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00006f7000/0x4000)=nil) mremap(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000d3f000/0x3000)=nil) r3 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x18}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, 0x0, 0x0}, 0x20) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x11, 0xffffffffffffffff, 0x2000000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000180)={0x0, 0x0}) kcmp(r8, r8, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) iopl(0x3) prctl$PR_SET_MM_AUXV(0x48, 0xc, 0x0, 0x29) 1.069881532s ago: executing program 4 (id=1680): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup2(r0, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00V\x00)\x00\x00\x002\x00\x00\x00', @ANYRES32=r3], 0x28}, 0x0) 1.061460222s ago: executing program 4 (id=1681): pipe2(0x0, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/139, 0x8b}], 0x1f6, &(0x7f00000003c0), 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f00000002c0)='2', 0x1) (async) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000002ec0)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRESOCT=r3, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_int={{0x14}}], 0x18}, 0x0) (async) clock_settime(0x0, &(0x7f00000009c0)={r3, r4+60000000}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000002000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f00000000c0)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000280)=[{}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}]}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r8, 0xc0182101, 0x20000000) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/246, 0xf6}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xfffffec0}], 0x1, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) (async) r11 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001c6000/0x14000)=nil, &(0x7f00008ad000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x18}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x6, 0xff, 0x5, 0x2010, 0xffffffffffffffff, 0x5, '\x00', 0x0, r9, 0x0, 0x0, 0x1}, 0x48) 1.056329333s ago: executing program 1 (id=1682): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x28, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3, "3db6576af7bc29709562ee0cc83a0296ce309a211ec9"}]}}}}}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000c40)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff0200000000000000000000000000016000b29500003a00fe8000000000000000000000000000bb20010000000000000000000000000002caa7c1b7f4c336af"], 0x0) 998.949798ms ago: executing program 1 (id=1683): r0 = socket$inet(0x2, 0x3, 0x100) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003440)=[{{&(0x7f0000000180)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0xc00}}, {{&(0x7f00000008c0)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) 998.479758ms ago: executing program 4 (id=1684): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000040)='./file2\x00', 0x20c593, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0, @ANYRES8, @ANYRES64=r1, @ANYRESDEC], 0x1, 0x1207, &(0x7f0000002dc0)="$eJzs3E+LG2UcB/Bf49Zut+4fa622B33Qi6ehuwdPgiyyBdmAUrtCKwhTd6IhYxIyYSEiVk9efR3i0ZsgvoG99DV424vHHsQRk61t2rS6h27E/Xwu8yPP75t5HkIGJsyTg7e++7zTqrJWPozGqVPR6EekuylSNOKeV7Ynxxs3tzebza1rKV3dvL7+Zkpp5dWfP/ryh9d+GZ778MeVn87E/trHB79t/Lp/cf/SwR/XP2tXqV2lbm+Y8nSr1xvmt8oi7barTpbS+2WRV0Vqd6tiMDXeKnv9/ijl3d3lpf6gqKqUd0epU4zSsJeGg1HKP83b3ZRlWVpeCh7r9D+37Hx/t67riLo+Hc9GXdf12ViKc/FcLMdKfB0Rz8f5eCEuxItxMV6Kl+PSuOs4pg8AAAAAAAAAAAAAAAAAAAAnx5P2/6/Gmv3/AAAAAAAAAAAAAAAAAAAAcAw+uHFze7PZ3LqW0mJE+e3ezt7O5DgZ32xFO8oo4kqsxu8x3v0/MamvvtvcupLG1uKb8vZh/vbezjPT+fXx3wkc5hfGY/fy65N8ms6fiaUH8xuxGhdmn39jZn4x3nj9gXwWq3Hnk+hFGbvjc9/Pf7We0jvvNR/KXx73AQAAwP9Blv428/49yx43Pskf4feBh+6vF+LywnzXTkQ1+qKTl2UxmC4WH3lF8e+LxlN650b8RxZ4Qouzh1+aI8b/uszNf/KPFHfOP7FnzhcmjsX9D33eMwEAAAAAAAAAAOAonvKThgsx48myt+ezVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2YFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAP//i0XIUQ==") r2 = open(&(0x7f0000000040)='./bus\x00', 0x44842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)='$', 0x3fec00}], 0x2, 0x1400, 0x700, 0x3) 998.420488ms ago: executing program 1 (id=1685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000054000100070000000900000007", @ANYRES32, @ANYBLOB="010000000f"], 0x38}}, 0x0) 998.300838ms ago: executing program 1 (id=1686): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000100)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x32}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) eventfd2(0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) creat(&(0x7f0000000040)='./file0\x00', 0x0) 789.371495ms ago: executing program 2 (id=1687): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket(0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x0, 0x0, 0x1, 0x48}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) 681.250453ms ago: executing program 2 (id=1688): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x4, 0x4, 0x3e0, 0x0, 0x210, 0x210, 0x2f8, 0x108, 0x2f8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fff, 'syz0\x00'}}}, {{@arp={@dev, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gre0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@arp={@remote, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@multicast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'erspan0\x00', 'lo\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) 546.807204ms ago: executing program 2 (id=1689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000200)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001a00ff00000000000000000002"], 0x14}}, 0x0) splice(r0, &(0x7f00000000c0), r1, &(0x7f0000000100)=0x5, 0x2, 0xa) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) unshare(0x12000200) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket(0x2c, 0x3, 0xb75c) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000080)={0x6, 0x50, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$l2tp(r6, 0x0, 0x0) 519.544017ms ago: executing program 2 (id=1690): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 487.29251ms ago: executing program 2 (id=1691): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57b0000000e800000000000000000ac1414aa"], 0xfdef) 430.727294ms ago: executing program 2 (id=1692): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000440)=ANY=[@ANYBLOB="55aac5f4217baaaaaaaaaabb86dd6000000000283afffe8000000000000000000000000000bbff0200000000000000000000000000018700907800000000fe8000000000000000000000000000aa00000000000000000000fffffffffffff6e18c27117083dac26a9511c7e7262d56cd19b27a9d122330e4c27581b74d9b67880c78246d"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000014001a80100004800c00088008"], 0x34}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000800"/32, @ANYRESHEX=r0, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1}, 0x90) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x76, &(0x7f00000000c0)=@assoc_value, 0x8) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf0e87ae9f643bdc}, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5001000010001307feffffff0000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000940)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r6, @ANYBLOB="01fcff000000000000000c00000018000380140003808dff01800400030000"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x9, 0x12) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, 0x0) unshare(0x2000400) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) 0s ago: executing program 1 (id=1693): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r0 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x6d6f, &(0x7f0000000080), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) get_robust_list(0x0, 0x0, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x180102, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="440001000007030000000000000000000a0000070900010073050031000000001c000780080001400000000608000240fffffffd08000240000006ce0800054000000001"], 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x800) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000500)={0x3, &(0x7f0000000400)=[{0x6, 0x4, 0xf7, 0xfffe}, {0x1204, 0x9, 0x40}, {0x1, 0x81, 0x3f, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50000000000000071113700000000008510000002000000850000020000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): loop1: detected capacity change from 0 to 2048 [ 85.598532][ T6577] hub 6-0:1.0: USB hub found [ 85.598857][ T6582] loop3: detected capacity change from 0 to 128 [ 85.603275][ T6577] hub 6-0:1.0: 8 ports detected [ 85.623535][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.636659][ T6582] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.651143][ T6582] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.690443][ T6573] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.711892][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.724094][ T5052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.746974][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.754132][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.761894][ T6529] bridge_slave_0: entered allmulticast mode [ 85.763440][ T5223] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.769716][ T6529] bridge_slave_0: entered promiscuous mode [ 85.790495][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.799104][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.808530][ T6529] bridge_slave_1: entered allmulticast mode [ 85.816493][ T6529] bridge_slave_1: entered promiscuous mode [ 85.823092][ T6587] loop2: detected capacity change from 0 to 512 [ 85.840368][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.841907][ T6587] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.858241][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.882334][ T6587] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.900876][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.911737][ T6529] team0: Port device team_slave_0 added [ 85.922200][ T6529] team0: Port device team_slave_1 added [ 85.946892][ T6593] netlink: 'syz.3.1093': attribute type 13 has an invalid length. [ 85.958472][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.965669][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.994559][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.033482][ T6594] __nla_validate_parse: 7 callbacks suppressed [ 86.033507][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1093'. [ 86.050498][ T6594] netlink: 'syz.3.1093': attribute type 18 has an invalid length. [ 86.071048][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.078128][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.104177][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.133655][ T5052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.159495][ T36] bridge_slave_1: left allmulticast mode [ 86.166127][ T36] bridge_slave_1: left promiscuous mode [ 86.173351][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.183185][ T36] bridge_slave_0: left allmulticast mode [ 86.190404][ T36] bridge_slave_0: left promiscuous mode [ 86.197339][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.215789][ T6615] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6615 comm=syz.2.1096 [ 86.261196][ T6619] loop2: detected capacity change from 0 to 128 [ 86.309190][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.325325][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.339621][ T36] bond0 (unregistering): Released all slaves [ 86.359640][ T6613] netlink: 'syz.1.1099': attribute type 6 has an invalid length. [ 86.369078][ T6619] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1101'. [ 86.385281][ T6619] 0·X: renamed from hsr0 (while UP) [ 86.400496][ T6619] 0·X: entered allmulticast mode [ 86.406171][ T6619] hsr_slave_0: entered allmulticast mode [ 86.412033][ T6619] hsr_slave_1: entered allmulticast mode [ 86.427472][ T6619] A link change request failed with some changes committed already. Interface c0·X may have been left with an inconsistent configuration, please check. [ 86.465631][ T36] hsr_slave_0: left promiscuous mode [ 86.474300][ T36] hsr_slave_1: left promiscuous mode [ 86.484234][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.492372][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.500067][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.509181][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.526142][ T36] veth1_macvtap: left promiscuous mode [ 86.532396][ T36] veth0_macvtap: left promiscuous mode [ 86.538520][ T36] veth1_vlan: left promiscuous mode [ 86.543877][ T36] veth0_vlan: left promiscuous mode [ 86.597858][ T6644] loop4: detected capacity change from 0 to 512 [ 86.605368][ T6644] EXT4-fs: Ignoring removed bh option [ 86.614403][ T6644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 86.621511][ T6644] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 86.629882][ T6644] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1109: invalid indirect mapped block 8 (level 2) [ 86.643463][ T6644] EXT4-fs (loop4): Remounting filesystem read-only [ 86.650157][ T6644] EXT4-fs (loop4): 1 truncate cleaned up [ 86.656255][ T6644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.668902][ T6644] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 86.677507][ T6644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.689588][ T36] team0 (unregistering): Port device team_slave_1 removed [ 86.700877][ T36] team0 (unregistering): Port device team_slave_0 removed [ 86.764132][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1106'. [ 86.783393][ T6529] hsr_slave_0: entered promiscuous mode [ 86.800265][ T6529] hsr_slave_1: entered promiscuous mode [ 86.810683][ T6648] bond0: option miimon: invalid value (18446744073709551613) [ 86.818934][ T6648] bond0: option miimon: allowed values 0 - 2147483647 [ 86.888673][ T6655] hub 6-0:1.0: USB hub found [ 86.893852][ T6655] hub 6-0:1.0: 8 ports detected [ 86.959432][ T6663] loop1: detected capacity change from 0 to 2048 [ 86.969065][ T6666] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6666 comm=syz.4.1117 [ 86.996721][ T6663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.081274][ T6680] loop4: detected capacity change from 0 to 512 [ 87.101880][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.113944][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.146999][ T6680] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.203835][ T4238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.227524][ T6684] loop1: detected capacity change from 0 to 128 [ 87.246433][ T6684] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 87.357459][ T6529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.366483][ T3183] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 87.383251][ T6529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.400708][ T6529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.411597][ T6529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.442857][ T6700] openvswitch: netlink: Flow actions attr not present in new flow. [ 87.466873][ T6701] openvswitch: netlink: Message has 12 unknown bytes. [ 87.469742][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.498601][ T6529] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.507419][ T6703] loop4: detected capacity change from 0 to 128 [ 87.510066][ T3156] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.514524][ T6703] FAT-fs (loop4): Unrecognized mount option "00000000000000000000005" or missing value [ 87.521408][ T3156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.546520][ T6705] loop1: detected capacity change from 0 to 512 [ 87.554400][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.556358][ T6705] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1127: invalid block [ 87.561647][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.577948][ T6705] EXT4-fs (loop1): Remounting filesystem read-only [ 87.595839][ T6705] EXT4-fs (loop1): 2 truncates cleaned up [ 87.603003][ T6705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.617708][ T6705] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 87.627024][ T6705] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.738574][ T6715] loop3: detected capacity change from 0 to 512 [ 87.753795][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.773702][ T6715] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.795292][ T6715] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.812001][ T6723] netlink: 'syz.2.1128': attribute type 21 has an invalid length. [ 87.899239][ T6529] veth0_vlan: entered promiscuous mode [ 87.908722][ T6529] veth1_vlan: entered promiscuous mode [ 87.924356][ T6529] veth0_macvtap: entered promiscuous mode [ 87.942100][ T6745] loop3: detected capacity change from 0 to 512 [ 87.954131][ T6529] veth1_macvtap: entered promiscuous mode [ 87.967493][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.978343][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.988315][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.999458][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.010174][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.021301][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.032340][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.036150][ T6745] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1134: casefold flag without casefold feature [ 88.043478][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.060324][ T6745] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1134: couldn't read orphan inode 15 (err -117) [ 88.067729][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.090847][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.104257][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.114831][ T6752] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 88.141663][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.152993][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.163177][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.174119][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.185136][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.196238][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.207495][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.221590][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.232819][ T6529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.248032][ T6529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.261581][ T6756] hub 6-0:1.0: USB hub found [ 88.262016][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.266770][ T6756] hub 6-0:1.0: 8 ports detected [ 88.278151][ T6529] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.290027][ T6529] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.299269][ T6529] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.308677][ T6529] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.335133][ T6761] loop1: detected capacity change from 0 to 512 [ 88.350163][ T6761] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.516193][ T6786] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6786 comm=syz.3.1147 [ 88.532365][ T6786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1147'. [ 88.542139][ T6786] netlink: 'syz.3.1147': attribute type 14 has an invalid length. [ 88.551269][ T6786] netlink: 'syz.3.1147': attribute type 12 has an invalid length. [ 88.574608][ T6790] loop0: detected capacity change from 0 to 512 [ 88.589835][ T6790] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.608731][ T6795] loop1: detected capacity change from 0 to 512 [ 88.627461][ T6795] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.728266][ T6804] FAULT_INJECTION: forcing a failure. [ 88.728266][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 88.742797][ T6804] CPU: 0 PID: 6804 Comm: syz.0.1156 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 88.753915][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.766121][ T6804] Call Trace: [ 88.769775][ T6804] [ 88.773064][ T6804] dump_stack_lvl+0xf2/0x150 [ 88.782332][ T6804] dump_stack+0x15/0x20 [ 88.789468][ T6804] should_fail_ex+0x229/0x230 [ 88.795267][ T6804] ? io_cqring_event_overflow+0x5a/0x300 [ 88.802215][ T6804] __should_failslab+0x92/0xa0 [ 88.808223][ T6804] should_failslab+0x9/0x20 [ 88.814385][ T6804] __kmalloc_noprof+0xa5/0x370 [ 88.819851][ T6804] io_cqring_event_overflow+0x5a/0x300 [ 88.827857][ T6804] io_req_cqe_overflow+0x89/0xb0 [ 88.833921][ T6804] __io_submit_flush_completions+0x34e/0xa00 [ 88.840220][ T6804] io_submit_sqes+0xe91/0x1080 [ 88.845413][ T6804] ? kstrtouint_from_user+0xb0/0xe0 [ 88.850880][ T6804] __se_sys_io_uring_enter+0x1c6/0x15a0 [ 88.856504][ T6804] ? __fget_files+0x1da/0x210 [ 88.861251][ T6804] ? fput+0x13b/0x180 [ 88.865269][ T6804] ? ksys_write+0x178/0x1b0 [ 88.869863][ T6804] __x64_sys_io_uring_enter+0x78/0x90 [ 88.875256][ T6804] x64_sys_call+0x25ab/0x2d70 [ 88.880043][ T6804] do_syscall_64+0xc9/0x1c0 [ 88.884611][ T6804] ? clear_bhb_loop+0x55/0xb0 [ 88.889341][ T6804] ? clear_bhb_loop+0x55/0xb0 [ 88.894287][ T6804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.900346][ T6804] RIP: 0033:0x7ff63f58abd9 [ 88.905205][ T6804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.925196][ T6804] RSP: 002b:00007ff63e80c048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.933636][ T6804] RAX: ffffffffffffffda RBX: 00007ff63f718f60 RCX: 00007ff63f58abd9 [ 88.942909][ T6804] RDX: 0000000000000000 RSI: 0000000000002def RDI: 0000000000000005 [ 88.952405][ T6804] RBP: 00007ff63e80c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.960995][ T6804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.969114][ T6804] R13: 000000000000000b R14: 00007ff63f718f60 R15: 00007ffcd2179948 [ 88.979023][ T6804] [ 89.003401][ T6807] netlink: 'syz.1.1155': attribute type 10 has an invalid length. [ 89.013991][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1155'. [ 89.026599][ T6807] ipvlan0: entered promiscuous mode [ 89.032716][ T6807] ipvlan0: entered allmulticast mode [ 89.039564][ T6807] veth0_vlan: entered allmulticast mode [ 89.070233][ T6807] bridge0: port 3(ipvlan0) entered blocking state [ 89.079048][ T6807] bridge0: port 3(ipvlan0) entered disabled state [ 89.088363][ T6814] loop0: detected capacity change from 0 to 2048 [ 89.092009][ T6807] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 89.101627][ T6814] EXT4-fs: Ignoring removed orlov option [ 89.133727][ T6810] netlink: 'syz.2.1159': attribute type 10 has an invalid length. [ 89.144168][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 89.251340][ T6827] loop2: detected capacity change from 0 to 512 [ 89.268309][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 89.279456][ T6828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1163'. [ 89.303983][ T6827] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.334348][ T6834] loop3: detected capacity change from 0 to 2048 [ 89.362579][ T6838] loop4: detected capacity change from 0 to 2048 [ 89.380070][ T6834] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.1166: reserved inode found cleared - inode=1 [ 89.386491][ T6838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.411108][ T6838] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.434419][ T6838] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 89.447080][ T6838] System zones: 0-19 [ 89.451849][ T6842] hub 6-0:1.0: USB hub found [ 89.456683][ T6842] hub 6-0:1.0: 8 ports detected [ 89.554299][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1173'. [ 89.592242][ T6855] loop4: detected capacity change from 0 to 128 [ 89.599139][ T6858] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=6858 comm=syz.2.1175 [ 89.613419][ T6855] FAT-fs (loop4): Unrecognized mount option "/dev/ptmx" or missing value [ 89.635435][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1176'. [ 89.644834][ T6863] loop3: detected capacity change from 0 to 512 [ 89.661498][ T6855] loop4: detected capacity change from 0 to 1024 [ 89.672642][ T6855] EXT4-fs: Mount option(s) incompatible with ext3 [ 89.691554][ T6863] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.744194][ T6871] loop4: detected capacity change from 0 to 128 [ 89.822688][ T6886] loop4: detected capacity change from 0 to 128 [ 89.833669][ T6876] hub 6-0:1.0: USB hub found [ 89.836354][ T6886] ext4 filesystem being mounted at /202/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.841234][ T6876] hub 6-0:1.0: 8 ports detected [ 89.936392][ T6891] loop3: detected capacity change from 0 to 2048 [ 89.959263][ T6900] loop2: detected capacity change from 0 to 512 [ 89.978931][ T6900] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.020903][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 90.020922][ T29] audit: type=1400 audit(1720773805.555:714): avc: denied { map } for pid=6905 comm="syz.0.1193" path="/dev/ttyS3" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 90.082313][ T6916] loop4: detected capacity change from 0 to 2048 [ 90.096173][ T6919] loop1: detected capacity change from 0 to 512 [ 90.109907][ T6919] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.122979][ T29] audit: type=1400 audit(1720773805.645:715): avc: denied { validate_trans } for pid=6932 comm="syz.2.1195" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 90.151806][ T6921] hub 6-0:1.0: USB hub found [ 90.157521][ T6921] hub 6-0:1.0: 8 ports detected [ 90.172688][ T29] audit: type=1400 audit(1720773805.705:716): avc: denied { mounton } for pid=6908 comm="syz.4.1188" path="/203/file1/bus" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 90.226002][ T6909] loop4: detected capacity change from 2048 to 2047 [ 90.250292][ T6909] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #18: comm syz.4.1188: corrupted in-inode xattr: bad magic number in in-inode xattr [ 90.267373][ T6945] loop2: detected capacity change from 0 to 512 [ 90.279895][ T6947] loop0: detected capacity change from 0 to 512 [ 90.296114][ T29] audit: type=1400 audit(1720773805.825:717): avc: denied { listen } for pid=6918 comm="syz.1.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 90.318836][ T6909] EXT4-fs error (device loop4): ext4_map_blocks:689: inode #18: block 62218: comm syz.4.1188: lblock 0 mapped to illegal pblock 62218 (length 1) [ 90.353083][ T6945] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.369408][ T6909] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 90.385374][ T6909] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.385374][ T6909] [ 90.407391][ T6947] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.443496][ T6908] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #18: comm syz.4.1188: corrupted in-inode xattr: bad magic number in in-inode xattr [ 90.488034][ T4238] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /203/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=1937076323, rec_len=29797, size=2048 fake=0 [ 90.502406][ T6958] loop3: detected capacity change from 0 to 128 [ 90.523342][ T6958] FAT-fs (loop3): Unrecognized mount option "" or missing value [ 90.535369][ T3173] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #18: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 90.553864][ T3173] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #18: comm kworker/u8:6: corrupted in-inode xattr: bad magic number in in-inode xattr [ 90.572713][ T5311] EXT4-fs (loop4): Inode 18 (ffff88810576f230): i_reserved_data_blocks (1) not cleared! [ 90.628018][ T29] audit: type=1326 audit(1720773806.165:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.3.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2896d71bd9 code=0x0 [ 90.681719][ T6961] loop2: detected capacity change from 0 to 8192 [ 90.701594][ T6966] hub 6-0:1.0: USB hub found [ 90.707037][ T6966] hub 6-0:1.0: 8 ports detected [ 90.838859][ T29] audit: type=1400 audit(1720773806.375:719): avc: denied { getopt } for pid=6964 comm="syz.3.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.868465][ T6971] netlink: 'syz.3.1212': attribute type 4 has an invalid length. [ 90.912267][ T28] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.962250][ T28] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.010344][ T28] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.075087][ T28] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.147963][ T6994] loop1: detected capacity change from 0 to 256 [ 91.155202][ T6994] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff" or missing value [ 91.171128][ T28] bridge_slave_1: left allmulticast mode [ 91.177845][ T28] bridge_slave_1: left promiscuous mode [ 91.187593][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.199206][ T28] bridge_slave_0: left allmulticast mode [ 91.205296][ T28] bridge_slave_0: left promiscuous mode [ 91.212716][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.235392][ T6994] loop1: detected capacity change from 0 to 256 [ 91.282879][ T6994] loop1: detected capacity change from 0 to 512 [ 91.450194][ T6999] __nla_validate_parse: 1 callbacks suppressed [ 91.450212][ T6999] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1222'. [ 91.459090][ T7001] loop2: detected capacity change from 0 to 512 [ 91.502860][ T7001] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.568400][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.581102][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.582094][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 91.608820][ T28] bond0 (unregistering): Released all slaves [ 91.621218][ T28] bond1 (unregistering): Released all slaves [ 91.644946][ T6973] chnl_net:caif_netlink_parms(): no params data found [ 91.711842][ T7030] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 91.734454][ T28] hsr_slave_0: left promiscuous mode [ 91.749592][ T7033] loop3: detected capacity change from 0 to 1024 [ 91.757593][ T28] hsr_slave_1: left promiscuous mode [ 91.763995][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.765817][ T7036] loop1: detected capacity change from 0 to 512 [ 91.771886][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.783502][ T7034] hub 6-0:1.0: USB hub found [ 91.786555][ T7033] EXT4-fs: Ignoring removed nobh option [ 91.791527][ T7034] hub 6-0:1.0: 8 ports detected [ 91.798872][ T7033] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.816341][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.825718][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.837128][ T7033] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.1235: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 91.862792][ T28] veth1_macvtap: left promiscuous mode [ 91.862954][ T7033] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1235: couldn't read orphan inode 11 (err -117) [ 91.869430][ T28] veth0_macvtap: left promiscuous mode [ 91.889961][ T7036] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.891827][ T7033] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 91.992972][ T28] team0 (unregistering): Port device team_slave_1 removed [ 92.004499][ T28] team0 (unregistering): Port device team_slave_0 removed [ 92.059980][ T7048] loop3: detected capacity change from 0 to 512 [ 92.070761][ T7030] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 92.076249][ T7048] EXT4-fs (loop3): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 92.098168][ T7047] cgroup: subsys name conflicts with all [ 92.112603][ T7050] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 92.123299][ T6973] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.132714][ T6973] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.142438][ T6973] bridge_slave_0: entered allmulticast mode [ 92.150617][ T6973] bridge_slave_0: entered promiscuous mode [ 92.169882][ T6973] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.178756][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.209261][ T6973] bridge_slave_1: entered allmulticast mode [ 92.217592][ T6973] bridge_slave_1: entered promiscuous mode [ 92.245169][ T7060] loop3: detected capacity change from 0 to 2048 [ 92.253994][ T7062] loop2: detected capacity change from 0 to 512 [ 92.255282][ T6973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.273114][ T6973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.292254][ T7062] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.311158][ T6973] team0: Port device team_slave_0 added [ 92.334066][ T6973] team0: Port device team_slave_1 added [ 92.379893][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.388580][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.418920][ T6973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.447289][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.457850][ T6973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.466145][ T6973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.499370][ T6973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.601193][ T6973] hsr_slave_0: entered promiscuous mode [ 92.614605][ T6973] hsr_slave_1: entered promiscuous mode [ 92.628991][ T6973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.637361][ T6973] Cannot create hsr debugfs directory [ 92.643608][ T7073] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1248'. [ 92.661230][ T28] IPVS: stop unused estimator thread 0... [ 92.730181][ T7078] loop3: detected capacity change from 0 to 2048 [ 92.823852][ T7086] loop0: detected capacity change from 0 to 512 [ 92.834644][ T7086] EXT4-fs: Ignoring removed oldalloc option [ 92.847660][ T7086] EXT4-fs: Invalid want_extra_isize 132 [ 92.891136][ T29] audit: type=1400 audit(1720773808.425:720): avc: denied { write } for pid=7085 comm="syz.0.1253" path="socket:[20875]" dev="sockfs" ino=20875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.928011][ T7089] netlink: 'syz.3.1251': attribute type 13 has an invalid length. [ 92.938737][ T7089] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1251'. [ 92.979913][ T7089] syz_tun: refused to change device tx_queue_len [ 92.990343][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 93.016844][ T6973] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.030724][ T6973] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.058158][ T6973] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.070917][ T7098] loop1: detected capacity change from 0 to 512 [ 93.096919][ T6973] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.123124][ T7098] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.175083][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.191337][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.208581][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.216119][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.238750][ T7103] hub 6-0:1.0: USB hub found [ 93.244463][ T7103] hub 6-0:1.0: 8 ports detected [ 93.255200][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.264317][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.290698][ T6973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.393929][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.455454][ T7123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7123 comm=syz.1.1265 [ 93.478486][ T7124] loop0: detected capacity change from 0 to 512 [ 93.531260][ T7124] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.553741][ T7134] loop1: detected capacity change from 0 to 512 [ 93.588035][ T7134] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.713110][ T7146] loop0: detected capacity change from 0 to 512 [ 93.749300][ T7146] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.771612][ T6973] veth0_vlan: entered promiscuous mode [ 93.782203][ T7154] FAULT_INJECTION: forcing a failure. [ 93.782203][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 93.798052][ T7154] CPU: 1 PID: 7154 Comm: syz.1.1271 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 93.801153][ T6973] veth1_vlan: entered promiscuous mode [ 93.811936][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.811965][ T7154] Call Trace: [ 93.811975][ T7154] [ 93.837421][ T7154] dump_stack_lvl+0xf2/0x150 [ 93.843452][ T7154] dump_stack+0x15/0x20 [ 93.848994][ T7154] should_fail_ex+0x229/0x230 [ 93.854260][ T7154] ? __nf_conntrack_alloc+0xcd/0x280 [ 93.860812][ T7154] __should_failslab+0x92/0xa0 [ 93.866085][ T7154] should_failslab+0x9/0x20 [ 93.871096][ T7154] kmem_cache_alloc_noprof+0x4c/0x290 [ 93.877098][ T7154] __nf_conntrack_alloc+0xcd/0x280 [ 93.882299][ T7154] init_conntrack+0x191/0x970 [ 93.887128][ T7154] nf_conntrack_in+0x899/0xf20 [ 93.893216][ T7154] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 93.897729][ T6973] veth0_macvtap: entered promiscuous mode [ 93.898881][ T7154] ipv6_conntrack_in+0x1d/0x30 [ 93.910242][ T7154] nf_hook_slow+0x86/0x1b0 [ 93.915679][ T7154] ipv6_rcv+0x113/0x150 [ 93.919847][ T6973] veth1_macvtap: entered promiscuous mode [ 93.921535][ T7154] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 93.933745][ T7154] __netif_receive_skb+0xa2/0x280 [ 93.939925][ T7154] netif_receive_skb+0x4a/0x320 [ 93.945777][ T7154] ? virtio_net_hdr_to_skb+0x6e5/0xaf0 [ 93.952669][ T7154] ? tun_rx_batched+0xba/0x410 [ 93.955419][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.959441][ T7154] tun_rx_batched+0xf0/0x410 [ 93.959494][ T7154] tun_get_user+0x1dc6/0x23b0 [ 93.959535][ T7154] ? selinux_file_permission+0x22c/0x360 [ 93.973380][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.978045][ T7154] tun_chr_write_iter+0x18e/0x240 [ 93.978098][ T7154] vfs_write+0x78f/0x900 [ 93.978134][ T7154] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 93.978224][ T7154] ksys_write+0xeb/0x1b0 [ 93.978259][ T7154] __x64_sys_write+0x42/0x50 [ 93.983465][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.991283][ T7154] x64_sys_call+0x27ef/0x2d70 [ 94.004475][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.011133][ T7154] do_syscall_64+0xc9/0x1c0 [ 94.011181][ T7154] ? clear_bhb_loop+0x55/0xb0 [ 94.017651][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.028470][ T7154] ? clear_bhb_loop+0x55/0xb0 [ 94.028538][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.035518][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.044573][ T7154] RIP: 0033:0x7f7a7004d75f [ 94.044604][ T7154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 94.056875][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.065716][ T7154] RSP: 002b:00007f7a6f2d0010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 94.065749][ T7154] RAX: ffffffffffffffda RBX: 00007f7a701dcf60 RCX: 00007f7a7004d75f [ 94.080421][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.085905][ T7154] RDX: 000000000000013a RSI: 0000000020000040 RDI: 00000000000000c8 [ 94.085924][ T7154] RBP: 00007f7a6f2d00a0 R08: 0000000000000000 R09: 0000000000000000 [ 94.085939][ T7154] R10: 000000000000013a R11: 0000000000000293 R12: 0000000000000001 [ 94.091700][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.105080][ T7154] R13: 000000000000000b R14: 00007f7a701dcf60 R15: 00007ffde165bb78 [ 94.105112][ T7154] [ 94.264228][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.280950][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.307725][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.316050][ T29] audit: type=1400 audit(1720773809.845:721): avc: denied { unmount } for pid=5052 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 94.320635][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.351068][ T7156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1273'. [ 94.361333][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.387918][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.399572][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.413631][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.428600][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.448653][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.461655][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.472959][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.490125][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.506152][ T6973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519461][ T6973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.532403][ T6973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.541251][ T7169] loop3: detected capacity change from 0 to 512 [ 94.548697][ T6973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578513][ T7169] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.597066][ T7175] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 94.619398][ T7175] bond1: entered promiscuous mode [ 94.625066][ T7175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.634603][ T7174] netlink: 'syz.2.1275': attribute type 1 has an invalid length. [ 94.644829][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1279'. [ 94.653001][ T7171] batadv0: entered promiscuous mode [ 94.658222][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 94.667567][ T7171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.685286][ T7171] batadv0: left promiscuous mode [ 94.731560][ T7175] bond1: (slave bridge1): making interface the new active one [ 94.742116][ T7175] bridge1: entered promiscuous mode [ 94.755023][ T7175] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.890364][ T7206] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 95.939293][ T7213] loop0: detected capacity change from 0 to 512 [ 95.979437][ T7213] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.002070][ T7223] FAULT_INJECTION: forcing a failure. [ 96.002070][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 96.012109][ T7224] loop4: detected capacity change from 0 to 512 [ 96.018372][ T7223] CPU: 0 PID: 7223 Comm: syz.2.1292 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 96.033883][ T7224] EXT4-fs (loop4): Unsupported encryption level 9 [ 96.040741][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 96.040763][ T7223] Call Trace: [ 96.040772][ T7223] [ 96.040781][ T7223] dump_stack_lvl+0xf2/0x150 [ 96.040899][ T7223] dump_stack+0x15/0x20 [ 96.040934][ T7223] should_fail_ex+0x229/0x230 [ 96.040962][ T7223] ? selinux_sk_alloc_security+0x62/0x120 [ 96.041057][ T7223] __should_failslab+0x92/0xa0 [ 96.098907][ T7223] should_failslab+0x9/0x20 [ 96.103620][ T7223] kmalloc_trace_noprof+0x4b/0x2a0 [ 96.108998][ T7223] selinux_sk_alloc_security+0x62/0x120 [ 96.114699][ T7223] security_sk_alloc+0x4b/0x80 [ 96.120828][ T7223] sk_prot_alloc+0xc6/0x190 [ 96.125753][ T7223] sk_alloc+0x33/0x360 [ 96.131066][ T7223] ? inet_create+0x39e/0x740 [ 96.138065][ T7223] inet_create+0x3bd/0x740 [ 96.143028][ T7223] __sock_create+0x2db/0x4f0 [ 96.148295][ T7223] sock_create_kern+0x38/0x50 [ 96.153765][ T7223] udp_sock_create4+0x67/0x2a0 [ 96.161150][ T7223] rxrpc_lookup_local+0x835/0xca0 [ 96.168487][ T7223] rxrpc_sendmsg+0x344/0x520 [ 96.174135][ T7223] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 96.179872][ T7223] __sock_sendmsg+0x140/0x180 [ 96.187662][ T7223] ____sys_sendmsg+0x312/0x410 [ 96.194657][ T7223] __sys_sendmmsg+0x269/0x500 [ 96.202748][ T7223] __x64_sys_sendmmsg+0x57/0x70 [ 96.208830][ T7223] x64_sys_call+0xa87/0x2d70 [ 96.215381][ T7223] do_syscall_64+0xc9/0x1c0 [ 96.221817][ T7223] ? clear_bhb_loop+0x55/0xb0 [ 96.230388][ T7223] ? clear_bhb_loop+0x55/0xb0 [ 96.237742][ T7223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.244373][ T7223] RIP: 0033:0x7ff3365bebd9 [ 96.250896][ T7223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.276957][ T7223] RSP: 002b:00007ff335840048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.287147][ T7223] RAX: ffffffffffffffda RBX: 00007ff33674cf60 RCX: 00007ff3365bebd9 [ 96.298141][ T7223] RDX: 0000000000000001 RSI: 0000000020000180 RDI: 0000000000000005 [ 96.311206][ T7223] RBP: 00007ff3358400a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.326296][ T7223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.339894][ T7223] R13: 000000000000000b R14: 00007ff33674cf60 R15: 00007ffd263b9f88 [ 96.354053][ T7223] [ 96.372660][ T7226] loop3: detected capacity change from 0 to 512 [ 96.378753][ T7227] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.392933][ T7226] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 96.417176][ T7226] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 96.423682][ T7230] loop2: detected capacity change from 0 to 136 [ 96.433952][ T7226] System zones: 1-12 [ 96.440573][ T7230] iso9660: Bad value for 'gid' [ 96.453842][ T7226] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.462957][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 96.464627][ T7226] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.1294: Inode bitmap for bg 0 marked uninitialized [ 96.476584][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1293'. [ 96.504748][ T7226] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 5: comm syz.3.1294: lblock 0 mapped to illegal pblock 5 (length 1) [ 96.520437][ T7226] EXT4-fs warning (device loop3): dx_probe:822: inode #2: lblock 0: comm syz.3.1294: error -117 reading directory block [ 96.541781][ T7226] EXT4-fs error (device loop3): __ext4_remount:6503: comm syz.3.1294: Abort forced by user [ 96.556141][ T7226] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 96.570410][ T7226] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.1294: dx entry: limit 0 != root limit 125 [ 96.584311][ T7226] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1294: Corrupt directory, running e2fsck is recommended [ 96.617205][ T5223] EXT4-fs unmount: 58 callbacks suppressed [ 96.617227][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.691750][ T7235] hub 6-0:1.0: USB hub found [ 96.698830][ T7235] hub 6-0:1.0: 8 ports detected [ 97.044316][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1303'. [ 97.063192][ T29] audit: type=1400 audit(1720773812.595:722): avc: denied { read } for pid=7246 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.091556][ T7247] SELinux: Context system_u:object_r:sshd_exec_t:s0 is not valid (left unmapped). [ 97.098609][ T29] audit: type=1400 audit(1720773812.625:723): avc: denied { relabelfrom } for pid=7246 comm="syz.4.1303" name="AF_VSOCK" dev="sockfs" ino=20329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 97.132480][ T29] audit: type=1400 audit(1720773812.645:724): avc: denied { relabelto } for pid=7246 comm="syz.4.1303" name="AF_VSOCK" dev="sockfs" ino=20329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=vsock_socket permissive=1 trawcon="system_u:object_r:sshd_exec_t:s0" [ 97.173338][ T7252] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xe [ 97.201096][ T7253] netlink: 'syz.4.1305': attribute type 9 has an invalid length. [ 97.238610][ T7263] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1308'. [ 97.254802][ T7262] loop2: detected capacity change from 0 to 1024 [ 97.264655][ T7262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.279037][ T7262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.299577][ T7273] dccp_invalid_packet: P.Data Offset(100) too large [ 97.312841][ T5052] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.337877][ T7271] loop3: detected capacity change from 0 to 4096 [ 97.347257][ T7271] EXT4-fs: Ignoring removed nobh option [ 97.349551][ T7275] FAULT_INJECTION: forcing a failure. [ 97.349551][ T7275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.355625][ T7271] EXT4-fs: Ignoring removed i_version option [ 97.376531][ T7271] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.377270][ T7275] CPU: 1 PID: 7275 Comm: syz.4.1314 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 97.401601][ T7275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.411791][ T7275] Call Trace: [ 97.415096][ T7275] [ 97.418060][ T7275] dump_stack_lvl+0xf2/0x150 [ 97.422830][ T7275] dump_stack+0x15/0x20 [ 97.427115][ T7275] should_fail_ex+0x229/0x230 [ 97.433455][ T7275] should_fail+0xb/0x10 [ 97.437988][ T7275] should_fail_usercopy+0x1a/0x20 [ 97.444612][ T7275] _copy_from_user+0x1e/0xd0 [ 97.450910][ T7275] copy_msghdr_from_user+0x54/0x2a0 [ 97.457399][ T7275] do_recvmmsg+0x290/0x720 [ 97.463579][ T7275] __x64_sys_recvmmsg+0xe2/0x170 [ 97.470279][ T7275] x64_sys_call+0x271d/0x2d70 [ 97.475982][ T7275] do_syscall_64+0xc9/0x1c0 [ 97.480720][ T7275] ? clear_bhb_loop+0x55/0xb0 [ 97.485688][ T7275] ? clear_bhb_loop+0x55/0xb0 [ 97.490967][ T7275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.498816][ T7275] RIP: 0033:0x7fecc5bbbbd9 [ 97.503822][ T7275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.530929][ T7275] RSP: 002b:00007fecc4e3d048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 97.539786][ T7275] RAX: ffffffffffffffda RBX: 00007fecc5d49f60 RCX: 00007fecc5bbbbd9 [ 97.548123][ T7275] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 0000000000000003 [ 97.556108][ T7275] RBP: 00007fecc4e3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.564110][ T7275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.572091][ T7275] R13: 000000000000000b R14: 00007fecc5d49f60 R15: 00007ffdb0facf48 [ 97.580710][ T7275] [ 97.613362][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.654418][ T7290] netlink: 'syz.2.1318': attribute type 1 has an invalid length. [ 97.659400][ T7291] loop0: detected capacity change from 0 to 512 [ 97.669385][ T7281] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1316'. [ 97.680762][ T7281] netlink: 41 bytes leftover after parsing attributes in process `syz.4.1316'. [ 97.699057][ T7291] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #17: comm syz.0.1320: iget: bogus i_mode (0) [ 97.712294][ T7291] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.1320: couldn't read orphan inode 17 (err -117) [ 97.727448][ T7291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.768770][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.783263][ T29] audit: type=1400 audit(1720773813.315:725): avc: denied { write } for pid=7297 comm="syz.2.1322" path="socket:[20395]" dev="sockfs" ino=20395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 97.818454][ T7296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.830352][ T7296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.880476][ T7308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1326'. [ 97.991800][ T7319] hub 6-0:1.0: USB hub found [ 97.999580][ T7319] hub 6-0:1.0: 8 ports detected [ 98.098332][ T7320] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 98.158031][ T7301] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 98.165555][ T7301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.174907][ T7301] vhci_hcd vhci_hcd.0: Device attached [ 98.364845][ T7323] vhci_hcd: connection closed [ 98.365115][ T11] vhci_hcd: stop threads [ 98.369819][ T7330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1331'. [ 98.370263][ T11] vhci_hcd: release socket [ 98.374432][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1331'. [ 98.401441][ T11] vhci_hcd: disconnect device [ 98.407456][ T5354] vhci_hcd: vhci_device speed not set [ 98.437245][ T7332] hsr0: entered promiscuous mode [ 98.445276][ T7332] hsr0: left promiscuous mode [ 98.483324][ T7343] syz_tun: entered promiscuous mode [ 98.490830][ T7343] batadv_slave_1: entered promiscuous mode [ 98.521054][ T29] audit: type=1326 audit(1720773814.055:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7347 comm="syz.0.1338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63f58abd9 code=0x0 [ 98.626586][ T7366] FAULT_INJECTION: forcing a failure. [ 98.626586][ T7366] name failslab, interval 1, probability 0, space 0, times 0 [ 98.642342][ T7366] CPU: 1 PID: 7366 Comm: syz.0.1338 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 98.655390][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.666989][ T7366] Call Trace: [ 98.670698][ T7366] [ 98.674313][ T7366] dump_stack_lvl+0xf2/0x150 [ 98.679248][ T7366] dump_stack+0x15/0x20 [ 98.684061][ T7366] should_fail_ex+0x229/0x230 [ 98.689494][ T7366] ? skb_clone+0x154/0x1f0 [ 98.694892][ T7366] __should_failslab+0x92/0xa0 [ 98.700503][ T7366] should_failslab+0x9/0x20 [ 98.705636][ T7366] kmem_cache_alloc_noprof+0x4c/0x290 [ 98.711353][ T7366] skb_clone+0x154/0x1f0 [ 98.716342][ T7366] __netlink_deliver_tap+0x2bd/0x4c0 [ 98.721776][ T7366] netlink_unicast+0x63b/0x660 [ 98.727277][ T7366] netlink_sendmsg+0x5ca/0x6e0 [ 98.733193][ T7366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.739409][ T7366] __sock_sendmsg+0x140/0x180 [ 98.744615][ T7366] ____sys_sendmsg+0x312/0x410 [ 98.749712][ T7366] __sys_sendmsg+0x1e9/0x280 [ 98.754435][ T7366] __x64_sys_sendmsg+0x46/0x50 [ 98.759351][ T7366] x64_sys_call+0xb25/0x2d70 [ 98.765060][ T7366] do_syscall_64+0xc9/0x1c0 [ 98.769780][ T7366] ? clear_bhb_loop+0x55/0xb0 [ 98.779872][ T7366] ? clear_bhb_loop+0x55/0xb0 [ 98.785661][ T7366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.796740][ T7366] RIP: 0033:0x7ff63f58abd9 [ 98.802376][ T7366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.829531][ T7366] RSP: 002b:00007ff63e7eb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.840721][ T7366] RAX: ffffffffffffffda RBX: 00007ff63f719038 RCX: 00007ff63f58abd9 [ 98.855081][ T7366] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 98.866135][ T7366] RBP: 00007ff63e7eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.875302][ T7366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.884297][ T7366] R13: 000000000000006e R14: 00007ff63f719038 R15: 00007ffcd2179948 [ 98.893408][ T7366] [ 98.956517][ T7379] loop1: detected capacity change from 0 to 256 [ 99.137993][ T29] audit: type=1400 audit(1720773814.675:727): avc: denied { accept } for pid=7387 comm="syz.4.1350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.301546][ T7401] loop1: detected capacity change from 0 to 512 [ 99.317592][ T7401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.333080][ T7401] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.365156][ T7406] hub 6-0:1.0: USB hub found [ 99.374330][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.382064][ T7406] hub 6-0:1.0: 8 ports detected [ 99.430639][ T7414] loop3: detected capacity change from 0 to 2048 [ 99.435835][ T7417] loop1: detected capacity change from 0 to 512 [ 99.447570][ T7414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.548425][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.630590][ T7428] loop3: detected capacity change from 0 to 1024 [ 99.646609][ T7428] EXT4-fs: Ignoring removed nobh option [ 99.662187][ T7428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.747409][ T29] audit: type=1400 audit(1720773815.285:728): avc: denied { unlink } for pid=5223 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 99.772574][ T5223] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.838602][ T7432] loop3: detected capacity change from 0 to 256 [ 99.885159][ T5223] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 99.898811][ T5223] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 99.962540][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.053484][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.109346][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.208433][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.264914][ T29] audit: type=1400 audit(1720773815.795:729): avc: denied { setattr } for pid=7447 comm="syz.4.1371" name="CAN_RAW" dev="sockfs" ino=21676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.304556][ T29] audit: type=1400 audit(1720773815.825:730): avc: denied { accept } for pid=7447 comm="syz.4.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.351387][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 100.401005][ T50] bridge_slave_1: left allmulticast mode [ 100.408141][ T50] bridge_slave_1: left promiscuous mode [ 100.414807][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.432181][ T7465] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 100.444328][ T50] bridge_slave_0: left allmulticast mode [ 100.450808][ T50] bridge_slave_0: left promiscuous mode [ 100.456632][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.560157][ T7469] hub 6-0:1.0: USB hub found [ 100.579476][ T7469] hub 6-0:1.0: 8 ports detected [ 100.698972][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.718093][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.740341][ T50] bond0 (unregistering): Released all slaves [ 100.761199][ T50] bond1 (unregistering): Released all slaves [ 100.821699][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.833050][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.845964][ T7434] bridge_slave_0: entered allmulticast mode [ 100.858390][ T7434] bridge_slave_0: entered promiscuous mode [ 100.867837][ T50] tipc: Left network mode [ 100.867891][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.884205][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.894632][ T7434] bridge_slave_1: entered allmulticast mode [ 100.904314][ T7434] bridge_slave_1: entered promiscuous mode [ 100.932744][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.943477][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.957900][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.969077][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.980272][ T50] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 100.989258][ T50] batman_adv: batadv0: Removing interface: ipvlan2 [ 101.002183][ T50] veth1_macvtap: left promiscuous mode [ 101.009809][ T50] veth0_macvtap: left promiscuous mode [ 101.019914][ T50] veth1_vlan: left promiscuous mode [ 101.026630][ T50] veth0_vlan: left promiscuous mode [ 101.205508][ T50] team0 (unregistering): Port device team_slave_1 removed [ 101.222509][ T50] team0 (unregistering): Port device team_slave_0 removed [ 101.301980][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.331513][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.380462][ T7434] team0: Port device team_slave_0 added [ 101.383352][ T3168] IPVS: starting estimator thread 0... [ 101.390724][ T7434] team0: Port device team_slave_1 added [ 101.419795][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.428233][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.472473][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.497269][ T7483] IPVS: using max 2160 ests per chain, 108000 per kthread [ 101.502104][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.523485][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.539471][ T7490] loop4: detected capacity change from 0 to 128 [ 101.564834][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.590194][ T7486] loop0: detected capacity change from 0 to 2048 [ 101.616785][ T7434] hsr_slave_0: entered promiscuous mode [ 101.626479][ T7486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.647794][ T7434] hsr_slave_1: entered promiscuous mode [ 101.656905][ T7434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.668937][ T7434] Cannot create hsr debugfs directory [ 101.802942][ T7506] loop4: detected capacity change from 0 to 512 [ 101.813821][ T7506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.863723][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.898363][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.990992][ T29] audit: type=1326 audit(1720773817.525:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7514 comm="syz.4.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fecc5bbbbd9 code=0x0 [ 102.104259][ T7517] loop4: detected capacity change from 0 to 2048 [ 102.128097][ T7434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.145285][ T7517] Alternate GPT is invalid, using primary GPT. [ 102.156637][ T7517] loop4: p1 p2 p3 [ 102.166036][ T7434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.186354][ T7434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.196395][ T7434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.262674][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.278885][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.293944][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.302634][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.328343][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.338812][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.364416][ T7434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.444932][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.492170][ T7544] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 102.566225][ T7434] veth0_vlan: entered promiscuous mode [ 102.582673][ T7434] veth1_vlan: entered promiscuous mode [ 102.609132][ T7434] veth0_macvtap: entered promiscuous mode [ 102.622715][ T7434] veth1_macvtap: entered promiscuous mode [ 102.656308][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.670835][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.684000][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.699151][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.712649][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.724783][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.736341][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.748413][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.760086][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.772506][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.790581][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.805957][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.811075][ T7561] loop0: detected capacity change from 0 to 2048 [ 102.818447][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.818471][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.846505][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.856829][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.868513][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.878604][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.889874][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.902084][ T7434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.914326][ T7434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.928609][ T7434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.948700][ T7434] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.957826][ T7434] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.965838][ T7566] loop1: detected capacity change from 0 to 2048 [ 102.967688][ T7434] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.975349][ T7566] EXT4-fs: Ignoring removed nobh option [ 102.984688][ T7434] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.007442][ T7566] EXT4-fs (loop1): can't mount with commit=127, fs mounted w/o journal [ 103.129358][ T7589] loop3: detected capacity change from 0 to 512 [ 103.154160][ T7588] loop0: detected capacity change from 0 to 512 [ 103.169493][ T7589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.186439][ T7588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.195889][ T7589] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.201544][ T7588] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.227422][ T7434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.228596][ T7588] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 103.251101][ T7588] __nla_validate_parse: 9 callbacks suppressed [ 103.251116][ T7588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1412'. [ 103.272695][ T7600] hub 6-0:1.0: USB hub found [ 103.277774][ T7600] hub 6-0:1.0: 8 ports detected [ 103.282194][ T7588] team0: Port device geneve1 added [ 103.305296][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.393086][ T7608] loop0: detected capacity change from 0 to 512 [ 103.407910][ T7608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.423740][ T7608] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.438213][ T29] audit: type=1400 audit(1720773818.975:732): avc: granted { setsecparam } for pid=7602 comm="syz.3.1415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 103.448805][ T7608] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.1417: corrupted inode contents [ 103.474995][ T7608] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz.0.1417: mark_inode_dirty error [ 103.488414][ T7608] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz.0.1417: corrupted inode contents [ 103.488539][ T29] audit: type=1326 audit(1720773819.025:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7602 comm="syz.3.1415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd36ea93bd9 code=0x0 [ 103.506459][ T7608] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.1417: mark_inode_dirty error [ 103.549730][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.619111][ T29] audit: type=1400 audit(1720773819.155:734): avc: denied { getopt } for pid=7613 comm="syz.0.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.754602][ T7621] loop0: detected capacity change from 0 to 128 [ 103.767501][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 103.779858][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1421'. [ 103.793775][ T7621] geneve2: entered promiscuous mode [ 103.800546][ T7621] geneve2: entered allmulticast mode [ 103.811295][ T7621] netlink: 'syz.0.1421': attribute type 5 has an invalid length. [ 103.918758][ T7629] loop0: detected capacity change from 0 to 512 [ 103.938373][ T7629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.952484][ T7629] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.974439][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.013842][ T7637] usb usb7: usbfs: process 7637 (syz.1.1429) did not claim interface 0 before use [ 104.060043][ T7646] sctp: [Deprecated]: syz.4.1433 (pid 7646) Use of int in maxseg socket option. [ 104.060043][ T7646] Use struct sctp_assoc_value instead [ 104.124334][ T29] audit: type=1400 audit(1720773819.655:735): avc: denied { append } for pid=7652 comm="syz.4.1434" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.177133][ T7653] loop4: detected capacity change from 0 to 4096 [ 104.185120][ T7653] EXT4-fs: Ignoring removed nobh option [ 104.196357][ T7665] loop3: detected capacity change from 0 to 512 [ 104.199143][ T7653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.228101][ T7665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.243651][ T7665] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.256841][ T7653] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 104.274087][ T7434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.295796][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.318157][ T7675] hub 6-0:1.0: USB hub found [ 104.324791][ T7675] hub 6-0:1.0: 8 ports detected [ 104.400278][ T29] audit: type=1400 audit(1720773819.935:736): avc: denied { setopt } for pid=7680 comm="syz.0.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.513908][ T7688] FAULT_INJECTION: forcing a failure. [ 104.513908][ T7688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.532881][ T7688] CPU: 1 PID: 7688 Comm: syz.4.1442 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 104.546070][ T7688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.557061][ T7688] Call Trace: [ 104.561853][ T7688] [ 104.565620][ T7688] dump_stack_lvl+0xf2/0x150 [ 104.571340][ T7688] dump_stack+0x15/0x20 [ 104.576574][ T7688] should_fail_ex+0x229/0x230 [ 104.582296][ T7688] should_fail+0xb/0x10 [ 104.587199][ T7688] should_fail_usercopy+0x1a/0x20 [ 104.593730][ T7688] _copy_from_user+0x1e/0xd0 [ 104.599272][ T7688] io_copy_iov+0x71/0x130 [ 104.604107][ T7688] io_sqe_buffers_register+0x162/0x3a0 [ 104.612972][ T7688] __se_sys_io_uring_register+0xa15/0x1190 [ 104.620966][ T7688] __x64_sys_io_uring_register+0x55/0x70 [ 104.627444][ T7692] loop3: detected capacity change from 0 to 2048 [ 104.628898][ T7688] x64_sys_call+0x2c2/0x2d70 [ 104.644353][ T7688] do_syscall_64+0xc9/0x1c0 [ 104.649860][ T7688] ? clear_bhb_loop+0x55/0xb0 [ 104.655099][ T7688] ? clear_bhb_loop+0x55/0xb0 [ 104.660396][ T7688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.666638][ T7688] RIP: 0033:0x7fecc5bbbbd9 [ 104.672444][ T7688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.694681][ T7688] RSP: 002b:00007fecc4e3d048 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 104.704167][ T7688] RAX: ffffffffffffffda RBX: 00007fecc5d49f60 RCX: 00007fecc5bbbbd9 [ 104.712313][ T7688] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000004 [ 104.720389][ T7688] RBP: 00007fecc4e3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.728542][ T7688] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 104.736562][ T7688] R13: 000000000000000b R14: 00007fecc5d49f60 R15: 00007ffdb0facf48 [ 104.744655][ T7688] [ 104.758754][ T7692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.826917][ T7702] FAULT_INJECTION: forcing a failure. [ 104.826917][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.841500][ T7702] CPU: 0 PID: 7702 Comm: syz.4.1447 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 104.854393][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.865875][ T7702] Call Trace: [ 104.869779][ T7702] [ 104.874251][ T7702] dump_stack_lvl+0xf2/0x150 [ 104.879995][ T7702] dump_stack+0x15/0x20 [ 104.884947][ T7702] should_fail_ex+0x229/0x230 [ 104.890967][ T7702] should_fail+0xb/0x10 [ 104.895524][ T7702] should_fail_usercopy+0x1a/0x20 [ 104.901459][ T7702] _copy_from_iter+0xd3/0xb00 [ 104.906933][ T7702] ? kmalloc_reserve+0x16e/0x190 [ 104.912032][ T7702] ? __build_skb_around+0x196/0x1f0 [ 104.917553][ T7702] ? __alloc_skb+0x217/0x300 [ 104.922525][ T7702] ? __virt_addr_valid+0x1ed/0x250 [ 104.928035][ T7702] ? __check_object_size+0x35b/0x510 [ 104.933567][ T7702] netlink_sendmsg+0x460/0x6e0 [ 104.939065][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.945724][ T7702] __sock_sendmsg+0x140/0x180 [ 104.950543][ T7702] sock_write_iter+0x164/0x1b0 [ 104.955392][ T7702] vfs_write+0x78f/0x900 [ 104.959867][ T7702] ? __pfx_sock_write_iter+0x10/0x10 [ 104.965738][ T7702] ksys_write+0xeb/0x1b0 [ 104.970376][ T7702] __x64_sys_write+0x42/0x50 [ 104.975448][ T7702] x64_sys_call+0x27ef/0x2d70 [ 104.980288][ T7702] do_syscall_64+0xc9/0x1c0 [ 104.985545][ T7702] ? clear_bhb_loop+0x55/0xb0 [ 104.991014][ T7702] ? clear_bhb_loop+0x55/0xb0 [ 104.997160][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.003748][ T7702] RIP: 0033:0x7fecc5bbbbd9 [ 105.008438][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.031332][ T7702] RSP: 002b:00007fecc4e3d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.041297][ T7702] RAX: ffffffffffffffda RBX: 00007fecc5d49f60 RCX: 00007fecc5bbbbd9 [ 105.052551][ T7702] RDX: 0000000000000027 RSI: 0000000020005c00 RDI: 0000000000000004 [ 105.064132][ T7702] RBP: 00007fecc4e3d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.073005][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.081989][ T7702] R13: 000000000000000b R14: 00007fecc5d49f60 R15: 00007ffdb0facf48 [ 105.091663][ T7702] [ 105.100767][ T7434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.116214][ T7704] loop1: detected capacity change from 0 to 512 [ 105.128242][ T7704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.144468][ T7704] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.164722][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.192762][ T7712] loop3: detected capacity change from 0 to 512 [ 105.200409][ T7712] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 105.229297][ T7714] loop1: detected capacity change from 0 to 512 [ 105.236602][ T7714] journal_path: Lookup failure for './file1' [ 105.242711][ T7714] EXT4-fs: error: could not find journal device path [ 105.257572][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 105.267471][ T7716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.274872][ T7716] IPv6: NLM_F_CREATE should be set when creating new route [ 105.336209][ T7729] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 105.376805][ T7729] team0: Port device netdevsim1 added [ 105.378750][ T7730] loop4: detected capacity change from 0 to 2048 [ 105.388617][ T7729] netlink: 'syz.3.1448': attribute type 10 has an invalid length. [ 105.412527][ T7730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.425885][ T7729] team0: Port device netdevsim1 removed [ 105.436542][ T7729] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 105.448368][ T7737] hub 6-0:1.0: USB hub found [ 105.455806][ T7737] hub 6-0:1.0: 8 ports detected [ 105.471608][ T29] audit: type=1400 audit(1720773821.005:737): avc: denied { map } for pid=7709 comm="syz.3.1448" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 105.497235][ T29] audit: type=1400 audit(1720773821.005:738): avc: denied { execute } for pid=7709 comm="syz.3.1448" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 105.565228][ T7740] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1460'. [ 105.579494][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.607730][ T7744] loop0: detected capacity change from 0 to 2048 [ 105.614432][ T7744] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.638079][ T7744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.659004][ T7751] loop4: detected capacity change from 0 to 512 [ 105.666438][ T7751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 105.679485][ T7751] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 105.694645][ T7751] EXT4-fs (loop4): 1 truncate cleaned up [ 105.702264][ T7751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.721468][ T7745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1462: bg 0: block 234: padding at end of block bitmap is not set [ 105.737466][ T7745] EXT4-fs (loop0): Remounting filesystem read-only [ 105.752204][ T7744] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.762482][ T7744] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 105.771641][ T7745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.782006][ T7745] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 105.807146][ T7744] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 105.817044][ T7744] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 105.817069][ T7745] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 105.828233][ T7744] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 105.848125][ T29] audit: type=1400 audit(1720773821.385:739): avc: denied { mounton } for pid=7743 comm="syz.0.1462" path="/81/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.854661][ T7745] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 105.932274][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.941568][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.950615][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.961302][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.972304][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.985483][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 105.986723][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.002632][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=11 [ 106.022082][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.036299][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.049683][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.060095][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.072333][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.084454][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.094008][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 106.107725][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.119184][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=13 [ 106.130357][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.141453][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.151044][ T6529] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 106.230134][ T7765] loop1: detected capacity change from 0 to 512 [ 106.239927][ T7765] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 106.357501][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1467'. [ 106.368135][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 106.461168][ T7778] FAULT_INJECTION: forcing a failure. [ 106.461168][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 106.474458][ T7778] CPU: 1 PID: 7778 Comm: syz.1.1471 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 106.485183][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 106.495532][ T7778] Call Trace: [ 106.499037][ T7778] [ 106.502733][ T7778] dump_stack_lvl+0xf2/0x150 [ 106.508618][ T7778] dump_stack+0x15/0x20 [ 106.513912][ T7778] should_fail_ex+0x229/0x230 [ 106.519285][ T7778] ? __alloc_skb+0x10b/0x300 [ 106.524450][ T7778] __should_failslab+0x92/0xa0 [ 106.531167][ T7778] should_failslab+0x9/0x20 [ 106.537375][ T7778] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 106.546022][ T7778] __alloc_skb+0x10b/0x300 [ 106.552552][ T7778] netlink_alloc_large_skb+0xad/0xe0 [ 106.559426][ T7778] netlink_sendmsg+0x3b4/0x6e0 [ 106.565596][ T7778] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.573056][ T7778] __sock_sendmsg+0x140/0x180 [ 106.578580][ T7778] ____sys_sendmsg+0x312/0x410 [ 106.585765][ T7778] __sys_sendmsg+0x1e9/0x280 [ 106.590703][ T7778] __x64_sys_sendmsg+0x46/0x50 [ 106.595680][ T7778] x64_sys_call+0xb25/0x2d70 [ 106.600390][ T7778] do_syscall_64+0xc9/0x1c0 [ 106.605439][ T7778] ? clear_bhb_loop+0x55/0xb0 [ 106.610166][ T7778] ? clear_bhb_loop+0x55/0xb0 [ 106.615303][ T7778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.623332][ T7778] RIP: 0033:0x7f7a7004ebd9 [ 106.628557][ T7778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.653803][ T7778] RSP: 002b:00007f7a6f2d0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.663464][ T7778] RAX: ffffffffffffffda RBX: 00007f7a701dcf60 RCX: 00007f7a7004ebd9 [ 106.672067][ T7778] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 106.681090][ T7778] RBP: 00007f7a6f2d00a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.690320][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.699538][ T7778] R13: 000000000000000b R14: 00007f7a701dcf60 R15: 00007ffde165bb78 [ 106.709232][ T7778] [ 106.803648][ T3183] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.810481][ T6529] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.852538][ T3183] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.900239][ T3183] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.921353][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1479'. [ 106.951842][ T3183] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.978581][ T7801] hub 6-0:1.0: USB hub found [ 106.984112][ T7801] hub 6-0:1.0: 8 ports detected [ 107.095692][ T3183] bridge_slave_1: left allmulticast mode [ 107.105028][ T3183] bridge_slave_1: left promiscuous mode [ 107.112099][ T3183] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.124124][ T3183] bridge_slave_0: left allmulticast mode [ 107.132614][ T3183] bridge_slave_0: left promiscuous mode [ 107.141306][ T3183] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.185825][ T7822] loop4: detected capacity change from 0 to 2048 [ 107.208369][ T7822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.221203][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1489'. [ 107.250125][ T3183] team0: Port device geneve1 removed [ 107.270035][ T3183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.282328][ T3183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.293333][ T3183] bond0 (unregistering): Released all slaves [ 107.310190][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.346734][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 107.377347][ T3183] hsr_slave_0: left promiscuous mode [ 107.383576][ T3183] hsr_slave_1: left promiscuous mode [ 107.385424][ T3183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.397452][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.406169][ T3183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.413911][ T3183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.426096][ T3183] veth1_macvtap: left promiscuous mode [ 107.432656][ T3183] veth0_macvtap: left promiscuous mode [ 107.438598][ T3183] veth1_vlan: left promiscuous mode [ 107.444479][ T3183] veth0_vlan: left promiscuous mode [ 107.545121][ T3183] team0 (unregistering): Port device team_slave_1 removed [ 107.558092][ T3183] team0 (unregistering): Port device team_slave_0 removed [ 107.624140][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.631314][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.643762][ T7793] bridge_slave_0: entered allmulticast mode [ 107.651371][ T7793] bridge_slave_0: entered promiscuous mode [ 107.658629][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.665840][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.673335][ T7793] bridge_slave_1: entered allmulticast mode [ 107.680056][ T7793] bridge_slave_1: entered promiscuous mode [ 107.699280][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.753425][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.787878][ T7793] team0: Port device team_slave_0 added [ 107.798853][ T7793] team0: Port device team_slave_1 added [ 107.801599][ T7864] loop1: detected capacity change from 0 to 1764 [ 107.813905][ T7864] iso9660: Bad value for 'sbsector' [ 107.830267][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.837836][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.866272][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.879145][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.887622][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.915623][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.927434][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1498'. [ 107.957746][ T3183] IPVS: stop unused estimator thread 0... [ 107.983893][ T7793] hsr_slave_0: entered promiscuous mode [ 107.997683][ T7793] hsr_slave_1: entered promiscuous mode [ 108.103422][ T7876] loop4: detected capacity change from 0 to 2048 [ 108.148144][ T7876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.241795][ T7886] loop1: detected capacity change from 0 to 2048 [ 108.320803][ T7891] loop7: detected capacity change from 0 to 16384 [ 108.333586][ T29] audit: type=1400 audit(1720773823.845:740): avc: denied { watch watch_reads } for pid=7875 comm="syz.4.1502" path="/61/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.364511][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.381050][ T7886] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.394289][ T7886] EXT4-fs (loop1): shut down requested (2) [ 108.580375][ T7870] chnl_net:caif_netlink_parms(): no params data found [ 108.602752][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.637484][ T7870] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.644752][ T7870] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.652918][ T7870] bridge_slave_0: entered allmulticast mode [ 108.659839][ T7870] bridge_slave_0: entered promiscuous mode [ 108.671245][ T7870] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.678643][ T7870] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.686064][ T7870] bridge_slave_1: entered allmulticast mode [ 108.692731][ T7870] bridge_slave_1: entered promiscuous mode [ 108.739496][ T7793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.757492][ T7870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.768677][ T7870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.777956][ T7793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.785400][ T29] audit: type=1400 audit(1720773824.315:741): avc: denied { lock } for pid=7915 comm="syz.4.1507" path="socket:[23979]" dev="sockfs" ino=23979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 108.813228][ T7793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.825242][ T7793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.894545][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.927481][ T7870] team0: Port device team_slave_0 added [ 108.936802][ T7870] team0: Port device team_slave_1 added [ 108.978234][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.985283][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.011563][ T7870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.023946][ T7870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.031356][ T7870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.058292][ T7870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.079431][ T7930] bridge: RTM_NEWNEIGH with invalid state 0x6800 [ 109.120634][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.128704][ T7934] __nla_validate_parse: 1 callbacks suppressed [ 109.128719][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 109.146481][ T7870] hsr_slave_0: entered promiscuous mode [ 109.153005][ T7870] hsr_slave_1: entered promiscuous mode [ 109.162229][ T7870] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.170167][ T7870] Cannot create hsr debugfs directory [ 109.182463][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.207807][ T3168] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.215399][ T3168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.261397][ T7955] vlan2: entered promiscuous mode [ 109.265673][ T29] audit: type=1400 audit(1720773824.795:742): avc: denied { ioctl } for pid=7937 comm="syz.3.1516" path="socket:[24762]" dev="sockfs" ino=24762 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 109.306621][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.313781][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.325652][ T7961] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 109.428311][ T7870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.498056][ T7870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.500500][ T29] audit: type=1400 audit(1720773825.035:743): avc: denied { create } for pid=7977 comm="syz.1.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 109.535411][ T29] audit: type=1400 audit(1720773825.075:744): avc: denied { bind } for pid=7977 comm="syz.1.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 109.547145][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.578531][ T29] audit: type=1400 audit(1720773825.115:745): avc: denied { module_request } for pid=7793 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.619428][ T7870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.645087][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 109.668805][ T7993] dccp_invalid_packet: P.Data Offset(100) too large [ 109.678147][ T7991] loop4: detected capacity change from 0 to 512 [ 109.704265][ T7870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.717031][ T7991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.740224][ T7991] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.752029][ T7793] veth0_vlan: entered promiscuous mode [ 109.761828][ T7793] veth1_vlan: entered promiscuous mode [ 109.797443][ T29] audit: type=1400 audit(1720773825.325:746): avc: denied { tracepoint } for pid=7990 comm="syz.4.1530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 109.839997][ T7870] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.851542][ T7870] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.868950][ T7870] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.880667][ T7870] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.906964][ T7793] veth0_macvtap: entered promiscuous mode [ 109.934771][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1530'. [ 109.944550][ T7793] veth1_macvtap: entered promiscuous mode [ 109.955477][ T7870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.002563][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.013165][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.023112][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.033695][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.043714][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.054559][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.064506][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.075026][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.085271][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.096082][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.099663][ T8021] loop3: detected capacity change from 0 to 512 [ 110.118786][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.129603][ T7870] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.136871][ T8021] EXT4-fs (loop3): 1 truncate cleaned up [ 110.143601][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.154512][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.164445][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.174923][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.185291][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.196329][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.206652][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.208114][ T8021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.217328][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.240101][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.250585][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.254725][ T8021] ebt_limit: overflow, try lower: 570423552/2483027968 [ 110.266277][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.280618][ T7793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.289484][ T7793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.298366][ T7793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.307369][ T7793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.318334][ T7434] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.331443][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.338860][ T5354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.355795][ T29] audit: type=1400 audit(1720773825.885:747): avc: denied { write } for pid=8033 comm="syz.1.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.356491][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.378288][ T8034] loop1: detected capacity change from 0 to 128 [ 110.382416][ T5354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.399167][ T8034] openvswitch: netlink: VXLAN extension 15664 out of range max 1 [ 110.438775][ T8037] loop3: detected capacity change from 0 to 128 [ 110.458949][ T8037] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 110.477856][ T29] audit: type=1400 audit(1720773826.015:748): avc: denied { write } for pid=8035 comm="syz.3.1537" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 110.481592][ T8044] xt_socket: unknown flags 0x50 [ 110.520276][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.532485][ T29] audit: type=1400 audit(1720773826.045:749): avc: denied { write } for pid=8035 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 110.532916][ T7870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.551958][ T29] audit: type=1400 audit(1720773826.045:750): avc: denied { connect } for pid=8035 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.559697][ T8044] xt_socket: unknown flags 0x50 [ 110.588227][ T8044] xt_socket: unknown flags 0x50 [ 110.593988][ T8044] xt_socket: unknown flags 0x50 [ 110.634780][ T8054] pim6reg: entered allmulticast mode [ 110.641712][ T8053] loop4: detected capacity change from 0 to 1024 [ 110.654971][ T8054] pim6reg: left allmulticast mode [ 110.656269][ T8053] ext4: Unknown parameter 'uid' [ 110.707902][ T8064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26640 sclass=netlink_route_socket pid=8064 comm=syz.0.1544 [ 110.740040][ T8069] loop3: detected capacity change from 0 to 256 [ 110.769638][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.786552][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.797905][ T8075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8075 comm=syz.1.1548 [ 110.806948][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.824332][ T7870] veth0_vlan: entered promiscuous mode [ 110.826692][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.853804][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.857092][ T7870] veth1_vlan: entered promiscuous mode [ 110.882013][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.906755][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.942992][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.963892][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 111.017614][ T8069] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 111.084491][ T7870] veth0_macvtap: entered promiscuous mode [ 111.094227][ T7870] veth1_macvtap: entered promiscuous mode [ 111.107462][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.119558][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.131061][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.142196][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.153494][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.165021][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.175938][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.187191][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.197298][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.207884][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.217740][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.228772][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.297613][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.346664][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.357205][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.369145][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.380087][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.390045][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.400587][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.410486][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.421277][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.431162][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.441821][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.452437][ T7870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.463230][ T7870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.475398][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1552'. [ 111.506593][ T7870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.555137][ T7870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.564378][ T7870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.574445][ T7870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.585217][ T7870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.615059][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 111.625127][ T8099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1555'. [ 111.706829][ T8102] loop0: detected capacity change from 0 to 1024 [ 111.752744][ T8115] loop2: detected capacity change from 0 to 2048 [ 111.770863][ T8115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.783774][ T8127] netlink: 'syz.4.1564': attribute type 3 has an invalid length. [ 111.878073][ T7870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.929345][ T8145] loop1: detected capacity change from 0 to 128 [ 112.013770][ T8155] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1574'. [ 112.039479][ T8159] loop2: detected capacity change from 0 to 128 [ 112.047679][ T8159] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 112.091309][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 112.139371][ T8170] loop1: detected capacity change from 0 to 512 [ 112.157849][ T8170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.171001][ T8170] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.185220][ T8170] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1580: corrupted inode contents [ 112.200038][ T8170] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz.1.1580: mark_inode_dirty error [ 112.212904][ T8170] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz.1.1580: corrupted inode contents [ 112.225520][ T8170] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.1580: mark_inode_dirty error [ 112.255754][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.272377][ T8179] sch_tbf: burst 65535 is lower than device lo mtu (65550) ! [ 112.314812][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=8183 comm=syz.1.1582 [ 112.346423][ T8193] Cannot find add_set index 0 as target [ 112.353507][ T8191] netem: change failed [ 112.441052][ T8202] loop2: detected capacity change from 0 to 1024 [ 112.450877][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.474554][ T7870] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.517171][ T8210] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1594'. [ 112.562439][ T8218] netlink: 'syz.1.1596': attribute type 5 has an invalid length. [ 112.640391][ T8229] dccp_invalid_packet: P.Data Offset(100) too large [ 112.651474][ T8223] loop1: detected capacity change from 0 to 512 [ 112.662586][ T8223] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.666287][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 112.671492][ T8223] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz.1.1598: corrupted in-inode xattr: invalid ea_ino [ 112.703803][ T8223] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.1598: couldn't read orphan inode 12 (err -117) [ 112.718903][ T8223] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.742738][ T5844] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 112.762241][ T8239] loop4: detected capacity change from 0 to 2048 [ 112.777494][ T8239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.834243][ T8246] loop1: detected capacity change from 0 to 2048 [ 112.868849][ T8246] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.901250][ T6973] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.974727][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.997532][ T8253] loop4: detected capacity change from 0 to 512 [ 113.004748][ T8253] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 113.017315][ T8253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 113.025368][ T8253] System zones: 1-12 [ 113.034998][ T8253] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.043075][ T8253] EXT4-fs error (device loop4): ext4_read_inode_bitmap:168: comm syz.4.1609: Inode bitmap for bg 0 marked uninitialized [ 113.058282][ T8253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 113.078336][ T8262] syzkaller0: entered promiscuous mode [ 113.083902][ T8262] syzkaller0: entered allmulticast mode [ 113.090828][ T8253] EXT4-fs error (device loop4): __ext4_remount:6503: comm syz.4.1609: Abort forced by user [ 113.101793][ T8253] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 113.112200][ T8253] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.1609: dx entry: limit 0 != root limit 125 [ 113.124127][ T8253] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1609: Corrupt directory, running e2fsck is recommended [ 113.151482][ T8267] loop1: detected capacity change from 0 to 512 [ 113.265373][ T8270] EXT4-fs warning (device loop4): dx_probe:892: inode #2: comm syz.4.1609: dx entry: limit 0 != root limit 125 [ 113.279018][ T8270] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz.4.1609: Corrupt directory, running e2fsck is recommended [ 113.353969][ T8273] loop1: detected capacity change from 0 to 512 [ 113.368262][ T8273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.381139][ T8273] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.485670][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.553075][ T8283] loop1: detected capacity change from 0 to 2048 [ 113.574521][ T8283] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.594348][ T8283] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 9 with error 28 [ 113.609856][ T8283] EXT4-fs (loop1): This should not happen!! Data will be lost [ 113.609856][ T8283] [ 113.621304][ T8283] EXT4-fs (loop1): Total free blocks count 0 [ 113.627864][ T8283] EXT4-fs (loop1): Free/Dirty block details [ 113.634517][ T8283] EXT4-fs (loop1): free_blocks=2415919104 [ 113.640656][ T8283] EXT4-fs (loop1): dirty_blocks=16 [ 113.647954][ T8283] EXT4-fs (loop1): Block reservation details [ 113.654918][ T8283] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 113.674509][ T8287] netlink: 'syz.2.1620': attribute type 4 has an invalid length. [ 113.743932][ T8291] loop2: detected capacity change from 0 to 2048 [ 113.785516][ T8293] lo: entered promiscuous mode [ 113.793962][ T8293] lo: entered allmulticast mode [ 113.859218][ T8295] loop1: detected capacity change from 0 to 2048 [ 113.970060][ T8319] loop4: detected capacity change from 0 to 2048 [ 114.061746][ T8342] loop1: detected capacity change from 0 to 512 [ 114.068777][ T8342] EXT4-fs: Invalid gid value -1 [ 114.147882][ T8353] netlink: 'syz.4.1640': attribute type 29 has an invalid length. [ 114.156234][ T8353] netlink: 'syz.4.1640': attribute type 29 has an invalid length. [ 114.166830][ T8353] netlink: 'syz.4.1640': attribute type 29 has an invalid length. [ 114.177339][ T8355] xfrm0: entered promiscuous mode [ 114.182629][ T8355] xfrm0: entered allmulticast mode [ 114.239777][ T8366] loop1: detected capacity change from 0 to 512 [ 114.260574][ T8361] loop2: detected capacity change from 0 to 2048 [ 114.274909][ T8366] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.296849][ T8370] __nla_validate_parse: 4 callbacks suppressed [ 114.296869][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1645'. [ 114.333812][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1647'. [ 114.372637][ T8378] loop4: detected capacity change from 0 to 128 [ 114.512637][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1646'. [ 114.541996][ T8397] bond1: entered promiscuous mode [ 114.549055][ T8397] bond1: entered allmulticast mode [ 114.549349][ T8401] loop2: detected capacity change from 0 to 512 [ 114.555968][ T8397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.581092][ T8397] bond1 (unregistering): Released all slaves [ 114.592968][ T8401] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.265257][ T8427] loop1: detected capacity change from 0 to 2048 [ 115.448165][ T8437] loop1: detected capacity change from 0 to 512 [ 115.467920][ T8437] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.555315][ T8443] loop2: detected capacity change from 0 to 512 [ 115.564307][ T8443] EXT4-fs (loop2): invalid inodes per group: 0 [ 115.564307][ T8443] [ 115.613099][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 115.613119][ T29] audit: type=1326 audit(1720773831.145:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8442 comm="syz.2.1666" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa7a793bd9 code=0x0 [ 115.622575][ T8445] loop1: detected capacity change from 0 to 512 [ 115.669558][ T8445] ext4 filesystem being mounted at /216/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.681176][ T8452] loop4: detected capacity change from 0 to 128 [ 115.687005][ T8446] loop2: detected capacity change from 0 to 512 [ 115.700251][ T29] audit: type=1400 audit(1720773831.245:769): avc: denied { map } for pid=8451 comm="syz.4.1669" path="pipe:[20559]" dev="pipefs" ino=20559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 115.730645][ T8446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.741336][ T8446] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 115.805176][ T8456] loop4: detected capacity change from 0 to 1764 [ 115.828938][ T8446] loop2: detected capacity change from 0 to 2048 [ 115.836471][ T8446] EXT4-fs: Ignoring removed nobh option [ 115.842649][ T8446] journal_path: Lookup failure for './file0' [ 115.849512][ T8446] EXT4-fs: error: could not find journal device path [ 115.864833][ T8456] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1670'. [ 115.937452][ T8464] loop1: detected capacity change from 0 to 2048 [ 116.105714][ T8481] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1677'. [ 116.111597][ T8483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=8483 comm=syz.4.1678 [ 116.194631][ T8500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1685'. [ 116.223185][ T8502] loop1: detected capacity change from 0 to 512 [ 116.231366][ T8502] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.243710][ T8502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.269555][ T8502] EXT4-fs (loop1): Remounting filesystem read-only [ 116.281011][ T8502] EXT4-fs warning (device loop1): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 116.299584][ T8502] EXT4-fs (loop1): 1 orphan inode deleted [ 116.311851][ T8502] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 116.391757][ T8504] loop4: detected capacity change from 0 to 8192 [ 116.455458][ T8507] loop2: detected capacity change from 0 to 2048 [ 116.641947][ T8515] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 117.095664][ T8497] syz.4.1684 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 117.106910][ T8497] CPU: 0 PID: 8497 Comm: syz.4.1684 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 117.118329][ T8497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 117.129477][ T8497] Call Trace: [ 117.133493][ T8497] [ 117.136533][ T8497] dump_stack_lvl+0xf2/0x150 [ 117.141434][ T8497] dump_stack+0x15/0x20 [ 117.145656][ T8497] dump_header+0x83/0x2d0 [ 117.150014][ T8497] oom_kill_process+0x33e/0x4c0 [ 117.155077][ T8497] out_of_memory+0x9af/0xbe0 [ 117.159806][ T8497] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 117.166153][ T8497] mem_cgroup_out_of_memory+0x13e/0x190 [ 117.172344][ T8497] try_charge_memcg+0x745/0xcd0 [ 117.177430][ T8497] ? _raw_spin_unlock+0x26/0x50 [ 117.182384][ T8497] ? radix_tree_lookup+0xf9/0x150 [ 117.187586][ T8497] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 117.194073][ T8497] __read_swap_cache_async+0x2b9/0x520 [ 117.199577][ T8497] swap_cluster_readahead+0x380/0x3f0 [ 117.205466][ T8497] swapin_readahead+0xe2/0x7a0 [ 117.210707][ T8497] ? __filemap_get_folio+0x420/0x5b0 [ 117.216026][ T8497] ? swap_cache_get_folio+0x6e/0x210 [ 117.221785][ T8497] do_swap_page+0x3bc/0x1840 [ 117.226434][ T8497] ? cgroup_rstat_updated+0x99/0x550 [ 117.231852][ T8497] ? __rcu_read_lock+0x36/0x50 [ 117.236828][ T8497] handle_mm_fault+0x8b9/0x2ac0 [ 117.241796][ T8497] exc_page_fault+0x3b9/0x650 [ 117.246593][ T8497] asm_exc_page_fault+0x26/0x30 [ 117.251518][ T8497] RIP: 0033:0x7fecc5a996b8 [ 117.256326][ T8497] Code: 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 84 00 00 00 00 00 41 b8 01 00 00 00 41 89 db 89 de 8d 7b 04 89 d8 89 c1 81 e1 ff 1f 00 00 <49> 8b 14 cf 48 39 f2 0f 84 5f ff ff ff 48 85 d2 0f 84 d2 01 00 00 [ 117.279467][ T8497] RSP: 002b:00007ffdb0facf60 EFLAGS: 00010206 [ 117.286054][ T8497] RAX: 00000000816822e7 RBX: ffffffff816822e7 RCX: 00000000000002e7 [ 117.295184][ T8497] RDX: 00007fecc5445028 RSI: 00000000816822e7 RDI: 00000000816822eb [ 117.303803][ T8497] RBP: 00007fecc687b720 R08: 0000000000000001 R09: 00007fecc5445000 [ 117.312829][ T8497] R10: 0000000000000008 R11: 00000000816822e7 R12: ffffffff816822ba [ 117.321732][ T8497] R13: 00007fecc5d49ff8 R14: 0000000000000005 R15: 00007fecc5d36000 [ 117.330322][ T8497] ? __fdget+0xfa/0x110 [ 117.334587][ T8497] ? __fdget_raw+0x7/0xc0 [ 117.338997][ T8497] [ 117.342195][ T8497] memory: usage 307200kB, limit 307200kB, failcnt 1186 [ 117.349165][ T8497] memory+swap: usage 311516kB, limit 9007199254740988kB, failcnt 0 [ 117.357117][ T8497] kmem: usage 307048kB, limit 9007199254740988kB, failcnt 0 [ 117.364421][ T8497] Memory cgroup stats for /syz4: [ 117.368863][ T8497] cache 151552 [ 117.377623][ T8497] rss 0 [ 117.380434][ T29] audit: type=1326 audit(1720773832.979:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8524 comm="syz.1.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a7004ebd9 code=0x0 [ 117.380448][ T8497] shmem 0 [ 117.380459][ T8497] mapped_file 151552 [ 117.403756][ T8497] dirty 151552 [ 117.403770][ T8497] writeback 0 [ 117.403784][ T8497] workingset_refault_anon 185 [ 117.403793][ T8497] workingset_refault_file 30 [ 117.403801][ T8497] swap 4419584 [ 117.403809][ T8497] swapcached 0 [ 117.437184][ T8497] pgpgin 56468 [ 117.440735][ T8497] pgpgout 56430 [ 117.444290][ T8497] pgfault 75450 [ 117.447815][ T8497] pgmajfault 72 [ 117.451295][ T8497] inactive_anon 0 [ 117.454970][ T8497] active_anon 0 [ 117.458529][ T8497] inactive_file 155648 [ 117.462603][ T8497] active_file 0 [ 117.466167][ T8497] unevictable 0 [ 117.469657][ T8497] hierarchical_memory_limit 314572800 [ 117.475052][ T8497] hierarchical_memsw_limit 9223372036854771712 [ 117.481523][ T8497] total_cache 151552 [ 117.485855][ T8497] total_rss 0 [ 117.489278][ T8497] total_shmem 0 [ 117.493366][ T8497] total_mapped_file 151552 [ 117.497928][ T8497] total_dirty 151552 [ 117.501843][ T8497] total_writeback 0 [ 117.505745][ T8497] total_workingset_refault_anon 185 [ 117.510961][ T8497] total_workingset_refault_file 30 [ 117.516101][ T8497] total_swap 4419584 [ 117.520016][ T8497] total_swapcached 0 [ 117.524037][ T8497] total_pgpgin 56468 [ 117.527970][ T8497] total_pgpgout 56430 [ 117.531970][ T8497] total_pgfault 75450 [ 117.536018][ T8497] total_pgmajfault 72 [ 117.540092][ T8497] total_inactive_anon 0 [ 117.544250][ T8497] total_active_anon 0 [ 117.548275][ T8497] total_inactive_file 155648 [ 117.553032][ T8497] total_active_file 0 [ 117.557056][ T8497] total_unevictable 0 [ 117.561052][ T8497] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1684,pid=8497,uid=0 [ 117.576116][ T8497] Memory cgroup out of memory: Killed process 8497 (syz.4.1684) total-vm:80752kB, anon-rss:452kB, file-rss:9764kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 117.595344][ T8504] ================================================================== [ 117.603638][ T8504] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 117.614197][ T8504] [ 117.616533][ T8504] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 117.624656][ T8504] tick_do_update_jiffies64+0x112/0x1b0 [ 117.630514][ T8504] tick_nohz_handler+0x7c/0x2d0 [ 117.635705][ T8504] __hrtimer_run_queues+0x20d/0x5e0 [ 117.641106][ T8504] hrtimer_interrupt+0x210/0x7b0 [ 117.646238][ T8504] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 117.652332][ T8504] sysvec_apic_timer_interrupt+0x6e/0x80 [ 117.658001][ T8504] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 117.664023][ T8504] console_flush_all+0x4fc/0x710 [ 117.668974][ T8504] console_unlock+0x7b/0x280 [ 117.673578][ T8504] vprintk_emit+0x3ed/0x5e0 [ 117.678085][ T8504] vprintk_default+0x26/0x30 [ 117.682691][ T8504] vprintk+0x75/0x80 [ 117.686802][ T8504] _printk+0x7a/0xa0 [ 117.690714][ T8504] __oom_kill_process+0x43c/0x8c0 [ 117.695752][ T8504] oom_kill_process+0xff/0x4c0 [ 117.700673][ T8504] out_of_memory+0x9af/0xbe0 [ 117.705452][ T8504] mem_cgroup_out_of_memory+0x13e/0x190 [ 117.711199][ T8504] try_charge_memcg+0x745/0xcd0 [ 117.716084][ T8504] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 117.722167][ T8504] __read_swap_cache_async+0x2b9/0x520 [ 117.727631][ T8504] swap_cluster_readahead+0x380/0x3f0 [ 117.733044][ T8504] swapin_readahead+0xe2/0x7a0 [ 117.738035][ T8504] do_swap_page+0x3bc/0x1840 [ 117.742673][ T8504] handle_mm_fault+0x8b9/0x2ac0 [ 117.747926][ T8504] exc_page_fault+0x3b9/0x650 [ 117.753059][ T8504] asm_exc_page_fault+0x26/0x30 [ 117.758892][ T8504] [ 117.761316][ T8504] read to 0xffffffff860079c0 of 8 bytes by task 8504 on cpu 1: [ 117.770111][ T8504] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 117.779361][ T8504] count_shadow_nodes+0x6b/0x230 [ 117.785926][ T8504] do_shrink_slab+0x5a/0x690 [ 117.791215][ T8504] shrink_slab+0x4ed/0x860 [ 117.795794][ T8504] shrink_node+0x59a/0x1da0 [ 117.801111][ T8504] do_try_to_free_pages+0x3cf/0xc20 [ 117.806541][ T8504] try_to_free_mem_cgroup_pages+0x1ea/0x4e0 [ 117.812949][ T8504] try_charge_memcg+0x27a/0xcd0 [ 117.819204][ T8504] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 117.825931][ T8504] __read_swap_cache_async+0x2b9/0x520 [ 117.831507][ T8504] swap_cluster_readahead+0x380/0x3f0 [ 117.837123][ T8504] swapin_readahead+0xe2/0x7a0 [ 117.842114][ T8504] do_swap_page+0x3bc/0x1840 [ 117.847364][ T8504] handle_mm_fault+0x8b9/0x2ac0 [ 117.852446][ T8504] exc_page_fault+0x296/0x650 [ 117.857601][ T8504] asm_exc_page_fault+0x26/0x30 [ 117.862783][ T8504] __get_user_8+0x11/0x20 [ 117.869087][ T8504] exit_robust_list+0x31/0x280 [ 117.876410][ T8504] futex_exit_release+0xe3/0x130 [ 117.882584][ T8504] exit_mm_release+0x1a/0x30 [ 117.887580][ T8504] exit_mm+0x38/0x190 [ 117.892209][ T8504] do_exit+0x556/0x1710 [ 117.897205][ T8504] do_group_exit+0x102/0x150 [ 117.901851][ T8504] get_signal+0xf2f/0x1080 [ 117.906481][ T8504] arch_do_signal_or_restart+0x95/0x4b0 [ 117.912866][ T8504] syscall_exit_to_user_mode+0x59/0x130 [ 117.918638][ T8504] do_syscall_64+0xd6/0x1c0 [ 117.923185][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.929101][ T8504] [ 117.931432][ T8504] value changed: 0x00000000ffffb891 -> 0x00000000ffffb892 [ 117.938650][ T8504] [ 117.940974][ T8504] Reported by Kernel Concurrency Sanitizer on: [ 117.947272][ T8504] CPU: 1 PID: 8504 Comm: syz.4.1684 Not tainted 6.10.0-rc7-syzkaller-00139-g8a18fda0febb #0 [ 117.957790][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 117.973127][ T8504] ================================================================== [ 118.390711][ T8498] syz.4.1684 (8498) used greatest stack depth: 6248 bytes left