last executing test programs: 24.714128204s ago: executing program 0 (id=3325): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10841, 0x171) write$binfmt_elf64(r0, &(0x7f0000000e80)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x5c, 0xff, 0x3, 0x3, 0x6, 0x6a64, 0x94, 0x40, 0x122, 0x3, 0x400, 0x38, 0x1, 0x2, 0x7fff, 0x4cfc}, [{0x6474e551, 0xc, 0x4117, 0x2, 0x9, 0x2, 0x8, 0xdab}], "ca28248718b95d37a37603b48ab1fd1404a89b0e1b2c7fae44d03cc9efee5b271bcfe59df95e442157cac2e95fe647dfc65e925434e838bafd8485c55110843ccb5daec3176ea37859be3ff477581d556668836c311f1c6f132fe346f533bf73415bf851b35fec411468a69a447acc6e87e057ed51efebc94e2a51a516863f23df36f010b4190435c655859e2021af2486e17c1f1eaa28497dfac7d1363ac4d76f07436baa4562b241e1be027bdbf045e3b350f09d5b053241e834a10b49dc2955d638f645b5a5540303a72d90b6c004af5907cecce42a5965b5866b9648db65bd29a62525fe3c17b269016980b340c28134f61b020355ab28d6689a1f8480df00870b7f3112cacdca997ccfbb25e861a994a986479616d3e03c836ed3a9bc3b6115f00a43352010dba9dd3485c0dcc7cc53b25f5faa69b0d49efabffb4089addbd57ea9bb5242b5725d7fbb4a6b20bc9f810b13f05ce65acc550a2b43199f37edb6c9255176cb761eaa82637baea777e6879ba5d0bdb1ce1513461dca0f1885777a4f5f2a592d5789746c8038e25fcb4271ae268b8cf6a810266d070e91521e5a459797", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x91c) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$eJzs27FqU1EYB/B/alpv7GAHJ1EMdHEq6hMYpIIYECoZdDJQXVoR0iUKYp/HWfAVfBmXDtItcnujbWMKrWmaGn8/OJyPfDnkuwfCd4ZzX916u7X5bufN4se9FLVmFpKH2U9WymioNpyLg3gpx9QyiR8TrQYA/srGRreVfJ11GUxRr9fq3lhdHpPpfJ5BOQAAAAAAAAAAAJyDs9z/X0g+jd7/373gegGAyVX3/5lHjeHc67W6t6vz2wj3/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDZ2R8Mrg/KUQzn4biapEjSSHItST1J+fms6wUAJrc/ON73T+r/SWpJ9H8AmAPPX7x82mq31zeazSL5vtvv9DvVXOUfP2mv32seWDlctdfvd64kKUd7/X6Vbx7PLx6cG8r1D8bml3J3tcqXuUfP2iP55WxexAYAwH9orfnbkf7+q7cna2vj8mV/rqIj54OR/l3PzfrYn1yY0qMAAKe08/7DVnd7+3Xv3IPa2VY1hgWd/J0v9WmVOmnQmPpmXorgW+0ylJFcjt34h4PidPsMzLfDP/1opphNQQAAAAAAAAAAAAAAwB8u4pWjJHdm/ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMyXnwEAAP//2d9NhA==") (async) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000200)='./file0\x00', 0x14814, &(0x7f0000000640)=ANY=[], 0x1, 0x20e, &(0x7f0000000d00)="$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") r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) (async) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0) 22.634886634s ago: executing program 0 (id=3360): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 21.978744137s ago: executing program 0 (id=3374): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0xb, 0x1, 0x8, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fff, 0xfffffffffffff82f}, 0x3005, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0xa, &(0x7f0000000d00)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000cc0)='GPL\x00', 0x3, 0xee, &(0x7f00000000c0)=""/238}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000e009500040000000000ff389172bede519259237d525914cc4eabbe6e7cc38bd6ccd5e21055c981af8d29786c1983740872c91797110e"], &(0x7f0000000040)='GPL\x00', 0x1}, 0x90) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r7, r5, 0x11, 0x0, r7}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r5, 0x11, 0x0, r4}, 0x11) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000004c0)=""/218, 0xda, 0x0, &(0x7f00000005c0)=""/40, 0x28}}, 0x10) signalfd(r2, &(0x7f0000000680)={[0x140000000]}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000001000000000086f9f9be0ddef24ed200da007ab4b13cc3e09583225d88c5336f4cce4f8fa5932d"], &(0x7f0000000040)='GPL\x00'}, 0x80) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r9, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r10, r8, 0x11, 0x0, r10}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xffffe02a, 0x0, 0xffffffffffffffff, 0x79d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) r11 = epoll_create1(0x0) r12 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r14 = epoll_create1(0x0) r15 = fcntl$dupfd(r14, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r15, r13, 0x11, 0x0, r15}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r12, r13, 0x11, 0x0, r12}, 0x11) 19.837074292s ago: executing program 0 (id=3427): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x65580000, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) 2.354851538s ago: executing program 3 (id=3676): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000008081000000080045002b14080000"], 0x0) 2.072145411s ago: executing program 3 (id=3677): getuid() r0 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = open(0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b00)={{{@in6, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r2, {0x0, r3}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) (fail_nth: 7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000004400)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007540)={{{@in=@multicast2, @in6=@ipv4={""/10, ""/2, @initdev}}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000004440)=0xe8) lstat(0x0, &(0x7f0000007640)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) accept4$x25(0xffffffffffffffff, &(0x7f00000044c0)={0x9, @remote}, &(0x7f00000076c0)=0x12, 0x800) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004500)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.291875805s ago: executing program 0 (id=3588): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000086dd60dd690b004a2f0000000000000000000000ffffac1e0001ff0200000000000000000000000000012420"], 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/31, 0x1f}}], 0x1, 0x0, 0x0) 1.164156555s ago: executing program 4 (id=3683): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01}, 0x20}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x891d, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) 1.092847551s ago: executing program 3 (id=3684): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="738700000000000005000100000008000100000000000c00060000000000010000000800030003"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.037925605s ago: executing program 3 (id=3685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x38) writev(0xffffffffffffffff, &(0x7f0000000780), 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) r5 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8c8a}}, 0x0, 0x0, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) memfd_create(&(0x7f00000002c0)='rfdno', 0x4) r6 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), 0x0) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$P9_RLERRORu(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1.036874945s ago: executing program 3 (id=3687): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000000)=@sr0, 0xee01, &(0x7f0000000080)={0x0, 0x5, 0x1733fd198819eb6d, 0x4}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20020008) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x0) 1.004576308s ago: executing program 1 (id=3601): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000240)='\x96\xd2\xe9\xf3.\xed\xfe\xfb\x9d\xff:\xa3\t \x11;\xb4\x98\x95\x1c\xb3\xffF\xb5\xae\xaf\xd8b\xcdG\x9f\x02\xfc\xcd%\xb2\xbe\xb1T\x97\xc8\xbb\xe8\x10\xee\xe5\x88l\x9c\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00') 923.970365ms ago: executing program 1 (id=3688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd(r1, &(0x7f0000000400)={[0x1000]}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0x9) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x803, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x28}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r7, &(0x7f0000000380), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000200)={'bond0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 823.555823ms ago: executing program 4 (id=3691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_nanosleep(0x0, 0x204000000000000, &(0x7f0000000000), 0x0) 759.468168ms ago: executing program 3 (id=3692): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000380)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x64}, {0x6}]}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0xe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setgid(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x11fd, &(0x7f0000001b80)="$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") unshare(0x400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') lseek(r5, 0x0, 0x0) truncate(&(0x7f0000000080)='./file2\x00', 0x2) socket$can_bcm(0x1d, 0x2, 0x2) semop(0x0, &(0x7f0000000000), 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0x10b, 0x1, 0x0, &(0x7f0000000040), 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000003200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000048000), 0x0) semget(0x3, 0x2, 0x484) 758.185528ms ago: executing program 1 (id=3693): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}, 0xffffffe0}, {{&(0x7f0000000140), 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}}], 0x2, 0x0) 678.776915ms ago: executing program 1 (id=3695): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c) 619.86555ms ago: executing program 2 (id=3697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={{0x14, 0x10, 0xc, 0x0, 0xfffffff5}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 486.243641ms ago: executing program 1 (id=3698): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2018480, &(0x7f0000001900), 0x1, 0x762, &(0x7f0000001180)="$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") dup(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r3], 0x48}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000000)={0x0, 0x6000000, &(0x7f0000000800)={&(0x7f0000000300)={0x60, r6, 0x601, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 398.759948ms ago: executing program 2 (id=3699): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000000, &(0x7f0000000080)={[{@i_version}, {@dioread_nolock}]}, 0x21, 0x4b0, &(0x7f0000000f00)="$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") 398.663768ms ago: executing program 2 (id=3700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) 373.07148ms ago: executing program 2 (id=3701): socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @local}}]}, 0x50}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x0, 0x5f, 0x30, 0x2e]}}, &(0x7f0000000200)=""/6, 0x2d, 0x6, 0x1, 0xc}, 0x20) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000780)={@mcast2}, &(0x7f0000000880)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@deltclass={0x34, 0x29, 0x0, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000540)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x0, 0x989680}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000dc1000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) 334.319773ms ago: executing program 4 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @mcast1}}]}, 0x34}, 0x1, 0x100000000000000}, 0x0) 242.71107ms ago: executing program 4 (id=3703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = signalfd(r1, &(0x7f0000000400)={[0x1000]}, 0x8) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r4) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f00000000c0)=0x9) r5 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r2, 0x803, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}]}, 0x28}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r7, &(0x7f0000000380), 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'erspan0\x00'}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000200)={'bond0\x00', @random="2b0100004ec6"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 242.43051ms ago: executing program 2 (id=3704): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01}, 0x20}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x891d, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)) 238.907831ms ago: executing program 1 (id=3705): syz_clone(0x48209200, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x98, 0x2b0, 0x2b0, 0x98, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x10000}, 0x48) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) lseek(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942039657437508004d0000480001010be5ffffffffe0000001440c059fade21c10d57f962fae7ddf3978ed8100860600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=0x0], 0x134}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r5, @ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a0a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x202000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r7) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x79, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10a011, 0x3, 0xfffff17b}, 0x0, 0x0, r7, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) iopl(0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 171.358866ms ago: executing program 0 (id=3706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 139.732739ms ago: executing program 4 (id=3707): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x600}, 0x0) 96.068423ms ago: executing program 4 (id=3708): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r0, 0x29, 0x2, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0xfffffffc, 0x7, 0x7c6f, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="4aa674f2438592a0b709d0d36ae6e0e44698a5e9d1240cd1ab4c959b23cba94d38d37fa2d9ecd6508632552e6468738742eae3367285e1ec014193a0e3330865a333e9d8e11a1a6cec765b752157687dd797044962845f086bb72ff7ba5840df0ad91c26bdafcbc55e0712b60f4d41ab59975bf6eaed59f875c2dde35535a77465fbb416ffb185bfdb126278dbea946ac21e0e84368ee3ed9ce20df0f6c58d91883894309de2ce15cee5ba24a514ced2a92ee8", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000a6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x10) r6 = io_uring_setup(0x17ba, &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) getpid() pselect6(0x40, &(0x7f0000000180)={0x7f, 0xd1, 0x6, 0x3, 0x5, 0x6, 0x2, 0x7ff}, &(0x7f00000001c0)={0x8, 0x2, 0xfffffffffffffffb, 0x2, 0x3f03, 0x8, 0x0, 0x8000}, &(0x7f0000000200)={0xfffffffffffffc00, 0x5, 0x2, 0x4, 0x6, 0xfe2, 0x2, 0x8}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000000000000001]}, 0x8}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r7 = dup(r0) fcntl$notify(r7, 0x402, 0x28) 0s ago: executing program 2 (id=3709): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000380)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, &(0x7f00000001c0)=0x78) kernel console output (not intermixed with test programs): rased user defined pnetid SYZ2 [ 149.500283][T13047] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 149.756933][T13071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14864 sclass=netlink_route_socket pid=13071 comm=syz.1.3307 [ 149.858650][T13082] loop3: detected capacity change from 0 to 256 [ 149.865280][T13082] FAT-fs (loop3): Unrecognized mount option "chec" or missing value [ 150.059164][T13090] vcan0 speed is unknown, defaulting to 1000 [ 150.109360][T13026] cgroup: fork rejected by pids controller in /syz0 [ 150.122648][T13104] loop1: detected capacity change from 0 to 2048 [ 150.160840][T13104] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 150.262084][T13090] chnl_net:caif_netlink_parms(): no params data found [ 150.310477][T13090] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.317550][T13090] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.324987][T13090] bridge_slave_0: entered allmulticast mode [ 150.331570][T13090] bridge_slave_0: entered promiscuous mode [ 150.338491][T13090] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.345631][T13090] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.353010][T13090] bridge_slave_1: entered allmulticast mode [ 150.359710][T13090] bridge_slave_1: entered promiscuous mode [ 150.381349][T13090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.392005][T13090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.421062][T13090] team0: Port device team_slave_0 added [ 150.427728][T13090] team0: Port device team_slave_1 added [ 150.446772][T13090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.453780][T13090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.479874][T13090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.504705][T13090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.511774][T13090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.537810][T13090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.599119][T13090] hsr_slave_0: entered promiscuous mode [ 150.609386][T13090] hsr_slave_1: entered promiscuous mode [ 150.617302][T13090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.635013][T13090] Cannot create hsr debugfs directory [ 150.786133][T13163] loop1: detected capacity change from 0 to 1024 [ 150.803025][T13090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.826289][T13163] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.848676][T13163] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3333: Invalid block bitmap block 0 in block_group 0 [ 150.864093][T13163] EXT4-fs error (device loop1): ext4_acquire_dquot:6860: comm syz.1.3333: Failed to acquire dquot type 0 [ 150.890214][T13090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.909820][T13163] EXT4-fs error (device loop1): ext4_free_blocks:6590: comm syz.1.3333: Freeing blocks not in datazone - block = 0, count = 4096 [ 150.948173][T13163] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.3333: Invalid inode bitmap blk 0 in block_group 0 [ 150.966097][T10466] EXT4-fs error (device loop1): ext4_release_dquot:6883: comm kworker/u8:32: Failed to release dquot type 0 [ 150.997172][T13090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.021372][T13163] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 151.031669][T13163] EXT4-fs (loop1): 1 orphan inode deleted [ 151.049573][T13163] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm syz.1.3333: Invalid inode table block 12884901889 in block_group 0 [ 151.077255][T10469] EXT4-fs error (device loop1): __ext4_get_inode_loc:4357: comm kworker/u8:35: Invalid inode table block 12884901889 in block_group 0 [ 151.120324][T13090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.161137][T13186] vcan0 speed is unknown, defaulting to 1000 [ 151.205848][T13090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.215625][T13090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.234255][T13090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.245272][T13090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.377251][T13090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.400551][T13090] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.412143][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.419242][ T5766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.448407][ T2783] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.455486][ T2783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.479291][T13090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.549203][T13090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.702698][T13090] veth0_vlan: entered promiscuous mode [ 151.720213][T13090] veth1_vlan: entered promiscuous mode [ 151.726374][T13324] __nla_validate_parse: 12 callbacks suppressed [ 151.726387][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'. [ 151.755452][T13090] veth0_macvtap: entered promiscuous mode [ 151.765382][T13090] veth1_macvtap: entered promiscuous mode [ 151.780607][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.791092][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.800959][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.811449][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.821300][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.831773][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.841632][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.852187][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.867715][T13090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.896428][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.906967][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.917008][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.927817][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.937806][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.948246][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.958165][T13090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.959389][T13344] loop2: detected capacity change from 0 to 2048 [ 151.968809][T13090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.987335][T13090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.987592][T13347] loop3: detected capacity change from 0 to 256 [ 151.996585][T13090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.009609][T13090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.018346][T13090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.027187][T13090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.220444][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3312'. [ 152.237663][T13357] 9pnet_fd: Insufficient options for proto=fd [ 152.663276][T13378] 9pnet_fd: Insufficient options for proto=fd [ 152.730134][T13386] tipc: MTU too low for tipc bearer [ 152.798183][T13390] loop4: detected capacity change from 0 to 512 [ 152.818070][T13390] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.3369: casefold flag without casefold feature [ 152.842955][T13390] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3369: couldn't read orphan inode 15 (err -117) [ 152.939989][T13397] loop3: detected capacity change from 0 to 2048 [ 152.947313][T13398] netlink: 'syz.4.3369': attribute type 1 has an invalid length. [ 152.987685][T13397] loop3: p1 < > p4 [ 152.992445][T13397] loop3: p4 size 8388608 extends beyond EOD, truncated [ 153.005527][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 153.005541][ T29] audit: type=1400 audit(8000002784.077:2511): avc: denied { read write } for pid=13396 comm="syz.3.3371" name="loop3p4" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.073548][ T29] audit: type=1400 audit(8000002784.114:2512): avc: denied { open } for pid=13396 comm="syz.3.3371" path="/dev/loop3p4" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.096796][ T29] audit: type=1326 audit(8000002784.124:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.3.3371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f532dae4bd9 code=0x7ffe0000 [ 153.337533][T13412] loop2: detected capacity change from 0 to 2048 [ 153.419591][T13412] loop2: p1 < > p4 [ 153.429171][T13412] loop2: p4 size 8388608 extends beyond EOD, truncated [ 153.648914][T13428] loop2: detected capacity change from 0 to 512 [ 153.690697][T13428] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.049306][T13459] loop3: detected capacity change from 0 to 512 [ 154.084278][T13456] loop4: detected capacity change from 0 to 4096 [ 154.093203][T13459] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.110949][T13463] loop2: detected capacity change from 0 to 128 [ 154.142776][T13463] FAT-fs (loop2): bogus number of directory entries (1) [ 154.149751][T13463] FAT-fs (loop2): Can't find a valid FAT filesystem [ 154.212311][T13470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3401'. [ 154.232719][T13476] 9pnet_fd: Insufficient options for proto=fd [ 154.262528][ T3182] IPVS: starting estimator thread 0... [ 154.388958][T13495] netlink: 1120 bytes leftover after parsing attributes in process `syz.3.3409'. [ 154.398706][T13479] IPVS: using max 3024 ests per chain, 151200 per kthread [ 154.415312][T13501] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3410'. [ 154.445455][T13504] loop3: detected capacity change from 0 to 512 [ 154.482368][T13504] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.524782][ T29] audit: type=1326 audit(8000002785.486:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13507 comm="syz.2.3412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5211432bd9 code=0x0 [ 154.852761][T13531] loop3: detected capacity change from 0 to 512 [ 154.869223][T13533] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.898197][T13527] Dead loop on virtual device ip6_vti0, fix it urgently! [ 154.940267][T13531] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.034770][T13547] netlink: 'syz.2.3422': attribute type 1 has an invalid length. [ 155.118030][T13552] loop2: detected capacity change from 0 to 512 [ 155.170034][T13552] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.191663][T13557] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3425'. [ 155.344734][T13562] loop2: detected capacity change from 0 to 1024 [ 155.400813][T13565] loop3: detected capacity change from 0 to 512 [ 155.418974][T13565] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.434164][T13569] loop2: detected capacity change from 0 to 512 [ 155.441329][T13569] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.461905][T13100] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 155.471874][T13100] CPU: 0 PID: 13100 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 155.482028][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.492087][T13100] Call Trace: [ 155.495382][T13100] [ 155.498305][T13100] dump_stack_lvl+0xf2/0x150 [ 155.502934][T13100] dump_stack+0x15/0x20 [ 155.507092][T13100] dump_header+0x83/0x2d0 [ 155.511429][T13100] oom_kill_process+0x33e/0x4c0 [ 155.516296][T13100] out_of_memory+0x9af/0xbe0 [ 155.520931][T13100] mem_cgroup_out_of_memory+0x13e/0x190 [ 155.526509][T13100] try_charge_memcg+0x745/0xcd0 [ 155.531372][T13100] ? __alloc_pages_noprof+0x194/0x360 [ 155.536885][T13100] ? __rcu_read_unlock+0x4e/0x70 [ 155.541844][T13100] __mem_cgroup_charge+0x63/0x100 [ 155.546925][T13100] shmem_get_folio_gfp+0x480/0xb70 [ 155.552077][T13100] shmem_write_begin+0xa0/0x1c0 [ 155.557021][T13100] generic_perform_write+0x1d5/0x410 [ 155.562311][T13100] shmem_file_write_iter+0xc8/0xf0 [ 155.567548][T13100] __kernel_write_iter+0x24f/0x4e0 [ 155.572681][T13100] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 155.578523][T13100] dump_user_range+0x3a7/0x550 [ 155.583332][T13100] elf_core_dump+0x1aeb/0x1c30 [ 155.588107][T13100] ? 0xffffffffff600000 [ 155.591621][T13569] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3430: bg 0: block 64: padding at end of block bitmap is not set [ 155.592253][T13100] do_coredump+0xff6/0x1860 [ 155.610906][T13100] ? __rcu_read_unlock+0x4e/0x70 [ 155.615869][T13100] get_signal+0xdc1/0x1080 [ 155.620294][T13100] arch_do_signal_or_restart+0x95/0x4b0 [ 155.625847][T13100] irqentry_exit_to_user_mode+0x94/0x130 [ 155.631630][T13100] irqentry_exit+0x12/0x50 [ 155.633367][T13569] Quota error (device loop2): write_blk: dquota write failed [ 155.636134][T13100] asm_exc_page_fault+0x26/0x30 [ 155.648440][T13100] RIP: 0033:0x7fa036e6cbe1 [ 155.652922][T13100] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 155.671813][T13569] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 155.672655][T13100] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 155.672678][T13100] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 155.696585][T13100] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 155.704654][T13100] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 155.712649][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.714917][T13569] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz.2.3430: Failed to acquire dquot type 0 [ 155.720629][T13100] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 155.720650][T13100] [ 155.720976][T13100] memory: usage 307200kB, limit 307200kB, failcnt 19230 [ 155.750012][T13100] memory+swap: usage 431096kB, limit 9007199254740988kB, failcnt 0 [ 155.757922][T13100] kmem: usage 6124kB, limit 9007199254740988kB, failcnt 0 [ 155.765085][T13100] Memory cgroup stats for /syz0: [ 155.768015][T13569] EXT4-fs (loop2): 1 truncate cleaned up [ 155.858786][T13100] cache 306663424 [ 155.862549][T13100] rss 602112 [ 155.865746][T13100] shmem 306569216 [ 155.869368][T13100] mapped_file 94208 [ 155.873313][T13100] dirty 94208 [ 155.876584][T13100] writeback 0 [ 155.879908][T13100] workingset_refault_anon 87 [ 155.884578][T13100] workingset_refault_file 151 [ 155.889240][T13100] swap 126959616 [ 155.892901][T13100] swapcached 1036288 [ 155.896808][T13100] pgpgin 240659 [ 155.900330][T13100] pgpgout 165390 [ 155.903966][T13100] pgfault 131657 [ 155.907493][T13100] pgmajfault 39 [ 155.910966][T13100] inactive_anon 297345024 [ 155.915304][T13100] active_anon 10862592 [ 155.919363][T13100] inactive_file 0 [ 155.922982][T13100] active_file 94208 [ 155.926801][T13100] unevictable 0 [ 155.930266][T13100] hierarchical_memory_limit 314572800 [ 155.935677][T13100] hierarchical_memsw_limit 9223372036854771712 [ 155.941819][T13100] total_cache 306663424 [ 155.946106][T13100] total_rss 602112 [ 155.949863][T13100] total_shmem 306569216 [ 155.954031][T13100] total_mapped_file 94208 [ 155.958376][T13100] total_dirty 94208 [ 155.962170][T13100] total_writeback 0 [ 155.966015][T13100] total_workingset_refault_anon 87 [ 155.971197][T13100] total_workingset_refault_file 151 [ 155.976383][T13100] total_swap 126959616 [ 155.980532][T13100] total_swapcached 1036288 [ 155.984975][T13100] total_pgpgin 240659 [ 155.988946][T13100] total_pgpgout 165390 [ 155.993025][T13100] total_pgfault 131657 [ 155.997075][T13100] total_pgmajfault 39 [ 156.001088][T13100] total_inactive_anon 297345024 [ 156.005930][T13100] total_active_anon 10862592 [ 156.010590][T13100] total_inactive_file 0 [ 156.014831][T13100] total_active_file 94208 [ 156.019160][T13100] total_unevictable 0 [ 156.023231][T13100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13044,uid=0 [ 156.038300][T13100] Memory cgroup out of memory: Killed process 13044 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:41088kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 156.056442][ T29] audit: type=1400 audit(8000002786.892:2515): avc: denied { mount } for pid=13576 comm="syz.2.3432" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 156.083929][T13577] loop2: detected capacity change from 0 to 164 [ 156.096967][T13577] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.105232][T13577] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.113503][T13577] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.121744][T13577] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.148669][T13577] vxlan0: entered promiscuous mode [ 156.153863][T13577] vxlan0: entered allmulticast mode [ 156.172495][T13577] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.180974][T13577] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.189368][T13577] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.197801][T13577] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.227222][T13580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 156.271673][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810ad35000: rx timeout, send abort [ 156.322115][T13584] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 156.393399][T13587] loop2: detected capacity change from 0 to 512 [ 156.405253][T13588] geneve1: entered promiscuous mode [ 156.410475][T13588] geneve1: entered allmulticast mode [ 156.440896][T13587] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.618797][T13029] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 156.628793][T13029] CPU: 1 PID: 13029 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 156.638991][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.649093][T13029] Call Trace: [ 156.652374][T13029] [ 156.655310][T13029] dump_stack_lvl+0xf2/0x150 [ 156.659935][T13029] dump_stack+0x15/0x20 [ 156.664163][T13029] dump_header+0x83/0x2d0 [ 156.668507][T13029] oom_kill_process+0x33e/0x4c0 [ 156.673397][T13029] out_of_memory+0x9af/0xbe0 [ 156.677998][T13029] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 156.684134][T13029] mem_cgroup_out_of_memory+0x13e/0x190 [ 156.689769][T13029] try_charge_memcg+0x745/0xcd0 [ 156.694639][T13029] ? __alloc_pages_noprof+0x194/0x360 [ 156.700017][T13029] ? __rcu_read_unlock+0x4e/0x70 [ 156.705075][T13029] __mem_cgroup_charge+0x63/0x100 [ 156.710140][T13029] shmem_get_folio_gfp+0x480/0xb70 [ 156.715319][T13029] shmem_write_begin+0xa0/0x1c0 [ 156.720173][T13029] generic_perform_write+0x1d5/0x410 [ 156.725478][T13029] shmem_file_write_iter+0xc8/0xf0 [ 156.730600][T13029] __kernel_write_iter+0x24f/0x4e0 [ 156.735719][T13029] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 156.741591][T13029] dump_user_range+0x3a7/0x550 [ 156.746379][T13029] elf_core_dump+0x1aeb/0x1c30 [ 156.751242][T13029] ? 0xffffffffff600000 [ 156.755422][T13029] do_coredump+0xff6/0x1860 [ 156.759940][T13029] ? __rcu_read_unlock+0x4e/0x70 [ 156.764961][T13029] get_signal+0xdc1/0x1080 [ 156.769422][T13029] arch_do_signal_or_restart+0x95/0x4b0 [ 156.775052][T13029] irqentry_exit_to_user_mode+0x94/0x130 [ 156.780789][T13029] irqentry_exit+0x12/0x50 [ 156.785244][T13029] asm_exc_page_fault+0x26/0x30 [ 156.790120][T13029] RIP: 0033:0x7fa036e6cbe1 [ 156.794526][T13029] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 156.814253][T13029] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 156.820386][T13029] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 156.820736][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88810ad35000: abort rx timeout. Force session deactivation [ 156.828342][T13029] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 156.828355][T13029] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 156.828367][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.862492][T13029] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 156.870455][T13029] [ 156.873712][T13029] memory: usage 307192kB, limit 307200kB, failcnt 20548 [ 156.881444][T13029] memory+swap: usage 429700kB, limit 9007199254740988kB, failcnt 0 [ 156.889381][T13029] kmem: usage 5964kB, limit 9007199254740988kB, failcnt 0 [ 156.896510][T13029] Memory cgroup stats for /syz0: [ 156.919829][T13604] netlink: 'syz.2.3442': attribute type 7 has an invalid length. [ 157.017678][T13354] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 157.027384][T13618] loop1: detected capacity change from 0 to 512 [ 157.063480][T13618] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.075397][T13613] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 52609 - 0 [ 157.083732][T13613] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 52609 - 0 [ 157.092109][T13613] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 52609 - 0 [ 157.100429][T13613] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 52609 - 0 [ 157.151592][T13613] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 49617 - 0 [ 157.159962][T13613] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 49617 - 0 [ 157.168297][T13613] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 49617 - 0 [ 157.176711][T13613] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 49617 - 0 [ 157.216401][T13625] loop4: detected capacity change from 0 to 512 [ 157.222942][T13613] geneve2: entered promiscuous mode [ 157.229946][T13613] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 49617 - 0 [ 157.238502][T13613] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 49617 - 0 [ 157.247009][T13613] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 49617 - 0 [ 157.255558][T13613] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 49617 - 0 [ 157.284656][T13625] EXT4-fs mount: 71 callbacks suppressed [ 157.284672][T13625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.302950][T13613] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 52609 - 0 [ 157.311419][T13613] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 52609 - 0 [ 157.319906][T13613] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 52609 - 0 [ 157.328385][T13613] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 52609 - 0 [ 157.330389][T13029] cache 275173376 [ 157.340471][T13029] rss 69632 [ 157.343687][T13029] shmem 275079168 [ 157.347335][T13029] mapped_file 94208 [ 157.351137][T13029] dirty 94208 [ 157.354430][T13029] writeback 770048 [ 157.358136][T13029] workingset_refault_anon 87 [ 157.362967][T13029] workingset_refault_file 151 [ 157.367632][T13029] swap 125022208 [ 157.371214][T13029] swapcached 974848 [ 157.375098][T13029] pgpgin 241467 [ 157.378618][T13029] pgpgout 174032 [ 157.382172][T13029] pgfault 131709 [ 157.385737][T13029] pgmajfault 39 [ 157.389193][T13029] inactive_anon 258658304 [ 157.393574][T13029] active_anon 14516224 [ 157.397680][T13029] inactive_file 94208 [ 157.401648][T13029] active_file 0 [ 157.405092][T13029] unevictable 0 [ 157.408573][T13029] hierarchical_memory_limit 314572800 [ 157.413973][T13029] hierarchical_memsw_limit 9223372036854771712 [ 157.414004][T13625] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.430540][T13029] total_cache 275173376 [ 157.434681][T13029] total_rss 69632 [ 157.438391][T13029] total_shmem 275079168 [ 157.442546][T13029] total_mapped_file 94208 [ 157.446933][T13029] total_dirty 94208 [ 157.451626][T13029] total_writeback 770048 [ 157.455953][T13029] total_workingset_refault_anon 87 [ 157.461500][T13029] total_workingset_refault_file 151 [ 157.466685][T13029] total_swap 125022208 [ 157.470775][T13029] total_swapcached 974848 [ 157.475133][T13029] total_pgpgin 241467 [ 157.479118][T13029] total_pgpgout 174032 [ 157.483220][T13029] total_pgfault 131709 [ 157.487277][T13029] total_pgmajfault 39 [ 157.491252][T13029] total_inactive_anon 258658304 [ 157.496214][T13029] total_active_anon 14516224 [ 157.500793][T13029] total_inactive_file 94208 [ 157.505380][T13029] total_active_file 0 [ 157.509352][T13029] total_unevictable 0 [ 157.513411][T13029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13038,uid=0 [ 157.528580][T13029] Memory cgroup out of memory: Killed process 13038 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:41088kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 157.559613][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.647548][T13641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 157.656298][T13643] loop4: detected capacity change from 0 to 128 [ 157.664855][T13643] vfat filesystem being mounted at /22/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 157.749978][T13652] loop2: detected capacity change from 0 to 128 [ 157.757149][T13656] loop1: detected capacity change from 0 to 512 [ 157.779091][T13652] vfat filesystem being mounted at /388/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 157.805256][T13656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 157.827937][ T29] audit: type=1400 audit(8000002788.547:2516): avc: denied { watch_reads } for pid=13651 comm="syz.2.3457" path="/388/file0/file0" dev="loop2" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 157.838765][T13656] ext4 filesystem being mounted at /193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.917227][T13666] netlink: 'syz.4.3460': attribute type 2 has an invalid length. [ 157.925200][T13666] netlink: 'syz.4.3460': attribute type 3 has an invalid length. [ 157.959614][T13668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19472 sclass=netlink_route_socket pid=13668 comm=syz.2.3461 [ 157.974139][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 158.009459][T13666] loop4: detected capacity change from 0 to 512 [ 158.141666][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.172311][T13676] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3465'. [ 158.269017][T13684] loop1: detected capacity change from 0 to 512 [ 158.278627][T13684] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.3468: corrupted in-inode xattr: invalid ea_ino [ 158.303977][T13684] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.3468: couldn't read orphan inode 15 (err -117) [ 158.318298][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3469'. [ 158.327385][T13686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3469'. [ 158.350052][T13684] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.403910][T13686] loop4: detected capacity change from 0 to 1024 [ 158.429261][T10887] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 158.442951][T13686] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.478457][T13686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.519245][ T29] audit: type=1400 audit(8000002789.167:2517): avc: denied { unlink } for pid=13685 comm="syz.4.3469" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.587071][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.634058][ T29] audit: type=1326 audit(8000002789.287:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.667521][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.693368][ T29] audit: type=1326 audit(8000002789.287:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.717035][ T29] audit: type=1326 audit(8000002789.287:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.740516][ T29] audit: type=1326 audit(8000002789.287:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.764018][ T29] audit: type=1326 audit(8000002789.287:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.787578][ T29] audit: type=1326 audit(8000002789.287:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.814255][T13698] loop4: detected capacity change from 0 to 512 [ 158.837132][ T29] audit: type=1326 audit(8000002789.462:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.838302][T13698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 158.860638][ T29] audit: type=1326 audit(8000002789.462:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13695 comm="syz.1.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 158.949248][T13706] bond0: entered promiscuous mode [ 158.954354][T13706] bond_slave_0: entered promiscuous mode [ 158.960167][T13706] bond_slave_1: entered promiscuous mode [ 158.975273][T13698] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.021247][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3477'. [ 159.029147][T13030] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.040062][T13030] CPU: 0 PID: 13030 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 159.050216][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.060274][T13030] Call Trace: [ 159.063543][T13030] [ 159.066462][T13030] dump_stack_lvl+0xf2/0x150 [ 159.071062][T13030] dump_stack+0x15/0x20 [ 159.075225][T13030] dump_header+0x83/0x2d0 [ 159.079667][T13030] oom_kill_process+0x33e/0x4c0 [ 159.084519][T13030] out_of_memory+0x9af/0xbe0 [ 159.089197][T13030] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 159.095332][T13030] mem_cgroup_out_of_memory+0x13e/0x190 [ 159.100905][T13030] try_charge_memcg+0x745/0xcd0 [ 159.105807][T13030] ? __alloc_pages_noprof+0x194/0x360 [ 159.111185][T13030] ? __rcu_read_unlock+0x4e/0x70 [ 159.116176][T13030] __mem_cgroup_charge+0x63/0x100 [ 159.121217][T13030] shmem_get_folio_gfp+0x480/0xb70 [ 159.126344][T13030] shmem_write_begin+0xa0/0x1c0 [ 159.131337][T13030] generic_perform_write+0x1d5/0x410 [ 159.136689][T13030] shmem_file_write_iter+0xc8/0xf0 [ 159.141811][T13030] __kernel_write_iter+0x24f/0x4e0 [ 159.146949][T13030] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 159.152871][T13030] dump_user_range+0x3a7/0x550 [ 159.157643][T13030] elf_core_dump+0x1aeb/0x1c30 [ 159.162442][T13030] ? 0xffffffffff600000 [ 159.166634][T13030] do_coredump+0xff6/0x1860 [ 159.171208][T13030] ? __rcu_read_unlock+0x4e/0x70 [ 159.176162][T13030] get_signal+0xdc1/0x1080 [ 159.180588][T13030] arch_do_signal_or_restart+0x95/0x4b0 [ 159.186175][T13030] irqentry_exit_to_user_mode+0x94/0x130 [ 159.191904][T13030] irqentry_exit+0x12/0x50 [ 159.196362][T13030] asm_exc_page_fault+0x26/0x30 [ 159.201257][T13030] RIP: 0033:0x7fa036e6cbe1 [ 159.205737][T13030] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 159.225380][T13030] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 159.231549][T13030] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 159.239561][T13030] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 159.247533][T13030] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 159.255510][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.263587][T13030] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 159.271636][T13030] [ 159.274845][T13030] memory: usage 305720kB, limit 307200kB, failcnt 22899 [ 159.281816][T13030] memory+swap: usage 429872kB, limit 9007199254740988kB, failcnt 0 [ 159.289726][T13030] kmem: usage 5768kB, limit 9007199254740988kB, failcnt 0 [ 159.296838][T13030] Memory cgroup stats for /syz0: [ 159.304364][T13030] cache 307150848 [ 159.306729][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 159.309303][T13030] rss 98304 [ 159.309311][T13030] shmem 307056640 [ 159.328604][T13030] mapped_file 94208 [ 159.332447][T13030] dirty 94208 [ 159.335730][T13030] writeback 942080 [ 159.339440][T13030] workingset_refault_anon 111 [ 159.344128][T13030] workingset_refault_file 307 [ 159.348871][T13030] swap 126697472 [ 159.352455][T13030] swapcached 1294336 [ 159.356364][T13030] pgpgin 251451 [ 159.359871][T13030] pgpgout 176129 [ 159.363411][T13030] pgfault 132349 [ 159.366976][T13030] pgmajfault 47 [ 159.370428][T13030] inactive_anon 176418816 [ 159.374754][T13030] active_anon 129839104 [ 159.378945][T13030] inactive_file 0 [ 159.382584][T13030] active_file 94208 [ 159.386469][T13030] unevictable 0 [ 159.389928][T13030] hierarchical_memory_limit 314572800 [ 159.394300][T13717] loop1: detected capacity change from 0 to 512 [ 159.395349][T13030] hierarchical_memsw_limit 9223372036854771712 [ 159.395360][T13030] total_cache 307150848 [ 159.395367][T13030] total_rss 98304 [ 159.415676][T13030] total_shmem 307056640 [ 159.416402][T13717] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 159.419842][T13030] total_mapped_file 94208 [ 159.419853][T13030] total_dirty 94208 [ 159.436202][T13030] total_writeback 942080 [ 159.439328][T13717] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3481: invalid indirect mapped block 8 (level 2) [ 159.440468][T13030] total_workingset_refault_anon 111 [ 159.458867][T13030] total_workingset_refault_file 307 [ 159.462135][T13717] EXT4-fs (loop1): Remounting filesystem read-only [ 159.464217][T13030] total_swap 126697472 [ 159.470797][T13717] EXT4-fs (loop1): 1 truncate cleaned up [ 159.474728][T13030] total_swapcached 1294336 [ 159.474737][T13030] total_pgpgin 251451 [ 159.474744][T13030] total_pgpgout 176129 [ 159.474751][T13030] total_pgfault 132349 [ 159.474758][T13030] total_pgmajfault 47 [ 159.474764][T13030] total_inactive_anon 176418816 [ 159.474772][T13030] total_active_anon 129839104 [ 159.481975][T13717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.484777][T13030] total_inactive_file 0 [ 159.488739][T13717] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 159.492765][T13030] total_active_file 94208 [ 159.492773][T13030] total_unevictable 0 [ 159.492780][T13030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 159.498573][T13717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.500807][T13030] ,cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13058,uid=0 [ 159.560798][T13715] loop2: detected capacity change from 0 to 128 [ 159.568741][T13030] Memory cgroup out of memory: Killed process 13058 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:41088kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 159.581799][T13715] vfat filesystem being mounted at /395/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 159.887961][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3479'. [ 159.920961][T13741] loop3: detected capacity change from 0 to 512 [ 159.949292][ T29] audit: type=1326 audit(8000002790.497:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13730 comm="syz.1.3486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a01294bd9 code=0x7ffc0000 [ 159.976512][T13029] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.986464][T13029] CPU: 0 PID: 13029 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 159.996660][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 160.006701][T13029] Call Trace: [ 160.009981][T13029] [ 160.013073][T13029] dump_stack_lvl+0xf2/0x150 [ 160.017662][T13029] dump_stack+0x15/0x20 [ 160.021810][T13029] dump_header+0x83/0x2d0 [ 160.026128][T13029] oom_kill_process+0x33e/0x4c0 [ 160.030983][T13029] out_of_memory+0x9af/0xbe0 [ 160.035787][T13029] mem_cgroup_out_of_memory+0x13e/0x190 [ 160.041353][T13029] try_charge_memcg+0x745/0xcd0 [ 160.046233][T13029] ? __alloc_pages_noprof+0x194/0x360 [ 160.051701][T13029] ? __rcu_read_unlock+0x4e/0x70 [ 160.056676][T13029] __mem_cgroup_charge+0x63/0x100 [ 160.061714][T13029] shmem_get_folio_gfp+0x480/0xb70 [ 160.066823][T13029] shmem_write_begin+0xa0/0x1c0 [ 160.071719][T13029] generic_perform_write+0x1d5/0x410 [ 160.077000][T13029] shmem_file_write_iter+0xc8/0xf0 [ 160.082218][T13029] __kernel_write_iter+0x24f/0x4e0 [ 160.087400][T13029] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 160.093211][T13029] dump_user_range+0x3a7/0x550 [ 160.097992][T13029] elf_core_dump+0x1aeb/0x1c30 [ 160.102834][T13029] ? 0xffffffffff600000 [ 160.106984][T13029] do_coredump+0xff6/0x1860 [ 160.111512][T13029] ? __rcu_read_unlock+0x4e/0x70 [ 160.116449][T13029] get_signal+0xdc1/0x1080 [ 160.120860][T13029] arch_do_signal_or_restart+0x95/0x4b0 [ 160.126433][T13029] irqentry_exit_to_user_mode+0x94/0x130 [ 160.132216][T13029] irqentry_exit+0x12/0x50 [ 160.136624][T13029] asm_exc_page_fault+0x26/0x30 [ 160.141469][T13029] RIP: 0033:0x7fa036e6cbe1 [ 160.145948][T13029] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 160.165668][T13029] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 160.171724][T13029] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 160.179692][T13029] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 160.187782][T13029] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 160.195820][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.203780][T13029] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 160.211744][T13029] [ 160.214855][T13029] memory: usage 306200kB, limit 307200kB, failcnt 23220 [ 160.222599][T13029] memory+swap: usage 429192kB, limit 9007199254740988kB, failcnt 0 [ 160.230835][T13029] kmem: usage 5620kB, limit 9007199254740988kB, failcnt 0 [ 160.238017][T13029] Memory cgroup stats for /syz0: [ 160.265086][T13741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.310892][T13741] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.367179][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.430196][T13764] loop1: detected capacity change from 0 to 512 [ 160.471595][T13764] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 160.508639][T13764] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.3495: invalid indirect mapped block 8 (level 2) [ 160.549242][T13764] EXT4-fs (loop1): Remounting filesystem read-only [ 160.563875][T13764] EXT4-fs (loop1): 1 truncate cleaned up [ 160.621386][T13764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.667891][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3498'. [ 160.674698][T13764] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 160.686924][T13764] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.763121][ C0] vcan0: j1939_tp_rxtimer: 0xffff888107fc7600: rx timeout, send abort [ 160.816924][T13783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3502'. [ 160.821655][T13785] loop3: detected capacity change from 0 to 512 [ 160.848789][T13788] openvswitch: netlink: Key type 304 is out of range max 32 [ 160.869266][T13029] cache 297222144 [ 160.873072][T13029] rss 61440 [ 160.876249][T13029] shmem 297127936 [ 160.879871][T13029] mapped_file 94208 [ 160.883698][T13029] dirty 94208 [ 160.887063][T13029] writeback 2060288 [ 160.890868][T13029] workingset_refault_anon 111 [ 160.895619][T13029] workingset_refault_file 307 [ 160.900299][T13029] swap 125591552 [ 160.903887][T13029] swapcached 2404352 [ 160.907782][T13029] pgpgin 255986 [ 160.911263][T13029] pgpgout 182820 [ 160.913801][T13797] bridge0: port 3(vlan2) entered blocking state [ 160.915094][T13029] pgfault 132620 [ 160.921056][T13797] bridge0: port 3(vlan2) entered disabled state [ 160.924718][T13029] pgmajfault 47 [ 160.924726][T13029] inactive_anon 256638976 [ 160.924733][T13029] active_anon 41373696 [ 160.924739][T13029] inactive_file 94208 [ 160.924745][T13029] active_file 0 [ 160.924751][T13029] unevictable 0 [ 160.924756][T13029] hierarchical_memory_limit 314572800 [ 160.924764][T13029] hierarchical_memsw_limit 9223372036854771712 [ 160.924772][T13029] total_cache 297222144 [ 160.943560][T13785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.946874][T13029] total_rss 61440 [ 160.946883][T13029] total_shmem 297127936 [ 160.946891][T13029] total_mapped_file 94208 [ 160.956100][T13785] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.959229][T13029] total_dirty 94208 [ 160.965617][T13797] vlan2: entered allmulticast mode [ 160.969466][T13029] total_writeback 2060288 [ 160.969475][T13029] total_workingset_refault_anon 111 [ 160.969483][T13029] total_workingset_refault_file 307 [ 161.028307][T13029] total_swap 125591552 [ 161.032387][T13029] total_swapcached 2404352 [ 161.036795][T13029] total_pgpgin 255986 [ 161.040774][T13029] total_pgpgout 182820 [ 161.040783][T13029] total_pgfault 132620 [ 161.040791][T13029] total_pgmajfault 47 [ 161.053043][T13029] total_inactive_anon 256638976 [ 161.057907][T13029] total_active_anon 41373696 [ 161.062608][T13029] total_inactive_file 94208 [ 161.067152][T13029] total_active_file 0 [ 161.071129][T13029] total_unevictable 0 [ 161.075142][T13029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13030,uid=0 [ 161.090845][T13029] Memory cgroup out of memory: Killed process 13030 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:33664kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 161.110520][T13797] vlan2: left allmulticast mode [ 161.117208][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.136861][T13789] vcan0 speed is unknown, defaulting to 1000 [ 161.312729][ C0] vcan0: j1939_tp_rxtimer: 0xffff888107fc7600: abort rx timeout. Force session deactivation [ 161.347209][T13820] loop3: detected capacity change from 0 to 512 [ 161.361093][T13822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9232 sclass=netlink_route_socket pid=13822 comm=syz.1.3517 [ 161.380212][T13825] loop2: detected capacity change from 0 to 128 [ 161.388409][T13820] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 161.398541][T13820] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.3515: invalid indirect mapped block 8 (level 2) [ 161.413257][T13825] vfat filesystem being mounted at /399/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 161.432941][T13820] EXT4-fs (loop3): Remounting filesystem read-only [ 161.439547][T13820] EXT4-fs (loop3): 1 truncate cleaned up [ 161.458269][T13836] loop4: detected capacity change from 0 to 512 [ 161.484210][T13820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.532947][T13820] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 161.543440][T13836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 161.560187][T13838] loop1: detected capacity change from 0 to 1024 [ 161.583618][T13820] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.607847][T13836] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.618709][T13838] EXT4-fs: Ignoring removed i_version option [ 161.659152][T13838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.689125][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 161.774457][T13838] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 161.812943][T13857] vlan3: entered promiscuous mode [ 161.818069][T13857] ip6gretap0: entered promiscuous mode [ 161.826087][T13857] ip6gretap0: left promiscuous mode [ 161.899270][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3527'. [ 161.913369][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.999867][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'. [ 162.013878][T13877] loop1: detected capacity change from 0 to 512 [ 162.041251][T13877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.064737][T13877] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.114916][T13894] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 162.125817][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 162.148971][T13896] FAULT_INJECTION: forcing a failure. [ 162.148971][T13896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.162243][T13896] CPU: 1 PID: 13896 Comm: syz.4.3542 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 162.172447][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 162.182498][T13896] Call Trace: [ 162.185776][T13896] [ 162.188709][T13896] dump_stack_lvl+0xf2/0x150 [ 162.193341][T13896] dump_stack+0x15/0x20 [ 162.197589][T13896] should_fail_ex+0x229/0x230 [ 162.202282][T13896] should_fail+0xb/0x10 [ 162.206521][T13896] should_fail_usercopy+0x1a/0x20 [ 162.211550][T13896] _copy_from_user+0x1e/0xd0 [ 162.216173][T13896] copy_msghdr_from_user+0x54/0x2a0 [ 162.221381][T13896] __sys_sendmsg+0x17d/0x280 [ 162.226029][T13896] __x64_sys_sendmsg+0x46/0x50 [ 162.230928][T13896] x64_sys_call+0xb25/0x2d70 [ 162.235577][T13896] do_syscall_64+0xc9/0x1c0 [ 162.240100][T13896] ? clear_bhb_loop+0x55/0xb0 [ 162.244813][T13896] ? clear_bhb_loop+0x55/0xb0 [ 162.249553][T13896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.255649][T13896] RIP: 0033:0x7f4d96de1bd9 [ 162.260156][T13896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.279769][T13896] RSP: 002b:00007f4d96063048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.288192][T13896] RAX: ffffffffffffffda RBX: 00007f4d96f6ff60 RCX: 00007f4d96de1bd9 [ 162.296257][T13896] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 162.304237][T13896] RBP: 00007f4d960630a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.312253][T13896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.320279][T13896] R13: 000000000000000b R14: 00007f4d96f6ff60 R15: 00007ffdd8057278 [ 162.328255][T13896] [ 162.380124][T13903] loop3: detected capacity change from 0 to 512 [ 162.427063][T13906] team0: Device ipvlan0 failed to register rx_handler [ 162.441407][T13903] EXT4-fs: Ignoring removed oldalloc option [ 162.457823][T13910] loop2: detected capacity change from 0 to 128 [ 162.469495][T13903] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 162.477541][T13903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=84fc01c, mo2=0002] [ 162.488802][T13913] loop4: detected capacity change from 0 to 512 [ 162.497615][T13915] vhci_hcd: invalid port number 100 [ 162.510852][T13910] vfat filesystem being mounted at /406/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 162.539814][T13913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.553181][T13903] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 162.562684][T13903] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 162.586910][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.594578][T13910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.604548][T13913] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.637845][T13903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.669230][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 162.689198][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.696632][T13910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.706504][T13903] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 162.733081][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.759149][T13922] vcan0 speed is unknown, defaulting to 1000 [ 162.875044][T13944] loop3: detected capacity change from 0 to 256 [ 162.944873][T13953] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.954512][T13953] loop1: detected capacity change from 0 to 128 [ 162.971994][T13953] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 163.032610][T13959] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 163.034471][T13967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=13967 comm=syz.4.3565 [ 163.039275][T13959] loop3: detected capacity change from 0 to 512 [ 163.200334][T13972] loop2: detected capacity change from 0 to 128 [ 163.209575][T13959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.230711][T13959] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.245579][T13972] FAT-fs (loop2): Directory bread(block 160) failed [ 163.263727][T13972] FAT-fs (loop2): Directory bread(block 161) failed [ 163.275196][T13959] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.3561: corrupted inode contents [ 163.300611][T13972] FAT-fs (loop2): Directory bread(block 162) failed [ 163.316427][T13959] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz.3.3561: mark_inode_dirty error [ 163.333080][T13972] FAT-fs (loop2): Directory bread(block 163) failed [ 163.352136][ T30] oom_reaper: reaped process 13030 (syz.0.3297), now anon-rss:32kB, file-rss:33664kB, shmem-rss:0kB [ 163.364596][T13972] FAT-fs (loop2): Directory bread(block 164) failed [ 163.370534][T13074] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 163.372881][T13959] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz.3.3561: corrupted inode contents [ 163.380994][T13074] CPU: 0 PID: 13074 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 163.396221][T13972] FAT-fs (loop2): Directory bread(block 165) failed [ 163.402957][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 163.402972][T13074] Call Trace: [ 163.402979][T13074] [ 163.402985][T13074] dump_stack_lvl+0xf2/0x150 [ 163.422874][T13972] FAT-fs (loop2): Directory bread(block 166) failed [ 163.422915][T13074] dump_stack+0x15/0x20 [ 163.428836][T13959] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3561: mark_inode_dirty error [ 163.430477][T13074] dump_header+0x83/0x2d0 [ 163.439378][T13972] FAT-fs (loop2): Directory bread(block 167) failed [ 163.441231][T13074] oom_kill_process+0x33e/0x4c0 [ 163.468292][T13074] out_of_memory+0x9af/0xbe0 [ 163.471056][T13972] vfat filesystem being mounted at /410/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 163.472888][T13074] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 163.472991][T13074] mem_cgroup_out_of_memory+0x13e/0x190 [ 163.516801][T13074] try_charge_memcg+0x745/0xcd0 [ 163.521672][T13074] ? __alloc_pages_noprof+0x194/0x360 [ 163.527065][T13074] ? __rcu_read_unlock+0x4e/0x70 [ 163.532028][T13074] __mem_cgroup_charge+0x63/0x100 [ 163.533354][T13972] FAT-fs (loop2): Directory bread(block 160) failed [ 163.537121][T13074] shmem_get_folio_gfp+0x480/0xb70 [ 163.537152][T13074] shmem_write_begin+0xa0/0x1c0 [ 163.553744][T13074] generic_perform_write+0x1d5/0x410 [ 163.554784][T13972] FAT-fs (loop2): Directory bread(block 161) failed [ 163.559033][T13074] shmem_file_write_iter+0xc8/0xf0 [ 163.570807][T13074] __kernel_write_iter+0x24f/0x4e0 [ 163.575934][T13074] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 163.581759][T13074] dump_user_range+0x3a7/0x550 [ 163.583332][T13972] netlink: 'syz.2.3567': attribute type 10 has an invalid length. [ 163.586567][T13074] elf_core_dump+0x1aeb/0x1c30 [ 163.599209][T13074] ? 0xffffffffff600000 [ 163.603435][T13074] do_coredump+0xff6/0x1860 [ 163.608019][T13074] ? __rcu_read_unlock+0x4e/0x70 [ 163.612999][T13074] get_signal+0xdc1/0x1080 [ 163.617495][T13074] arch_do_signal_or_restart+0x95/0x4b0 [ 163.623114][T13074] irqentry_exit_to_user_mode+0x94/0x130 [ 163.628828][T13074] irqentry_exit+0x12/0x50 [ 163.633268][T13074] asm_exc_page_fault+0x26/0x30 [ 163.638139][T13074] RIP: 0033:0x7fa036e6cbe1 [ 163.642563][T13074] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 163.662354][T13074] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 163.668462][T13074] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 163.676434][T13074] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 163.684435][T13074] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 163.692411][T13074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.700409][T13074] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 163.708394][T13074] [ 163.712879][T13074] memory: usage 307200kB, limit 307200kB, failcnt 27600 [ 163.719943][T13074] memory+swap: usage 431156kB, limit 9007199254740988kB, failcnt 0 [ 163.727879][T13074] kmem: usage 5708kB, limit 9007199254740988kB, failcnt 0 [ 163.735052][T13074] Memory cgroup stats for /syz0: [ 163.737676][T13074] cache 307601408 [ 163.741620][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.742645][T13074] rss 61440 [ 163.758348][T13074] shmem 307507200 [ 163.761990][T13074] mapped_file 94208 [ 163.765789][T13074] dirty 94208 [ 163.769116][T13074] writeback 1064960 [ 163.773006][T13074] workingset_refault_anon 111 [ 163.777765][T13074] workingset_refault_file 307 [ 163.782520][T13074] swap 126930944 [ 163.786085][T13074] swapcached 1064960 [ 163.789460][T13983] loop1: detected capacity change from 0 to 4096 [ 163.789960][T13074] pgpgin 266622 [ 163.789968][T13074] pgpgout 191249 [ 163.789974][T13074] pgfault 133287 [ 163.807037][T13074] pgmajfault 47 [ 163.810092][T13983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.810513][T13074] inactive_anon 148488192 [ 163.810521][T13074] active_anon 159084544 [ 163.810528][T13074] inactive_file 0 [ 163.835038][T13074] active_file 94208 [ 163.838873][T13074] unevictable 0 [ 163.842324][T13074] hierarchical_memory_limit 314572800 [ 163.847710][T13074] hierarchical_memsw_limit 9223372036854771712 [ 163.853887][T13074] total_cache 307601408 [ 163.858094][T13074] total_rss 61440 [ 163.861747][T13074] total_shmem 307507200 [ 163.865894][T13074] total_mapped_file 94208 [ 163.870338][T13074] total_dirty 94208 [ 163.874151][T13074] total_writeback 1064960 [ 163.878527][T13074] total_workingset_refault_anon 111 [ 163.883739][T13074] total_workingset_refault_file 307 [ 163.888922][T13074] total_swap 126930944 [ 163.892999][T13074] total_swapcached 1064960 [ 163.897409][T13074] total_pgpgin 266622 [ 163.901562][T13074] total_pgpgout 191249 [ 163.905666][T13074] total_pgfault 133287 [ 163.909748][T13074] total_pgmajfault 47 [ 163.913751][T13074] total_inactive_anon 148488192 [ 163.918620][T13074] total_active_anon 159084544 [ 163.923288][T13074] total_inactive_file 0 [ 163.927455][T13074] total_active_file 94208 [ 163.931864][T13074] total_unevictable 0 [ 163.935932][T13074] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13029,uid=0 [ 163.951091][T13074] Memory cgroup out of memory: Killed process 13029 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:39808kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 164.029880][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.053705][T13986] loop4: detected capacity change from 0 to 512 [ 164.061178][T13986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 164.079934][T13986] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 164.080669][T13988] netlink: 'syz.3.3571': attribute type 27 has an invalid length. [ 164.103931][T13986] EXT4-fs (loop4): 1 truncate cleaned up [ 164.110172][T13986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.252825][T13990] loop3: detected capacity change from 0 to 512 [ 164.259530][T13990] EXT4-fs (loop3): invalid first ino: 0 [ 164.274180][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 164.274193][ T29] audit: type=1326 audit(8000002794.502:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.361967][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.371096][ T29] audit: type=1326 audit(8000002794.530:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.371125][ T29] audit: type=1326 audit(8000002794.530:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.371276][ T29] audit: type=1326 audit(8000002794.530:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.442096][ T29] audit: type=1326 audit(8000002794.530:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.465828][ T29] audit: type=1326 audit(8000002794.530:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.489949][ T29] audit: type=1326 audit(8000002794.530:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.499999][T14006] loop1: detected capacity change from 0 to 512 [ 164.513556][ T29] audit: type=1326 audit(8000002794.530:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.530690][T14006] EXT4-fs: Ignoring removed nobh option [ 164.543323][ T29] audit: type=1326 audit(8000002794.530:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.560095][T14006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.572218][ T29] audit: type=1326 audit(8000002794.530:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13998 comm="syz.2.3574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5211432bd9 code=0x7ffc0000 [ 164.670650][T14010] loop4: detected capacity change from 0 to 1024 [ 164.687010][T14006] EXT4-fs (loop1): 1 truncate cleaned up [ 164.693613][T14006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.922514][T13994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.930628][T13994] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.940626][T13994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.035434][T14010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.202427][T14019] loop3: detected capacity change from 0 to 128 [ 165.255608][T14026] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 165.314753][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.340170][T10887] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.365349][T14028] loop3: detected capacity change from 0 to 128 [ 165.372003][T14028] EXT4-fs: Ignoring removed nobh option [ 165.377961][T10887] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.399596][T14028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.419073][T14028] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.436702][T10887] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.474030][T13060] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 165.480774][T10887] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.484222][T13060] CPU: 1 PID: 13060 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 165.513970][T13060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.521194][T10887] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.524113][T13060] Call Trace: [ 165.524122][T13060] [ 165.524129][T13060] dump_stack_lvl+0xf2/0x150 [ 165.552870][T14035] loop4: detected capacity change from 0 to 512 [ 165.556156][T13060] dump_stack+0x15/0x20 [ 165.566733][T13060] dump_header+0x83/0x2d0 [ 165.571062][T13060] oom_kill_process+0x33e/0x4c0 [ 165.574601][T14035] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.575927][T13060] out_of_memory+0x9af/0xbe0 [ 165.586904][T13060] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 165.592673][T14035] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 165.592969][T13060] mem_cgroup_out_of_memory+0x13e/0x190 [ 165.606193][T10887] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.606660][T13060] try_charge_memcg+0x745/0xcd0 [ 165.631127][T13060] ? __alloc_pages_noprof+0x194/0x360 [ 165.636691][T13060] ? __rcu_read_unlock+0x4e/0x70 [ 165.641641][T13060] __mem_cgroup_charge+0x63/0x100 [ 165.646733][T13060] shmem_get_folio_gfp+0x480/0xb70 [ 165.648476][T10887] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.651855][T13060] shmem_write_begin+0xa0/0x1c0 [ 165.678075][T13060] generic_perform_write+0x1d5/0x410 [ 165.683404][T13060] shmem_file_write_iter+0xc8/0xf0 [ 165.688636][T13060] __kernel_write_iter+0x24f/0x4e0 [ 165.693790][T13060] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 165.699653][T13060] dump_user_range+0x3a7/0x550 [ 165.700806][T10887] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.704478][T13060] elf_core_dump+0x1aeb/0x1c30 [ 165.728892][T13060] ? 0xffffffffff600000 [ 165.733096][T13060] do_coredump+0xff6/0x1860 [ 165.737684][T13060] ? __rcu_read_unlock+0x4e/0x70 [ 165.742634][T13060] get_signal+0xdc1/0x1080 [ 165.747060][T13060] arch_do_signal_or_restart+0x95/0x4b0 [ 165.752701][T13060] irqentry_exit_to_user_mode+0x94/0x130 [ 165.754982][T10887] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /228/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 165.758365][T13060] irqentry_exit+0x12/0x50 [ 165.784096][T13060] asm_exc_page_fault+0x26/0x30 [ 165.788958][T13060] RIP: 0033:0x7fa036e6cbe1 [ 165.793430][T13060] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 165.802320][T10887] EXT4-fs error (device loop1): ext4_empty_dir:3127: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 165.813043][T13060] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 165.813061][T13060] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 165.813073][T13060] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 165.813086][T13060] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 165.862587][T13060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.870566][T13060] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 165.878543][T13060] [ 165.882292][T13060] memory: usage 307200kB, limit 307200kB, failcnt 28398 [ 165.889754][T13060] memory+swap: usage 430788kB, limit 9007199254740988kB, failcnt 0 [ 165.897679][T13060] kmem: usage 5584kB, limit 9007199254740988kB, failcnt 0 [ 165.904783][T13060] Memory cgroup stats for /syz0: [ 165.913871][T13060] cache 307351552 [ 165.922672][T13060] rss 61440 [ 165.925815][T13060] shmem 307257344 [ 165.929503][T13060] mapped_file 94208 [ 165.933359][T13060] dirty 94208 [ 165.936627][T13060] writeback 1441792 [ 165.940550][T13060] workingset_refault_anon 111 [ 165.945218][T13060] workingset_refault_file 307 [ 165.950025][T13060] swap 126554112 [ 165.953634][T13060] swapcached 1441792 [ 165.957569][T13060] pgpgin 275679 [ 165.961105][T13060] pgpgout 200275 [ 165.964643][T13060] pgfault 133854 [ 165.968174][T13060] pgmajfault 47 [ 165.971754][T13060] inactive_anon 191881216 [ 165.976075][T13060] active_anon 114782208 [ 165.980227][T13060] inactive_file 0 [ 165.984068][T13060] active_file 94208 [ 165.987909][T13060] unevictable 0 [ 165.991352][T13060] hierarchical_memory_limit 314572800 [ 165.997008][T13060] hierarchical_memsw_limit 9223372036854771712 [ 166.003151][T13060] total_cache 307351552 [ 166.007701][T13060] total_rss 61440 [ 166.011368][T13060] total_shmem 307257344 [ 166.015662][T13060] total_mapped_file 94208 [ 166.019979][T13060] total_dirty 94208 [ 166.023868][T13060] total_writeback 1441792 [ 166.028224][T13060] total_workingset_refault_anon 111 [ 166.033409][T13060] total_workingset_refault_file 307 [ 166.038628][T13060] total_swap 126554112 [ 166.042765][T13060] total_swapcached 1441792 [ 166.047184][T13060] total_pgpgin 275679 [ 166.049009][T14035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 166.051141][T13060] total_pgpgout 200275 [ 166.051150][T13060] total_pgfault 133854 [ 166.051156][T13060] total_pgmajfault 47 [ 166.051162][T13060] total_inactive_anon 191881216 [ 166.051169][T13060] total_active_anon 114782208 [ 166.051175][T13060] total_inactive_file 0 [ 166.051198][T13060] total_active_file 94208 [ 166.051204][T13060] total_unevictable 0 [ 166.059125][T14035] System zones: [ 166.063144][T13060] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0 [ 166.067202][T14035] 1-12 [ 166.067479][T14035] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.3586: corrupted in-inode xattr: e_value size too large [ 166.071245][T13060] ,oom_memcg= [ 166.076457][T14035] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3586: couldn't read orphan inode 15 (err -117) [ 166.080693][T13060] /syz0,task_memcg= [ 166.086080][T14035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.089123][T13060] /syz0,task=syz.0.3297,pid=13027,uid=0 [ 166.159109][T13060] Memory cgroup out of memory: Killed process 13027 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:38400kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 166.202539][T13090] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.239744][T11788] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.251573][T14042] loop2: detected capacity change from 0 to 512 [ 166.273224][T14042] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 166.292425][T14042] EXT4-fs (loop2): 1 truncate cleaned up [ 166.306531][T14042] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.319585][T10887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.342703][T13746] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.367396][ T8359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.407945][T13746] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.417047][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.460980][T13746] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.473405][T14067] FAULT_INJECTION: forcing a failure. [ 166.473405][T14067] name failslab, interval 1, probability 0, space 0, times 0 [ 166.486052][T14067] CPU: 1 PID: 14067 Comm: syz.4.3596 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 166.496202][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 166.506255][T14067] Call Trace: [ 166.509577][T14067] [ 166.512531][T14067] dump_stack_lvl+0xf2/0x150 [ 166.517171][T14067] dump_stack+0x15/0x20 [ 166.521363][T14067] should_fail_ex+0x229/0x230 [ 166.526042][T14067] ? __alloc_skb+0x10b/0x300 [ 166.530634][T14067] __should_failslab+0x92/0xa0 [ 166.535408][T14067] should_failslab+0x9/0x20 [ 166.539921][T14067] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 166.545795][T14067] __alloc_skb+0x10b/0x300 [ 166.550390][T14067] netlink_alloc_large_skb+0xad/0xe0 [ 166.555692][T14067] netlink_sendmsg+0x3b4/0x6e0 [ 166.560531][T14067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.565881][T14067] __sock_sendmsg+0x140/0x180 [ 166.570622][T14067] ____sys_sendmsg+0x312/0x410 [ 166.575399][T14067] __sys_sendmsg+0x1e9/0x280 [ 166.580040][T14067] __x64_sys_sendmsg+0x46/0x50 [ 166.584875][T14067] x64_sys_call+0xb25/0x2d70 [ 166.589539][T14067] do_syscall_64+0xc9/0x1c0 [ 166.594068][T14067] ? clear_bhb_loop+0x55/0xb0 [ 166.598754][T14067] ? clear_bhb_loop+0x55/0xb0 [ 166.603438][T14067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.609404][T14067] RIP: 0033:0x7f4d96de1bd9 [ 166.613822][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.633433][T14067] RSP: 002b:00007f4d96063048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.641870][T14067] RAX: ffffffffffffffda RBX: 00007f4d96f6ff60 RCX: 00007f4d96de1bd9 [ 166.649840][T14067] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 166.657826][T14067] RBP: 00007f4d960630a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.665811][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.673804][T14067] R13: 000000000000000b R14: 00007f4d96f6ff60 R15: 00007ffdd8057278 [ 166.681779][T14067] [ 166.701705][T14040] vcan0 speed is unknown, defaulting to 1000 [ 166.738870][T13746] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.874303][T14040] chnl_net:caif_netlink_parms(): no params data found [ 166.916274][T13746] bridge_slave_1: left allmulticast mode [ 166.921987][T13746] bridge_slave_1: left promiscuous mode [ 166.927711][T13746] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.060265][T13746] bridge_slave_0: left allmulticast mode [ 167.066032][T13746] bridge_slave_0: left promiscuous mode [ 167.071685][T13746] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.095155][T14098] random: crng reseeded on system resumption [ 167.235400][T14099] loop3: detected capacity change from 0 to 512 [ 167.281158][T14099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.316124][T14099] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.355820][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.468762][T13746] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.481893][T13746] bond_slave_0: left promiscuous mode [ 167.495900][T13746] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.512224][T13746] bond_slave_1: left promiscuous mode [ 167.521840][T13746] bond0 (unregistering): Released all slaves [ 167.531377][T13746] bond1 (unregistering): Released all slaves [ 167.543499][T13746] bond2 (unregistering): Released all slaves [ 167.633164][T14040] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.640274][T14040] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.647530][T14040] bridge_slave_0: entered allmulticast mode [ 167.665318][T14040] bridge_slave_0: entered promiscuous mode [ 167.695127][T14040] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.702228][T14040] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.737574][T14040] bridge_slave_1: entered allmulticast mode [ 167.744086][T14040] bridge_slave_1: entered promiscuous mode [ 167.762857][T14132] loop3: detected capacity change from 0 to 512 [ 167.791573][T14123] tun0: tun_chr_ioctl cmd 2148553947 [ 167.806663][T14132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.831362][T14069] vcan0 speed is unknown, defaulting to 1000 [ 167.839888][T13746] team0: left promiscuous mode [ 167.844677][T13746] team_slave_0: left promiscuous mode [ 167.850698][T13746] team_slave_1: left promiscuous mode [ 167.860099][T13746] dummy0: left promiscuous mode [ 167.866436][T13746] hsr_slave_0: left promiscuous mode [ 167.872285][T13746] hsr_slave_1: left promiscuous mode [ 167.877894][T14132] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.895660][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.903268][T13746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.933110][T13746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.940552][T13746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.962256][T13746] veth1_vlan: left promiscuous mode [ 167.967544][T13746] veth0_vlan: left promiscuous mode [ 168.006233][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.058830][T14149] loop4: detected capacity change from 0 to 512 [ 168.073613][T14149] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 34)! [ 168.083794][T14149] EXT4-fs (loop4): group descriptors corrupted! [ 168.144911][T14151] loop3: detected capacity change from 0 to 1024 [ 168.173991][T13746] team0 (unregistering): Port device team_slave_1 removed [ 168.190708][T13746] team0 (unregistering): Port device team_slave_0 removed [ 168.201316][T14157] loop4: detected capacity change from 0 to 512 [ 168.217559][T14157] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 168.235155][T14157] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3623: invalid indirect mapped block 8 (level 2) [ 168.242999][T14151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.263457][T14157] EXT4-fs (loop4): Remounting filesystem read-only [ 168.277941][T14157] EXT4-fs (loop4): 1 truncate cleaned up [ 168.287584][T14040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.308532][T14157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.346666][T14157] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 168.354911][T14040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.366422][ T30] oom_reaper: reaped process 13027 (syz.0.3297), now anon-rss:20kB, file-rss:38400kB, shmem-rss:0kB [ 168.379267][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.379941][T14157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.409633][T14040] team0: Port device team_slave_0 added [ 168.416405][T14040] team0: Port device team_slave_1 added [ 168.445123][T13075] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 168.455114][T13075] CPU: 1 PID: 13075 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 168.465270][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 168.475373][T13075] Call Trace: [ 168.478658][T13075] [ 168.481597][T13075] dump_stack_lvl+0xf2/0x150 [ 168.486313][T13075] dump_stack+0x15/0x20 [ 168.490530][T13075] dump_header+0x83/0x2d0 [ 168.494855][T13075] oom_kill_process+0x33e/0x4c0 [ 168.499711][T13075] out_of_memory+0x9af/0xbe0 [ 168.504455][T13075] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 168.510713][T13075] mem_cgroup_out_of_memory+0x13e/0x190 [ 168.516273][T13075] try_charge_memcg+0x745/0xcd0 [ 168.521157][T13075] ? __alloc_pages_noprof+0x194/0x360 [ 168.526628][T13075] ? __rcu_read_unlock+0x4e/0x70 [ 168.531588][T13075] __mem_cgroup_charge+0x63/0x100 [ 168.536700][T13075] shmem_get_folio_gfp+0x480/0xb70 [ 168.541923][T13075] shmem_write_begin+0xa0/0x1c0 [ 168.546786][T13075] generic_perform_write+0x1d5/0x410 [ 168.552086][T13075] shmem_file_write_iter+0xc8/0xf0 [ 168.557209][T13075] __kernel_write_iter+0x24f/0x4e0 [ 168.562404][T13075] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 168.568223][T13075] dump_user_range+0x3a7/0x550 [ 168.573017][T13075] elf_core_dump+0x1aeb/0x1c30 [ 168.577798][T13075] ? 0xffffffffff600000 [ 168.581958][T13075] do_coredump+0xff6/0x1860 [ 168.586462][T13075] ? __rcu_read_unlock+0x4e/0x70 [ 168.591417][T13075] get_signal+0xdc1/0x1080 [ 168.595844][T13075] arch_do_signal_or_restart+0x95/0x4b0 [ 168.601425][T13075] irqentry_exit_to_user_mode+0x94/0x130 [ 168.607069][T13075] irqentry_exit+0x12/0x50 [ 168.611513][T13075] asm_exc_page_fault+0x26/0x30 [ 168.616470][T13075] RIP: 0033:0x7fa036e6cbe1 [ 168.620882][T13075] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 168.640500][T13075] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 168.646573][T13075] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 168.654698][T13075] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 168.662756][T13075] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 168.670891][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.678850][T13075] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 168.686857][T13075] [ 168.690442][T13075] memory: usage 307200kB, limit 307200kB, failcnt 30044 [ 168.698827][T13075] memory+swap: usage 428872kB, limit 9007199254740988kB, failcnt 0 [ 168.706738][T13075] kmem: usage 5476kB, limit 9007199254740988kB, failcnt 0 [ 168.713960][T13075] Memory cgroup stats for /syz0: [ 168.746924][T14040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.758846][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.784978][T14040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.827795][T14171] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 168.865696][T14069] chnl_net:caif_netlink_parms(): no params data found [ 168.878221][T14175] __nla_validate_parse: 4 callbacks suppressed [ 168.878236][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3627'. [ 168.886354][T14040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.900559][T14040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.926506][T14040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.949449][T14175] netlink: 'syz.3.3627': attribute type 16 has an invalid length. [ 168.977822][T14177] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 168.987563][T14177] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 169.003755][T14175] netlink: 'syz.3.3627': attribute type 16 has an invalid length. [ 169.073727][T14040] hsr_slave_0: entered promiscuous mode [ 169.080169][T14040] hsr_slave_1: entered promiscuous mode [ 169.093760][T14040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.116781][T14040] Cannot create hsr debugfs directory [ 169.179155][T14069] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.186296][T14069] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.195183][T14203] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3634'. [ 169.209108][T14069] bridge_slave_0: entered allmulticast mode [ 169.217704][T14069] bridge_slave_0: entered promiscuous mode [ 169.230517][T14069] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.238140][T14069] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.246033][T14069] bridge_slave_1: entered allmulticast mode [ 169.252562][T14069] bridge_slave_1: entered promiscuous mode [ 169.259095][T13075] cache 307093504 [ 169.262754][T13075] rss 61440 [ 169.265895][T13075] shmem 306999296 [ 169.269560][T13075] mapped_file 94208 [ 169.273350][T13075] dirty 94208 [ 169.276745][T13075] writeback 1806336 [ 169.280583][T13075] workingset_refault_anon 111 [ 169.285242][T13075] workingset_refault_file 307 [ 169.289986][T13075] swap 126185472 [ 169.293517][T13075] swapcached 1810432 [ 169.297489][T13075] pgpgin 281948 [ 169.300930][T13075] pgpgout 206517 [ 169.304465][T13075] pgfault 134243 [ 169.308058][T13075] pgmajfault 47 [ 169.311619][T13075] inactive_anon 159244288 [ 169.311628][T13075] active_anon 148840448 [ 169.311636][T13075] inactive_file 0 [ 169.311643][T13075] active_file 94208 [ 169.311651][T13075] unevictable 0 [ 169.311658][T13075] hierarchical_memory_limit 314572800 [ 169.311666][T13075] hierarchical_memsw_limit 9223372036854771712 [ 169.311673][T13075] total_cache 307093504 [ 169.311679][T13075] total_rss 61440 [ 169.311685][T13075] total_shmem 306999296 [ 169.311719][T13075] total_mapped_file 94208 [ 169.311725][T13075] total_dirty 94208 [ 169.311731][T13075] total_writeback 1806336 [ 169.311739][T13075] total_workingset_refault_anon 111 [ 169.311747][T13075] total_workingset_refault_file 307 [ 169.311755][T13075] total_swap 126185472 [ 169.311780][T13075] total_swapcached 1810432 [ 169.311787][T13075] total_pgpgin 281948 [ 169.311794][T13075] total_pgpgout 206517 [ 169.311800][T13075] total_pgfault 134243 [ 169.311806][T13075] total_pgmajfault 47 [ 169.311812][T13075] total_inactive_anon 159244288 [ 169.311818][T13075] total_active_anon 148840448 [ 169.311825][T13075] total_inactive_file 0 [ 169.311831][T13075] total_active_file 94208 [ 169.311837][T13075] total_unevictable 0 [ 169.311897][T13075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13059,uid=0 [ 169.312132][T13075] Memory cgroup out of memory: Killed process 13059 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:36352kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 169.329372][T14207] ipt_REJECT: TCP_RESET invalid for non-tcp [ 169.350445][T14069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.361982][T14215] loop2: detected capacity change from 0 to 512 [ 169.365650][T14069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.384124][T14215] EXT4-fs: Ignoring removed bh option [ 169.512941][T14215] EXT4-fs: Ignoring removed bh option [ 169.519645][T14215] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 169.532746][T14215] EXT4-fs (loop2): 1 truncate cleaned up [ 169.538940][T14215] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.546224][T14219] loop3: detected capacity change from 0 to 1024 [ 169.562471][T14215] EXT4-fs error (device loop2): __ext4_iget:4906: inode #13: block 637534233: comm syz.2.3638: invalid block [ 169.588597][T14069] team0: Port device team_slave_0 added [ 169.598286][T14069] team0: Port device team_slave_1 added [ 169.601056][T14215] EXT4-fs (loop2): Remounting filesystem read-only [ 169.620773][T14069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.627897][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.653956][T14069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.678851][T14219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.692186][ T8359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.711370][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 169.711428][ T29] audit: type=1400 audit(8000002799.523:2622): avc: denied { append } for pid=14218 comm="syz.3.3639" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 169.715291][T14218] Process accounting resumed [ 169.760956][T14069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.767954][T14069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.793881][T14069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.820719][T11788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.852763][T14224] loop2: detected capacity change from 0 to 1024 [ 169.868517][T14224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.886134][T14227] loop3: detected capacity change from 0 to 512 [ 169.893214][T14227] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 169.905739][T14227] block device autoloading is deprecated and will be removed. [ 169.917321][T14227] syz.3.3641: attempt to access beyond end of device [ 169.917321][T14227] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 169.950464][T14224] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3640'. [ 169.959551][T14224] netlink: 652 bytes leftover after parsing attributes in process `syz.2.3640'. [ 169.972571][T14069] hsr_slave_0: entered promiscuous mode [ 169.980047][T14227] EXT4-fs (loop3): couldn't read superblock of external journal [ 169.992301][T14069] hsr_slave_1: entered promiscuous mode [ 170.005180][T14069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.015693][T14069] Cannot create hsr debugfs directory [ 170.046415][T14040] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.066807][T13053] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 170.076665][T13053] CPU: 1 PID: 13053 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 170.086840][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 170.096881][T13053] Call Trace: [ 170.100149][T13053] [ 170.103065][T13053] dump_stack_lvl+0xf2/0x150 [ 170.107774][T13053] dump_stack+0x15/0x20 [ 170.111938][T13053] dump_header+0x83/0x2d0 [ 170.116257][T13053] oom_kill_process+0x33e/0x4c0 [ 170.121163][T13053] out_of_memory+0x9af/0xbe0 [ 170.125805][T13053] mem_cgroup_out_of_memory+0x13e/0x190 [ 170.131404][T13053] try_charge_memcg+0x745/0xcd0 [ 170.136266][T13053] ? __alloc_pages_noprof+0x194/0x360 [ 170.141688][T13053] ? __rcu_read_unlock+0x4e/0x70 [ 170.146658][T13053] __mem_cgroup_charge+0x63/0x100 [ 170.151676][T13053] shmem_get_folio_gfp+0x480/0xb70 [ 170.156781][T13053] shmem_write_begin+0xa0/0x1c0 [ 170.161646][T13053] generic_perform_write+0x1d5/0x410 [ 170.166927][T13053] shmem_file_write_iter+0xc8/0xf0 [ 170.172031][T13053] __kernel_write_iter+0x24f/0x4e0 [ 170.177173][T13053] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 170.183079][T13053] dump_user_range+0x3a7/0x550 [ 170.187887][T13053] elf_core_dump+0x1aeb/0x1c30 [ 170.192675][T13053] ? 0xffffffffff600000 [ 170.196821][T13053] do_coredump+0xff6/0x1860 [ 170.201317][T13053] ? __rcu_read_unlock+0x4e/0x70 [ 170.206273][T13053] get_signal+0xdc1/0x1080 [ 170.210681][T13053] arch_do_signal_or_restart+0x95/0x4b0 [ 170.216280][T13053] irqentry_exit_to_user_mode+0x94/0x130 [ 170.221949][T13053] irqentry_exit+0x12/0x50 [ 170.226354][T13053] asm_exc_page_fault+0x26/0x30 [ 170.231195][T13053] RIP: 0033:0x7fa036e6cbe1 [ 170.235688][T13053] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 170.255308][T13053] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 170.261377][T13053] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 170.269334][T13053] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 170.277363][T13053] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 170.285403][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.293362][T13053] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 170.301322][T13053] [ 170.304556][T13053] memory: usage 307200kB, limit 307200kB, failcnt 30441 [ 170.311503][T13053] memory+swap: usage 431400kB, limit 9007199254740988kB, failcnt 0 [ 170.319403][T13053] kmem: usage 5380kB, limit 9007199254740988kB, failcnt 0 [ 170.326504][T13053] Memory cgroup stats for /syz0: [ 170.358292][T14227] netlink: 'syz.3.3641': attribute type 21 has an invalid length. [ 170.361327][ T8359] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.363272][T14227] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3641'. [ 170.401309][T14040] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.456441][T14238] loop3: detected capacity change from 0 to 259 [ 170.478946][T14040] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.504835][T14245] \b}Y4`Ҙ: renamed from lo (while UP) [ 170.561336][T14254] loop4: detected capacity change from 0 to 128 [ 170.588006][T14040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.600669][T14254] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 170.611210][T14257] xt_limit: Overflow, try lower: 0/0 [ 170.611555][T13053] cache 308187136 [ 170.620761][T13053] rss 61440 [ 170.624166][T13053] shmem 308092928 [ 170.627794][T13053] mapped_file 94208 [ 170.631629][T13053] dirty 94208 [ 170.634968][T13053] writeback 647168 [ 170.638673][T13053] workingset_refault_anon 111 [ 170.643394][T13053] workingset_refault_file 307 [ 170.648056][T13053] swap 127180800 [ 170.651778][T13053] swapcached 815104 [ 170.655570][T13053] pgpgin 289293 [ 170.659016][T13053] pgpgout 213838 [ 170.662664][T13053] pgfault 134706 [ 170.666200][T13053] pgmajfault 47 [ 170.669645][T13053] inactive_anon 229113856 [ 170.673981][T13053] active_anon 79593472 [ 170.678035][T13053] inactive_file 94208 [ 170.681997][T13053] active_file 0 [ 170.685473][T13053] unevictable 0 [ 170.688978][T13053] hierarchical_memory_limit 314572800 [ 170.694340][T13053] hierarchical_memsw_limit 9223372036854771712 [ 170.700503][T13053] total_cache 308187136 [ 170.704638][T13053] total_rss 61440 [ 170.708271][T13053] total_shmem 308092928 [ 170.712491][T13053] total_mapped_file 94208 [ 170.716862][T13053] total_dirty 94208 [ 170.720661][T13053] total_writeback 647168 [ 170.724921][T13053] total_workingset_refault_anon 111 [ 170.730207][T13053] total_workingset_refault_file 307 [ 170.735434][T13053] total_swap 127180800 [ 170.739500][T13053] total_swapcached 815104 [ 170.743831][T13053] total_pgpgin 289293 [ 170.747821][T13053] total_pgpgout 213838 [ 170.751901][T13053] total_pgfault 134706 [ 170.755950][T13053] total_pgmajfault 47 [ 170.760093][T13053] total_inactive_anon 229113856 [ 170.764973][T13053] total_active_anon 79593472 [ 170.769544][T13053] total_inactive_file 94208 [ 170.771743][T14254] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 170.774047][T13053] total_active_file 0 [ 170.789890][T13053] total_unevictable 0 [ 170.793903][T13053] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13069,uid=0 [ 170.808832][T13053] Memory cgroup out of memory: Killed process 13069 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:39488kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 170.828212][T14254] netlink: zone id is out of range [ 170.833321][T14254] netlink: zone id is out of range [ 170.838522][T14254] netlink: zone id is out of range [ 170.843618][T14254] netlink: zone id is out of range [ 170.848766][T14254] netlink: zone id is out of range [ 170.853898][T14254] netlink: zone id is out of range [ 170.859036][T14254] netlink: zone id is out of range [ 170.864132][T14254] netlink: zone id is out of range [ 170.869312][T14254] netlink: zone id is out of range [ 170.923786][T14040] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.939866][T14040] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.946894][T13090] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.958919][T14040] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.970011][T14040] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.013978][T14275] serio: Serial port pts0 [ 171.111045][T14273] geneve1: left promiscuous mode [ 171.116020][T14273] geneve1: left allmulticast mode [ 171.137707][T14278] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3658'. [ 171.147003][T14278] netlink: 652 bytes leftover after parsing attributes in process `syz.3.3658'. [ 171.186442][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3660'. [ 171.220299][T14069] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.249416][T14069] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.251033][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 171.260233][T13100] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 171.274867][T13100] CPU: 1 PID: 13100 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 171.280513][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3661'. [ 171.285076][T13100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.304006][T13100] Call Trace: [ 171.307282][T13100] [ 171.310221][T13100] dump_stack_lvl+0xf2/0x150 [ 171.314854][T13100] dump_stack+0x15/0x20 [ 171.319016][T13100] dump_header+0x83/0x2d0 [ 171.323352][T13100] oom_kill_process+0x33e/0x4c0 [ 171.328214][T13100] out_of_memory+0x9af/0xbe0 [ 171.332828][T13100] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 171.338948][T13100] mem_cgroup_out_of_memory+0x13e/0x190 [ 171.344510][T13100] try_charge_memcg+0x745/0xcd0 [ 171.349371][T13100] ? __alloc_pages_noprof+0x194/0x360 [ 171.354763][T13100] ? __rcu_read_unlock+0x4e/0x70 [ 171.359746][T13100] __mem_cgroup_charge+0x63/0x100 [ 171.364784][T13100] shmem_get_folio_gfp+0x480/0xb70 [ 171.369900][T13100] shmem_write_begin+0xa0/0x1c0 [ 171.374756][T13100] generic_perform_write+0x1d5/0x410 [ 171.380154][T13100] shmem_file_write_iter+0xc8/0xf0 [ 171.385277][T13100] __kernel_write_iter+0x24f/0x4e0 [ 171.390460][T13100] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 171.396295][T13100] dump_user_range+0x3a7/0x550 [ 171.401077][T13100] elf_core_dump+0x1aeb/0x1c30 [ 171.405913][T13100] ? 0xffffffffff600000 [ 171.410066][T13100] do_coredump+0xff6/0x1860 [ 171.414575][T13100] ? __rcu_read_unlock+0x4e/0x70 [ 171.419544][T13100] get_signal+0xdc1/0x1080 [ 171.423984][T13100] arch_do_signal_or_restart+0x95/0x4b0 [ 171.429576][T13100] irqentry_exit_to_user_mode+0x94/0x130 [ 171.435319][T13100] irqentry_exit+0x12/0x50 [ 171.439744][T13100] asm_exc_page_fault+0x26/0x30 [ 171.444657][T13100] RIP: 0033:0x7fa036e6cbe1 [ 171.449064][T13100] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 171.468704][T13100] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 171.474772][T13100] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 171.482822][T13100] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 171.490821][T13100] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 171.498824][T13100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.506830][T13100] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 171.514808][T13100] [ 171.521165][T13100] memory: usage 307200kB, limit 307200kB, failcnt 31561 [ 171.528512][T13100] memory+swap: usage 426296kB, limit 9007199254740988kB, failcnt 0 [ 171.536684][T13100] kmem: usage 5232kB, limit 9007199254740988kB, failcnt 0 [ 171.538944][T14069] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.544103][T13100] Memory cgroup stats for /syz0: [ 171.603864][T14289] vcan0 speed is unknown, defaulting to 1000 [ 171.615482][T14069] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.627213][T13100] cache 303136768 [ 171.630917][T13100] rss 61440 [ 171.631127][T14040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.634008][T13100] shmem 303042560 [ 171.634016][T13100] mapped_file 94208 [ 171.648193][T13100] dirty 0 [ 171.651173][T13100] writeback 4325376 [ 171.654972][T13100] workingset_refault_anon 111 [ 171.659728][T13100] workingset_refault_file 307 [ 171.663353][T14040] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.664644][T13100] swap 123510784 [ 171.664652][T13100] swapcached 4460544 [ 171.664658][T13100] pgpgin 289515 [ 171.664665][T13100] pgpgout 214403 [ 171.685960][T13100] pgfault 134719 [ 171.689515][T13100] pgmajfault 47 [ 171.693010][T13100] inactive_anon 200310784 [ 171.697333][T13100] active_anon 103845888 [ 171.699460][T14040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.701467][T13100] inactive_file 94208 [ 171.701476][T13100] active_file 0 [ 171.701482][T13100] unevictable 0 [ 171.711846][T14040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.715785][T13100] hierarchical_memory_limit 314572800 [ 171.715795][T13100] hierarchical_memsw_limit 9223372036854771712 [ 171.715802][T13100] total_cache 303136768 [ 171.715809][T13100] total_rss 61440 [ 171.715815][T13100] total_shmem 303042560 [ 171.715822][T13100] total_mapped_file 94208 [ 171.715852][T13100] total_dirty 0 [ 171.715859][T13100] total_writeback 4325376 [ 171.739829][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.745271][T13100] total_workingset_refault_anon 111 [ 171.749289][ T5766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.752894][T13100] total_workingset_refault_file 307 [ 171.780681][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.782903][T13100] total_swap 123510784 [ 171.782912][T13100] total_swapcached 4460544 [ 171.782920][T13100] total_pgpgin 289515 [ 171.790129][ T5766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.795271][T13100] total_pgpgout 214403 [ 171.827607][T13100] total_pgfault 134719 [ 171.831669][T13100] total_pgmajfault 47 [ 171.835676][T13100] total_inactive_anon 200310784 [ 171.840519][T13100] total_active_anon 103845888 [ 171.845201][T13100] total_inactive_file 94208 [ 171.849780][T13100] total_active_file 0 [ 171.853761][T13100] total_unevictable 0 [ 171.857792][T13100] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13052,uid=0 [ 171.872906][T13100] Memory cgroup out of memory: Killed process 13052 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:34944kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 172.019495][T14040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.051117][T14069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.081609][T14069] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.124719][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.131852][ T5766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.206157][T14069] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.216577][T14069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.342332][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.349491][ T5766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.462622][T14040] veth0_vlan: entered promiscuous mode [ 172.509330][T14040] veth1_vlan: entered promiscuous mode [ 172.530439][T14069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.574676][T14040] veth0_macvtap: entered promiscuous mode [ 172.591689][T14040] veth1_macvtap: entered promiscuous mode [ 172.615707][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.626249][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.636188][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.646703][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.656516][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.667002][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.690038][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.698696][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.710003][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.720376][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.730905][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.740900][T14040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.751408][T14040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.833015][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.846525][T14354] FAULT_INJECTION: forcing a failure. [ 172.846525][T14354] name failslab, interval 1, probability 0, space 0, times 0 [ 172.859212][T14354] CPU: 1 PID: 14354 Comm: syz.3.3677 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 172.863486][T13075] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 172.869354][T14354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 172.889177][T14354] Call Trace: [ 172.892496][T14354] [ 172.895418][T14354] dump_stack_lvl+0xf2/0x150 [ 172.900052][T14354] dump_stack+0x15/0x20 [ 172.904251][T14354] should_fail_ex+0x229/0x230 [ 172.908923][T14354] ? netdevice_event+0x2b6/0x610 [ 172.913921][T14354] __should_failslab+0x92/0xa0 [ 172.918718][T14354] should_failslab+0x9/0x20 [ 172.923217][T14354] kmalloc_trace_noprof+0x4b/0x2a0 [ 172.928327][T14354] netdevice_event+0x2b6/0x610 [ 172.933160][T14354] ? _raw_spin_lock_irqsave+0x3c/0xb0 [ 172.938567][T14354] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 172.944400][T14354] ? __pfx_del_netdev_ips+0x10/0x10 [ 172.949611][T14354] ? __pfx_pass_all_filter+0x10/0x10 [ 172.954889][T14354] ? __pfx_netdevice_event+0x10/0x10 [ 172.960189][T14354] raw_notifier_call_chain+0x6f/0x1d0 [ 172.965566][T14354] ? up_write+0x30/0xf0 [ 172.969769][T14354] ? mutex_is_locked+0xd/0x20 [ 172.974436][T14354] call_netdevice_notifiers_info+0xae/0x100 [ 172.980380][T14354] unregister_netdevice_many_notify+0x828/0xf00 [ 172.986678][T14354] ? __mutex_lock+0x221/0x8e0 [ 172.991413][T14354] unregister_netdevice_queue+0x1f4/0x220 [ 172.997152][T14354] nsim_destroy+0xa0/0x2f0 [ 173.001567][T14354] __nsim_dev_port_del+0xcd/0x100 [ 173.006658][T14354] nsim_dev_reload_destroy+0x1a6/0x2d0 [ 173.012103][T14354] ? nsim_dev_reload_down+0x6f/0xa0 [ 173.017341][T14354] nsim_dev_reload_down+0x77/0xa0 [ 173.022405][T14354] devlink_reload+0xab/0x5a0 [ 173.026989][T14354] devlink_nl_reload_doit+0x78d/0x900 [ 173.032350][T14354] genl_rcv_msg+0x61b/0x6c0 [ 173.036846][T14354] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 173.043280][T14354] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 173.049233][T14354] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 173.055764][T14354] netlink_rcv_skb+0x12c/0x230 [ 173.060592][T14354] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.065611][T14354] genl_rcv+0x28/0x40 [ 173.069636][T14354] netlink_unicast+0x58d/0x660 [ 173.074443][T14354] netlink_sendmsg+0x5ca/0x6e0 [ 173.079214][T14354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.084492][T14354] __sock_sendmsg+0x140/0x180 [ 173.089154][T14354] ____sys_sendmsg+0x312/0x410 [ 173.093935][T14354] __sys_sendmsg+0x1e9/0x280 [ 173.098551][T14354] __x64_sys_sendmsg+0x46/0x50 [ 173.103321][T14354] x64_sys_call+0xb25/0x2d70 [ 173.107950][T14354] do_syscall_64+0xc9/0x1c0 [ 173.112507][T14354] ? clear_bhb_loop+0x55/0xb0 [ 173.117177][T14354] ? clear_bhb_loop+0x55/0xb0 [ 173.121855][T14354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.127783][T14354] RIP: 0033:0x7f532dae4bd9 [ 173.132187][T14354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.151786][T14354] RSP: 002b:00007f532cd66048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.160229][T14354] RAX: ffffffffffffffda RBX: 00007f532dc72f60 RCX: 00007f532dae4bd9 [ 173.168259][T14354] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000004 [ 173.176280][T14354] RBP: 00007f532cd660a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.184294][T14354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.192252][T14354] R13: 000000000000000b R14: 00007f532dc72f60 R15: 00007fffa6633ee8 [ 173.200282][T14354] [ 173.203305][T13075] CPU: 0 PID: 13075 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 173.213498][T13075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 173.223541][T13075] Call Trace: [ 173.226809][T13075] [ 173.229729][T13075] dump_stack_lvl+0xf2/0x150 [ 173.234314][T13075] dump_stack+0x15/0x20 [ 173.238462][T13075] dump_header+0x83/0x2d0 [ 173.242888][T13075] oom_kill_process+0x33e/0x4c0 [ 173.247728][T13075] out_of_memory+0x9af/0xbe0 [ 173.252308][T13075] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 173.258377][T13075] mem_cgroup_out_of_memory+0x13e/0x190 [ 173.263979][T13075] try_charge_memcg+0x745/0xcd0 [ 173.268964][T13075] ? __alloc_pages_noprof+0x194/0x360 [ 173.274328][T13075] ? __rcu_read_unlock+0x4e/0x70 [ 173.279262][T13075] __mem_cgroup_charge+0x63/0x100 [ 173.284337][T13075] shmem_get_folio_gfp+0x480/0xb70 [ 173.289440][T13075] shmem_write_begin+0xa0/0x1c0 [ 173.294332][T13075] generic_perform_write+0x1d5/0x410 [ 173.299690][T13075] shmem_file_write_iter+0xc8/0xf0 [ 173.304793][T13075] __kernel_write_iter+0x24f/0x4e0 [ 173.309968][T13075] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 173.315866][T13075] dump_user_range+0x3a7/0x550 [ 173.320619][T13075] elf_core_dump+0x1aeb/0x1c30 [ 173.325385][T13075] ? 0xffffffffff600000 [ 173.329582][T13075] do_coredump+0xff6/0x1860 [ 173.334094][T13075] ? __rcu_read_unlock+0x4e/0x70 [ 173.339030][T13075] get_signal+0xdc1/0x1080 [ 173.343512][T13075] arch_do_signal_or_restart+0x95/0x4b0 [ 173.349047][T13075] irqentry_exit_to_user_mode+0x94/0x130 [ 173.354771][T13075] irqentry_exit+0x12/0x50 [ 173.359178][T13075] asm_exc_page_fault+0x26/0x30 [ 173.364054][T13075] RIP: 0033:0x7fa036e6cbe1 [ 173.368481][T13075] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 173.388075][T13075] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 173.394139][T13075] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 173.402189][T13075] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 173.410164][T13075] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 173.418120][T13075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.426118][T13075] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 173.434083][T13075] [ 173.437372][T13075] memory: usage 307200kB, limit 307200kB, failcnt 32753 [ 173.444303][T13075] memory+swap: usage 428084kB, limit 9007199254740988kB, failcnt 0 [ 173.452246][T13075] kmem: usage 5240kB, limit 9007199254740988kB, failcnt 0 [ 173.459406][T13075] Memory cgroup stats for /syz0: [ 173.492975][T14359] loop4: detected capacity change from 0 to 512 [ 173.505800][T14040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.514527][T14040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.523341][T14040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.532251][T14040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.581706][T14069] veth0_vlan: entered promiscuous mode [ 173.587167][T14359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.587280][T14359] ext4 filesystem being mounted at /92/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.628172][ T29] audit: type=1400 audit(8000002803.132:2623): avc: denied { execute } for pid=14358 comm="syz.4.3678" path="pipe:[49382]" dev="pipefs" ino=49382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 173.665994][T14069] veth1_vlan: entered promiscuous mode [ 173.703786][T14069] veth0_macvtap: entered promiscuous mode [ 173.713237][T14368] loop2: detected capacity change from 0 to 4096 [ 173.716183][T14069] veth1_macvtap: entered promiscuous mode [ 173.753829][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.764412][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.765243][T14371] loop4: detected capacity change from 0 to 1024 [ 173.774302][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.774320][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.774337][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.774350][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.782739][T14371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 173.791268][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.838413][T14371] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f04cc01c, mo2=0002] [ 173.840526][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.849908][T14371] System zones: 0-1, 3-36 [ 173.861667][T14069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.871307][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.881782][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.891717][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.902149][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.912073][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.922682][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.932547][T14069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.942974][T14069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.953910][T14069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.979445][T14069] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.988203][T14069] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.997072][T14069] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.005875][T14069] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.036703][T14374] loop4: detected capacity change from 0 to 512 [ 174.056719][T14374] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 174.065255][T14374] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.3683: invalid indirect mapped block 8 (level 2) [ 174.099552][T14374] EXT4-fs (loop4): Remounting filesystem read-only [ 174.110510][T14374] EXT4-fs (loop4): 1 truncate cleaned up [ 174.116623][T14374] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 174.130466][ C1] net_ratelimit: 38 callbacks suppressed [ 174.130484][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.155587][T14386] loop3: detected capacity change from 0 to 512 [ 174.192947][T14386] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.241236][T14386] EXT4-fs error (device loop3): ext4_find_dest_de:2111: inode #12: block 32: comm syz.3.3687: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 174.377302][T14404] __nla_validate_parse: 1 callbacks suppressed [ 174.377318][T14404] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3694'. [ 174.443956][T13075] cache 304566272 [ 174.447628][T13075] rss 81920 [ 174.450735][T13075] shmem 304566272 [ 174.454457][T13075] mapped_file 0 [ 174.457981][T13075] dirty 0 [ 174.460910][T13075] writeback 4026368 [ 174.464704][T13075] workingset_refault_anon 111 [ 174.469441][T13075] workingset_refault_file 307 [ 174.474195][T13075] swap 122699776 [ 174.477839][T13075] swapcached 4026368 [ 174.481778][T13075] pgpgin 295724 [ 174.485258][T13075] pgpgout 220364 [ 174.488849][T13075] pgfault 135112 [ 174.492381][T13075] pgmajfault 47 [ 174.495868][T13075] inactive_anon 180305920 [ 174.497614][T14410] loop3: detected capacity change from 0 to 8192 [ 174.500306][T13075] active_anon 125747200 [ 174.500315][T13075] inactive_file 0 [ 174.500341][T13075] active_file 0 [ 174.500348][T13075] unevictable 0 [ 174.521442][T13075] hierarchical_memory_limit 314572800 [ 174.521685][T14410] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.526793][T13075] hierarchical_memsw_limit 9223372036854771712 [ 174.543500][T13075] total_cache 304566272 [ 174.547640][T13075] total_rss 81920 [ 174.551265][T13075] total_shmem 304566272 [ 174.555613][T13075] total_mapped_file 0 [ 174.559659][T13075] total_dirty 0 [ 174.563186][T13075] total_writeback 4026368 [ 174.567596][T13075] total_workingset_refault_anon 111 [ 174.572781][T13075] total_workingset_refault_file 307 [ 174.577427][T14410] vfat filesystem being mounted at /177/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 174.577974][T13075] total_swap 122699776 [ 174.592606][T13075] total_swapcached 4026368 [ 174.597064][T13075] total_pgpgin 295724 [ 174.601053][T13075] total_pgpgout 220364 [ 174.605121][T13075] total_pgfault 135112 [ 174.609434][T13075] total_pgmajfault 47 [ 174.613526][T13075] total_inactive_anon 180305920 [ 174.618395][T13075] total_active_anon 125747200 [ 174.623101][T13075] total_inactive_file 0 [ 174.627323][T13075] total_active_file 0 [ 174.631322][T13075] total_unevictable 0 [ 174.635293][T13075] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13100,uid=0 [ 174.650307][T13075] Memory cgroup out of memory: Killed process 13100 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:38656kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 174.655182][T14410] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 174.676210][T14410] FAT-fs (loop3): Filesystem has been set read-only [ 174.717678][T14418] loop1: detected capacity change from 0 to 2048 [ 174.774013][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3698'. [ 174.803666][T14418] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 174.892512][T14537] loop2: detected capacity change from 0 to 512 [ 174.917839][T14537] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 174.931660][T14537] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.3704: invalid indirect mapped block 8 (level 2) [ 174.981327][T14540] vcan0 speed is unknown, defaulting to 1000 [ 174.991905][T14537] EXT4-fs (loop2): Remounting filesystem read-only [ 174.999966][T14537] EXT4-fs (loop2): 1 truncate cleaned up [ 175.026887][T14537] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 175.191346][T13096] ================================================================== [ 175.199447][T13096] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 175.209271][T13096] [ 175.211586][T13096] read-write to 0xffffffff860079c0 of 8 bytes by interrupt on cpu 0: [ 175.219642][T13096] tick_do_update_jiffies64+0x112/0x1b0 [ 175.225202][T13096] tick_nohz_handler+0x7c/0x2d0 [ 175.230048][T13096] __hrtimer_run_queues+0x20d/0x5e0 [ 175.235258][T13096] hrtimer_interrupt+0x210/0x7b0 [ 175.240290][T13096] __sysvec_apic_timer_interrupt+0x5c/0x1a0 [ 175.246182][T13096] sysvec_apic_timer_interrupt+0x6e/0x80 [ 175.251853][T13096] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 175.256558][ T29] audit: type=1400 audit(8000002804.609:2624): avc: denied { nlmsg_write } for pid=14544 comm="syz.4.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.257831][T13096] kcsan_setup_watchpoint+0x404/0x410 [ 175.283931][T13096] folios_put_refs+0x1d2/0x2b0 [ 175.288693][T13096] free_pages_and_swap_cache+0x289/0x400 [ 175.294326][T13096] tlb_flush_mmu+0x2cf/0x440 [ 175.298919][T13096] unmap_page_range+0x1e49/0x21f0 [ 175.303951][T13096] unmap_single_vma+0x142/0x1d0 [ 175.308822][T13096] unmap_vmas+0x18d/0x2b0 [ 175.313162][T13096] exit_mmap+0x18f/0x710 [ 175.317411][T13096] __mmput+0x28/0x1d0 [ 175.321500][T13096] mmput+0x4c/0x60 [ 175.325215][T13096] exit_mm+0xe4/0x190 [ 175.329184][T13096] do_exit+0x556/0x1710 [ 175.333325][T13096] do_group_exit+0x102/0x150 [ 175.337906][T13096] get_signal+0xf2f/0x1080 [ 175.342313][T13096] arch_do_signal_or_restart+0x95/0x4b0 [ 175.347844][T13096] syscall_exit_to_user_mode+0x59/0x130 [ 175.353382][T13096] do_syscall_64+0xd6/0x1c0 [ 175.357887][T13096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.363772][T13096] [ 175.366080][T13096] read to 0xffffffff860079c0 of 8 bytes by task 13096 on cpu 1: [ 175.373781][T13096] mem_cgroup_flush_stats_ratelimited+0x29/0x100 [ 175.380123][T13096] count_shadow_nodes+0x6b/0x230 [ 175.385058][T13096] do_shrink_slab+0x5a/0x690 [ 175.389652][T13096] shrink_slab+0x4ed/0x860 [ 175.394065][T13096] shrink_node+0x59a/0x1da0 [ 175.398584][T13096] do_try_to_free_pages+0x3cf/0xc20 [ 175.403784][T13096] try_to_free_mem_cgroup_pages+0x1ea/0x4e0 [ 175.409682][T13096] try_charge_memcg+0x27a/0xcd0 [ 175.414537][T13096] __mem_cgroup_charge+0x63/0x100 [ 175.419552][T13096] shmem_get_folio_gfp+0x480/0xb70 [ 175.424657][T13096] shmem_write_begin+0xa0/0x1c0 [ 175.429495][T13096] generic_perform_write+0x1d5/0x410 [ 175.434778][T13096] shmem_file_write_iter+0xc8/0xf0 [ 175.439884][T13096] __kernel_write_iter+0x24f/0x4e0 [ 175.444988][T13096] dump_user_range+0x3a7/0x550 [ 175.449747][T13096] elf_core_dump+0x1aeb/0x1c30 [ 175.454500][T13096] do_coredump+0xff6/0x1860 [ 175.458995][T13096] get_signal+0xdc1/0x1080 [ 175.463405][T13096] arch_do_signal_or_restart+0x95/0x4b0 [ 175.469029][T13096] irqentry_exit_to_user_mode+0x94/0x130 [ 175.474657][T13096] irqentry_exit+0x12/0x50 [ 175.479094][T13096] asm_exc_page_fault+0x26/0x30 [ 175.483938][T13096] [ 175.486246][T13096] value changed: 0x00000000ffffce25 -> 0x00000000ffffce26 [ 175.493333][T13096] [ 175.495642][T13096] Reported by Kernel Concurrency Sanitizer on: [ 175.501789][T13096] CPU: 1 PID: 13096 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 175.511937][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 175.521985][T13096] ================================================================== [ 175.540941][T14557] loop4: detected capacity change from 0 to 512 [ 175.560327][T14557] EXT4-fs: Ignoring removed bh option [ 175.565752][T14557] EXT4-fs: Ignoring removed bh option [ 175.594528][T14557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.657633][T14557] EXT4-fs (loop4): 1 truncate cleaned up [ 175.769232][T13061] syz.0.3297 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 175.779128][T13061] CPU: 1 PID: 13061 Comm: syz.0.3297 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 175.789278][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 175.799403][T13061] Call Trace: [ 175.802826][T13061] [ 175.805845][T13061] dump_stack_lvl+0xf2/0x150 [ 175.810448][T13061] dump_stack+0x15/0x20 [ 175.814787][T13061] dump_header+0x83/0x2d0 [ 175.819128][T13061] oom_kill_process+0x33e/0x4c0 [ 175.823999][T13061] out_of_memory+0x9af/0xbe0 [ 175.828591][T13061] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 175.834694][T13061] mem_cgroup_out_of_memory+0x13e/0x190 [ 175.840249][T13061] try_charge_memcg+0x745/0xcd0 [ 175.845179][T13061] ? __alloc_pages_noprof+0x194/0x360 [ 175.850782][T13061] ? __rcu_read_unlock+0x4e/0x70 [ 175.855736][T13061] __mem_cgroup_charge+0x63/0x100 [ 175.860782][T13061] shmem_get_folio_gfp+0x480/0xb70 [ 175.865996][T13061] shmem_write_begin+0xa0/0x1c0 [ 175.870864][T13061] generic_perform_write+0x1d5/0x410 [ 175.876268][T13061] shmem_file_write_iter+0xc8/0xf0 [ 175.881486][T13061] __kernel_write_iter+0x24f/0x4e0 [ 175.886699][T13061] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 175.892585][T13061] dump_user_range+0x3a7/0x550 [ 175.897381][T13061] elf_core_dump+0x1aeb/0x1c30 [ 175.902184][T13061] ? 0xffffffffff600000 [ 175.906345][T13061] do_coredump+0xff6/0x1860 [ 175.911015][T13061] ? __rcu_read_unlock+0x4e/0x70 [ 175.916044][T13061] get_signal+0xdc1/0x1080 [ 175.920488][T13061] arch_do_signal_or_restart+0x95/0x4b0 [ 175.926044][T13061] irqentry_exit_to_user_mode+0x94/0x130 [ 175.931742][T13061] irqentry_exit+0x12/0x50 [ 175.936235][T13061] asm_exc_page_fault+0x26/0x30 [ 175.938861][T14566] EXT4-fs error (device loop4): __ext4_iget:4906: inode #13: block 637534233: comm syz.4.3712: invalid block [ 175.941137][T13061] RIP: 0033:0x7fa036e6cbe1 [ 175.954135][T14566] EXT4-fs (loop4): Remounting filesystem read-only [ 175.957130][T13061] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 175.957150][T13061] RSP: 002b:0000000000000020 EFLAGS: 00010217 [ 175.957164][T13061] RAX: 0000000000000000 RBX: 00007fa036ffb038 RCX: 00007fa036e6cbd9 [ 175.957176][T13061] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 175.957187][T13061] RBP: 00007fa036edbe60 R08: 0000000000000000 R09: 0000000000000000 [ 176.013391][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.021526][T13061] R13: 000000000000000b R14: 00007fa036ffb038 R15: 00007ffd51ede3e8 [ 176.029560][T13061] [ 176.033412][T13061] memory: usage 305496kB, limit 307200kB, failcnt 34936 [ 176.053327][T13061] memory+swap: usage 421216kB, limit 9007199254740988kB, failcnt 0 [ 176.061283][T13061] kmem: usage 5160kB, limit 9007199254740988kB, failcnt 0 [ 176.068486][T13061] Memory cgroup stats for /syz0: [ 176.784230][T13061] cache 305893376 [ 176.792924][T13061] rss 73728 [ 176.796087][T13061] shmem 305631232 [ 176.799774][T13061] mapped_file 131072 [ 176.803701][T13061] dirty 4096 [ 176.806955][T13061] writeback 2777088 [ 176.810776][T13061] workingset_refault_anon 111 [ 176.815549][T13061] workingset_refault_file 402 [ 176.820314][T13061] swap 125190144 [ 176.823876][T13061] swapcached 2793472 [ 176.827775][T13061] pgpgin 307252 [ 176.831262][T13061] pgpgout 231871 [ 176.834883][T13061] pgfault 135879 [ 176.838433][T13061] pgmajfault 48 [ 176.841888][T13061] inactive_anon 131022848 [ 176.847144][T13061] active_anon 174792704 [ 176.851340][T13061] inactive_file 4096 [ 176.855220][T13061] active_file 192512 [ 176.859107][T13061] unevictable 0 [ 176.862606][T13061] hierarchical_memory_limit 314572800 [ 176.867984][T13061] hierarchical_memsw_limit 9223372036854771712 [ 176.874145][T13061] total_cache 305893376 [ 176.878286][T13061] total_rss 73728 [ 176.881922][T13061] total_shmem 305631232 [ 176.886115][T13061] total_mapped_file 131072 [ 176.890537][T13061] total_dirty 4096 [ 176.894264][T13061] total_writeback 2777088 [ 176.898761][T13061] total_workingset_refault_anon 111 [ 176.903965][T13061] total_workingset_refault_file 402 [ 176.909708][T13061] total_swap 125190144 [ 176.913772][T13061] total_swapcached 2793472 [ 176.918530][T13061] total_pgpgin 307252 [ 176.922515][T13061] total_pgpgout 231871 [ 176.926600][T13061] total_pgfault 135879 [ 176.930663][T13061] total_pgmajfault 48 [ 176.934806][T13061] total_inactive_anon 131022848 [ 176.939699][T13061] total_active_anon 174792704 [ 176.944429][T13061] total_inactive_file 4096 [ 176.948862][T13061] total_active_file 192512 [ 176.953353][T13061] total_unevictable 0 [ 176.957350][T13061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3297,pid=13043,uid=0 [ 176.972415][T13061] Memory cgroup out of memory: Killed process 13043 (syz.0.3297) total-vm:76912kB, anon-rss:472kB, file-rss:41088kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 178.333381][T13042] syz.0.3297 (13042) used greatest stack depth: 6976 bytes left [ 178.346500][T10471] bridge_slave_1: left allmulticast mode [ 178.352169][T10471] bridge_slave_1: left promiscuous mode [ 178.357849][T10471] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.366012][T10471] bridge_slave_0: left allmulticast mode [ 178.371723][T10471] bridge_slave_0: left promiscuous mode [ 178.377528][T10471] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.563235][T10471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.573902][T10471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.584270][T10471] bond0 (unregistering): (slave team0): Releasing backup interface [ 178.596342][T10471] bond0 (unregistering): Released all slaves [ 178.605476][T10471] bond1 (unregistering): Released all slaves [ 178.670597][T10471] tipc: Left network mode [ 178.756115][T10471] IPVS: stopping master sync thread 8801 ... [ 178.775964][T10471] hsr_slave_0: left promiscuous mode [ 178.781609][T10471] hsr_slave_1: left promiscuous mode [ 178.789267][T10471] dummy0: left promiscuous mode [ 178.794142][T10471] veth1_macvtap: left promiscuous mode [ 178.799714][T10471] veth0_macvtap: left promiscuous mode [ 178.805242][T10471] veth1_vlan: left promiscuous mode [ 178.810476][T10471] veth0_vlan: left promiscuous mode [ 178.892872][T10471] team0 (unregistering): Port device team_slave_1 removed [ 178.903757][T10471] team0 (unregistering): Port device team_slave_0 removed