last executing test programs: 2.363314085s ago: executing program 0 (id=1629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x7, [@union={0x2, 0x5, 0x0, 0x5, 0x1, 0x8, [{0x2, 0x4, 0x82}, {0x0, 0x4, 0x7}, {0x3, 0x0, 0x804}, {0x1, 0x3, 0x43d}, {0x6, 0x5, 0x8}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x3}, @union={0xe, 0x5, 0x0, 0x5, 0x0, 0x2, [{0xc, 0x4, 0x451}, {0x9, 0x5, 0x8}, {0xc, 0x2, 0xff}, {0xb, 0x2, 0x4}, {0x7, 0x0, 0x10}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x3}}]}, {0x0, [0x5f, 0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f00000003c0)=""/151, 0xd3, 0x97, 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x100003c}, 0x18) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x10) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0), 0x0, 0xd2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x3b, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r7}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syslog(0x9, &(0x7f0000000380)=""/87, 0x57) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@empty, 0x0}, &(0x7f0000000480)=0x14) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000000000002003, 0x0) 2.320339139s ago: executing program 1 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000240)=""/35, 0x23}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r5, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) clock_nanosleep(0x9, 0x0, 0x0, 0x0) 1.81426372s ago: executing program 0 (id=1635): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) 1.777300074s ago: executing program 0 (id=1636): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000050) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000780)="e10ea784d395f5d2e39879420a85", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) 1.718291729s ago: executing program 0 (id=1639): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 1.684929242s ago: executing program 0 (id=1640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r1, 0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 1.147719966s ago: executing program 1 (id=1645): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x700, 0x7, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 918.686209ms ago: executing program 2 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="c3043d0000000000300012800884610e0000677265002400010000000500f286940a00005c057b989cbab4e554e03aca29f1"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r1, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2000}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x7ff, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x2, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x890}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x4, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x401}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0x10, r0, 0x81529000) r6 = socket(0x40000000015, 0x5, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004940)=[{&(0x7f0000004e40)="8ad4e3c34c781c6d6c85892028314d9e994c4b5de197604aca59cf14f089c5e446bf8c3cefa4b19af81c9644308919e71bd8128a5f8bcc7858d5e974eae853c0534ef7ee226f038c64dc5b70044910b0e7ba1e2207d4309dc72dcba2bb8893ec2fb45e9045e4339ebdc5bc38e5ce", 0x6e}], 0x1, &(0x7f0000004a00)=ANY=[@ANYBLOB="f000000000000000010000005eb7000075177ff3309da1d8c85f82edfed4bb53954223bd9d5ed15e772b9f42bc28de83c35f12ef0e5a50ee1e38bc77ee86a3f8536afe510f411731dd16ccd50ef88788e58b91dcb90a33af1104b199f023b2f1e848bd5ff446f4329d0c647852abf81992adc4ced5ba47f8037ae4306f519b835659f6a0160f94ec6b6265ff069a1950dd0e47a544f92d6fe23183dd00ebcd83cc8940e4e153f0ac7f22c599dc6a4241df91d1b88b78ac2a3b5b8a927325d8fa797bd2a1b20c129daae788155431779e9208e1afc14ac6d27d2124c6db6569a7e89a1df7a849af490ace439998b27e0088000000000000000c0100000a0000004587e2218aba2bbd5d926f2500607ef93120718ff1716c0ec85714843724bc1d8485007f9eeb6c3063b7fd49744699dc07679e79e8a8922030f548550ce2c151b43c7a95770464893f929b66be05863d02b20dcdea7c71696820cd5d6ef8045de5594bcf95447bab306cf4c414269820e400000000000000200000000000000013010000e30f000087f7cfef6937d55f2bb0d3640000000078000000000000000100000001000000529fc01ddd98c8e4893b6a0c57044002fa9105670ca3d8110272df7d15958f10169448647650f73bb889ca1fc432fd8a5f6b26278e32165bdb4dc14071266dd1b47782f4c93c563fe4a917d2656af0ba15453697a518c3e1fd169b1c53fa755f530cb43c01000000b80000000000000014010000030000006cbadba9dd3dc276d15d7bdbb346952ff931f007c4525e33c52cd8451ffe3cf1d078efc9dec7a09f93bba9814b65654f22b7f25a43126d4dc64f556e063d502421dc3b8513b06a2008096451b68fc101ed07a2b9c1c91c1a95eec91a99f0734f93c5565364993b086893ab1a06892b45adc36fdbcd0ecd8d73a9851eb811c2143f4bd9e5546a1f2e06abc9b4f7cdedfb34721abf2db555fb0de85a9943603a383a63a400000000007800000000000000110100000900000093e0e9cc93d74b0f9bbbb4ddc39b630330077ed7cd75898e59a8ed04a030db7617ddc5aa4f2e40e16e8636913f0bbd12dbf496c7c7558d9188b6a8b8a4e3b0b1ecb647fe01bb8930c514fbf465db1787ead6c6fe9f37ed072dae4daa72878e48aa1a000000000000100000000000000001000000e37b000028000000000000000000000000000000d7ef081a4e412d77969dcff9b227b114a4991dc000000000c00000000000000002010000000000009ba3f25c771c09e9ed20858e5ca83ddfa0c87390af14794feb34d71a7c2daa643429e6ca7d998e20ea8b28e2e4bba28ead68e8d05fc58618301b852716b2de2626d9178213264fb1edbd32f96ba65f7bce2eaa7702ef5860052f8c45f25fbdb1ac5a93735b814bea0ca6114bb7"], 0x438}, 0x0, 0x12f4c4729364eade, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000"], 0x1c) 830.367907ms ago: executing program 2 (id=1652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="25359da4", @ANYRES16=0x0, @ANYBLOB="04002dbd7000fbdbdf250300000008000700", @ANYRES32=r4, @ANYBLOB="08000200000000000800020001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x8081) read$eventfd(r4, &(0x7f00000000c0), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r1, &(0x7f00000007c0)=@isofs_parent={0x14, 0x2, {0x8, 0xa494, 0x8, 0x8, 0xebe, 0x6}}, 0x24202) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f00000006c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x18) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x86) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 821.152849ms ago: executing program 1 (id=1653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x40000005, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "8d37426fc319b3e9", "1d1e29c4afbc743d873ce51a718396bd", "b780b555", "c876f566ad6b9336"}, 0x28) 801.29978ms ago: executing program 0 (id=1654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffff4f}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x80000000}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x5, 0xf, 0x6}], 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r9, 0x53, 0x0) tee(r8, r7, 0x9, 0x8) 764.495784ms ago: executing program 1 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 744.903056ms ago: executing program 2 (id=1656): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000340001000000000000000000010100800c00"], 0x114}], 0x1}, 0x0) 733.177637ms ago: executing program 1 (id=1657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) unshare(0xc020680) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x8, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) 704.86904ms ago: executing program 2 (id=1659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x1, 0x0, 'queue1\x00', 0xb20}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 702.2485ms ago: executing program 1 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000a00)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffff4f}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @exit, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x80000000}], 0x0, 0x4, 0xbb, &(0x7f0000000680)=""/187, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0xb, 0xf, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x3, 0x5, 0xf, 0x6}], 0x10, 0x191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r3, r4, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r7, r10, 0x53, 0x0) tee(r9, r8, 0x9, 0x8) 678.403122ms ago: executing program 2 (id=1662): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 'id0\x00'}) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") creat(&(0x7f0000000500)='./bus\x00', 0x103) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 630.769237ms ago: executing program 2 (id=1664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc2481, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c0014c1ee6478fee9e58e4d717546aa000fe622e6cd261e29c64dbfca8affe62d85c9ab42d283b774e493738a0313ea86376a4077af77885af642", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) fcntl$dupfd(r1, 0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 488.832771ms ago: executing program 4 (id=1666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000000054000380080002400000000008000140000000004000038014000100766574680400746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 462.507244ms ago: executing program 4 (id=1667): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xa482}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffefff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000200000008b08b8ffbcdc0f000100"}}}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='xprtrdma_err_vers\x00', r3, 0x0, 0x2000000005}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) readahead(r7, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r9, 0x0) sendmmsg$inet(r8, &(0x7f0000000840)=[{{&(0x7f0000000000)={0x2, 0x4e63, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000f40)="fd682c73395be5ea714610d6fbb81ab23b51a0376e97bca81c0d21659b6a8f4a18a9e4da986db7494344e83f3ac676d24266da3146a2e91c78c5ac262278132802334f6d16f3956c7d5fe420bca51185021a8181bdbe02798f7c9890cce0d3f9b9ba09005b6445bce40eeef298941fde7fb633218a7fa86cb9efc0d809d619e3236b8db02f4ce72ba8da0a2c8e0e9339209027a721e26f69e3a65ff23dcd776b02b58b447dddaaf5bca6a1d233d0fbe14f752199bedc12ec196f81f63340e0fea4", 0xc1}], 0x1, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}}], 0x1, 0x880) 427.746877ms ago: executing program 4 (id=1668): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000002000000e27f00000300000012000000", @ANYRES32, @ANYBLOB="004c00008ffa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 414.777218ms ago: executing program 4 (id=1669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 333.247757ms ago: executing program 4 (id=1670): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) unshare(0xc020680) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x8, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f00000001c0), 0x0}, 0x20) 273.327103ms ago: executing program 4 (id=1671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000240), 0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1ac, r1, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf00}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1ac}}, 0x6c000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002207000000095a800882"], 0x0}, 0x0) write$UHID_CREATE(r2, &(0x7f0000000500)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/40, 0x28, 0x5}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x6020400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 261.184374ms ago: executing program 3 (id=1672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 214.174749ms ago: executing program 3 (id=1673): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[], 0x0) 193.995361ms ago: executing program 3 (id=1674): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298ea"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@resgid}, {}, {@data_err_ignore}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fallocate(r0, 0x0, 0x3, 0x800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 147.205826ms ago: executing program 3 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000010000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000010040)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801002020646c2100000000002020207b1af8ff00000000bfa100000008000000b703000000000000883d72895f868c0a181100"/84, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x88, &(0x7f0000000240)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@i_version}]}, 0x3, 0x45c, &(0x7f0000000580)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000010240)={&(0x7f0000010100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000010200)={&(0x7f0000020300)=ANY=[@ANYBLOB="18000000560000012dbd7000ffdbdf2507000000", @ANYRES32, @ANYBLOB="c8865d0ed45e873d359c569b96d5e39da988306498ff71d734d1c116e80df109740a3d4bc75cfeac401c4732c99b2a4bdd9b0b6c892a1633595c641feaa87973e57e1183a4f02288e62c6fa492dc8950e2ea3b6c8b148c4b13738dd45efaf8852f22446d955bd408425345123ed9c9f464593c90a196111186bcc93c0846c2bd4932152554d357f2d494bcf19b3cbc0d85fde4ccd03d33600dcb35656330ff2f7caf65e6bf40"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x400c010) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000203c0)={0x6, &(0x7f00000101c0)=[{0x7, 0x80, 0x8, 0x4}, {0x5, 0x1, 0x9b, 0x200}, {0x5, 0x56, 0x85, 0x3}, {0x5, 0x4, 0x3f, 0x7ff}, {0x8, 0x40, 0x97, 0x7}, {0x7, 0x10, 0x7f, 0x2}]}) chown(&(0x7f0000010280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 116.112108ms ago: executing program 3 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) 0s ago: executing program 3 (id=1677): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) kernel console output (not intermixed with test programs): 07200kB, limit 307200kB, failcnt 1002 [ 69.451950][ T5552] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 69.459907][ T5552] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 69.467214][ T5552] Memory cgroup stats for /syz1: [ 69.889814][ T5592] lo speed is unknown, defaulting to 1000 [ 70.033435][ T5552] cache 0 [ 70.036406][ T5552] rss 0 [ 70.039154][ T5552] shmem 0 [ 70.042226][ T5552] mapped_file 0 [ 70.045685][ T5552] dirty 0 [ 70.048615][ T5552] writeback 0 [ 70.051904][ T5552] workingset_refault_anon 129 [ 70.056577][ T5552] workingset_refault_file 768 [ 70.061345][ T5552] swap 221184 [ 70.064616][ T5552] swapcached 4096 [ 70.068232][ T5552] pgpgin 49912 [ 70.071635][ T5552] pgpgout 49911 [ 70.075087][ T5552] pgfault 58141 [ 70.078549][ T5552] pgmajfault 81 [ 70.082037][ T5552] inactive_anon 0 [ 70.085657][ T5552] active_anon 4096 [ 70.089373][ T5552] inactive_file 0 [ 70.093034][ T5552] active_file 0 [ 70.096550][ T5552] unevictable 0 [ 70.100077][ T5552] hierarchical_memory_limit 314572800 [ 70.105541][ T5552] hierarchical_memsw_limit 9223372036854771712 [ 70.111717][ T5552] total_cache 0 [ 70.115165][ T5552] total_rss 0 [ 70.118442][ T5552] total_shmem 0 [ 70.121953][ T5552] total_mapped_file 0 [ 70.125915][ T5552] total_dirty 0 [ 70.129423][ T5552] total_writeback 0 [ 70.133274][ T5552] total_workingset_refault_anon 129 [ 70.138527][ T5552] total_workingset_refault_file 768 [ 70.143807][ T5552] total_swap 221184 [ 70.147690][ T5552] total_swapcached 4096 [ 70.151850][ T5552] total_pgpgin 49912 [ 70.155885][ T5552] total_pgpgout 49911 [ 70.159913][ T5552] total_pgfault 58141 [ 70.163918][ T5552] total_pgmajfault 81 [ 70.167895][ T5552] total_inactive_anon 0 [ 70.172053][ T5552] total_active_anon 4096 [ 70.176288][ T5552] total_inactive_file 0 [ 70.180444][ T5552] total_active_file 0 [ 70.184947][ T5552] total_unevictable 0 [ 70.188917][ T5552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.697,pid=5551,uid=0 [ 70.203439][ T5552] Memory cgroup out of memory: Killed process 5551 (syz.1.697) total-vm:96140kB, anon-rss:1264kB, file-rss:22704kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 70.548814][ T5596] loop4: detected capacity change from 0 to 8192 [ 70.567313][ T29] audit: type=1400 audit(1763026798.787:18891): avc: denied { mount } for pid=5595 comm="syz.4.710" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.610637][ T29] audit: type=1326 audit(1763026798.827:18892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.634180][ T29] audit: type=1326 audit(1763026798.827:18893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.657683][ T29] audit: type=1326 audit(1763026798.827:18894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.681170][ T29] audit: type=1326 audit(1763026798.827:18895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.704689][ T29] audit: type=1326 audit(1763026798.827:18896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.728167][ T29] audit: type=1326 audit(1763026798.827:18897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.751653][ T29] audit: type=1326 audit(1763026798.827:18898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5595 comm="syz.4.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 70.832829][ T5552] syz.1.697 (5552) used greatest stack depth: 7096 bytes left [ 70.902596][ T5618] can0: slcan on ptm1. [ 71.061338][ T5618] can0 (unregistered): slcan off ptm1. [ 71.067188][ T5618] Falling back ldisc for ptm1. [ 71.652113][ T5626] lo speed is unknown, defaulting to 1000 [ 71.756799][ T5624] siw: device registration error -23 [ 71.988687][ T5647] netlink: 256 bytes leftover after parsing attributes in process `syz.0.729'. [ 72.036260][ T5658] syzkaller0: entered promiscuous mode [ 72.041854][ T5658] syzkaller0: entered allmulticast mode [ 72.066489][ T5661] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 72.173738][ T5667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.735'. [ 72.457097][ T5693] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 72.621281][ T4679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.662350][ T5699] program syz.4.748 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.672022][ T5699] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 72.703333][ T5703] loop4: detected capacity change from 0 to 512 [ 72.711861][ T5703] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.749: EA inode hash validation failed [ 72.724491][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.749: corrupted inode contents [ 72.736517][ T5703] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.749: mark_inode_dirty error [ 72.747934][ T5703] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.749: corrupted inode contents [ 72.760042][ T5703] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.749: mark_inode_dirty error [ 72.772173][ T5703] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.749: mark inode dirty (error -117) [ 72.785091][ T5703] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 72.794254][ T5703] EXT4-fs (loop4): 1 orphan inode deleted [ 72.800431][ T5703] EXT4-fs mount: 20 callbacks suppressed [ 72.800441][ T5703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.823220][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 72.832832][ T5703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.749'. [ 72.899824][ T5707] batman_adv: batadv0: Adding interface: dummy0 [ 72.906171][ T5707] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.932742][ T5707] batman_adv: batadv0: Interface activated: dummy0 [ 73.110959][ T5733] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 73.545467][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.046416][ T29] kauditd_printk_skb: 1317 callbacks suppressed [ 74.046503][ T29] audit: type=1326 audit(1763026802.267:20216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 74.076498][ T29] audit: type=1326 audit(1763026802.267:20217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 74.099850][ T29] audit: type=1326 audit(1763026802.267:20218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 74.123378][ T29] audit: type=1326 audit(1763026802.267:20219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.1.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 74.146900][ T29] audit: type=1326 audit(1763026802.267:20220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 74.170263][ T29] audit: type=1326 audit(1763026802.267:20221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 74.193655][ T29] audit: type=1326 audit(1763026802.267:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 74.217098][ T29] audit: type=1326 audit(1763026802.277:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 74.240489][ T29] audit: type=1326 audit(1763026802.277:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 74.263801][ T29] audit: type=1326 audit(1763026802.277:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.2.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 74.399331][ T5815] FAULT_INJECTION: forcing a failure. [ 74.399331][ T5815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.412502][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: syz.2.774 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 74.412540][ T5815] Tainted: [W]=WARN [ 74.412548][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.412561][ T5815] Call Trace: [ 74.412569][ T5815] [ 74.412577][ T5815] __dump_stack+0x1d/0x30 [ 74.412649][ T5815] dump_stack_lvl+0xe8/0x140 [ 74.412737][ T5815] dump_stack+0x15/0x1b [ 74.412759][ T5815] should_fail_ex+0x265/0x280 [ 74.412780][ T5815] should_fail+0xb/0x20 [ 74.412798][ T5815] should_fail_usercopy+0x1a/0x20 [ 74.412843][ T5815] _copy_to_user+0x20/0xa0 [ 74.412873][ T5815] simple_read_from_buffer+0xb5/0x130 [ 74.412904][ T5815] proc_fail_nth_read+0x10e/0x150 [ 74.412985][ T5815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.413091][ T5815] vfs_read+0x1a8/0x770 [ 74.413126][ T5815] ? __fget_files+0x184/0x1c0 [ 74.413157][ T5815] ? __rcu_read_unlock+0x4f/0x70 [ 74.413257][ T5815] ? __fget_files+0x184/0x1c0 [ 74.413292][ T5815] ksys_read+0xda/0x1a0 [ 74.413323][ T5815] __x64_sys_read+0x40/0x50 [ 74.413371][ T5815] x64_sys_call+0x27c0/0x3000 [ 74.413399][ T5815] do_syscall_64+0xd2/0x200 [ 74.413423][ T5815] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.413453][ T5815] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.413509][ T5815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.413535][ T5815] RIP: 0033:0x7f86e867e0dc [ 74.413553][ T5815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.413572][ T5815] RSP: 002b:00007f86e70c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.413637][ T5815] RAX: ffffffffffffffda RBX: 00007f86e88d6090 RCX: 00007f86e867e0dc [ 74.413652][ T5815] RDX: 000000000000000f RSI: 00007f86e70c60a0 RDI: 0000000000000005 [ 74.413667][ T5815] RBP: 00007f86e70c6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.413680][ T5815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.413692][ T5815] R13: 00007f86e88d6128 R14: 00007f86e88d6090 R15: 00007fffd8f91a68 [ 74.413710][ T5815] [ 75.348585][ T5924] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 75.617128][ T5953] lo speed is unknown, defaulting to 1000 [ 75.724754][ T5960] FAULT_INJECTION: forcing a failure. [ 75.724754][ T5960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.738106][ T5960] CPU: 0 UID: 0 PID: 5960 Comm: syz.4.797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.738185][ T5960] Tainted: [W]=WARN [ 75.738191][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.738203][ T5960] Call Trace: [ 75.738210][ T5960] [ 75.738218][ T5960] __dump_stack+0x1d/0x30 [ 75.738240][ T5960] dump_stack_lvl+0xe8/0x140 [ 75.738319][ T5960] dump_stack+0x15/0x1b [ 75.738337][ T5960] should_fail_ex+0x265/0x280 [ 75.738356][ T5960] should_fail+0xb/0x20 [ 75.738387][ T5960] should_fail_usercopy+0x1a/0x20 [ 75.738509][ T5960] _copy_from_user+0x1c/0xb0 [ 75.738534][ T5960] dev_ethtool+0xce/0x1670 [ 75.738566][ T5960] ? full_name_hash+0x92/0xe0 [ 75.738632][ T5960] ? strcmp+0x22/0x50 [ 75.738655][ T5960] dev_ioctl+0x2e0/0x960 [ 75.738677][ T5960] sock_do_ioctl+0x197/0x220 [ 75.738702][ T5960] sock_ioctl+0x41b/0x610 [ 75.738725][ T5960] ? __pfx_sock_ioctl+0x10/0x10 [ 75.738782][ T5960] __se_sys_ioctl+0xce/0x140 [ 75.738804][ T5960] __x64_sys_ioctl+0x43/0x50 [ 75.738824][ T5960] x64_sys_call+0x1816/0x3000 [ 75.738847][ T5960] do_syscall_64+0xd2/0x200 [ 75.738871][ T5960] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 75.738899][ T5960] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 75.738989][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.739090][ T5960] RIP: 0033:0x7f0cd29ff6c9 [ 75.739105][ T5960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.739123][ T5960] RSP: 002b:00007f0cd1467038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.739143][ T5960] RAX: ffffffffffffffda RBX: 00007f0cd2c55fa0 RCX: 00007f0cd29ff6c9 [ 75.739155][ T5960] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000005 [ 75.739188][ T5960] RBP: 00007f0cd1467090 R08: 0000000000000000 R09: 0000000000000000 [ 75.739201][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.739213][ T5960] R13: 00007f0cd2c56038 R14: 00007f0cd2c55fa0 R15: 00007ffdcfcfa7e8 [ 75.739230][ T5960] [ 76.053095][ T5972] netdevsim netdevsim4: Direct firmware load for $ failed with error -2 [ 76.119578][ T5981] loop4: detected capacity change from 0 to 512 [ 76.131036][ T5981] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.808: inode has both inline data and extents flags [ 76.163881][ T5981] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.808: couldn't read orphan inode 15 (err -117) [ 76.178191][ T5981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.337230][ T6002] lo speed is unknown, defaulting to 1000 [ 76.403975][ T5999] lo speed is unknown, defaulting to 1000 [ 76.636570][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.886082][ T6038] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 76.953348][ T6044] ALSA: seq fatal error: cannot create timer (-19) [ 77.195246][ T6057] FAULT_INJECTION: forcing a failure. [ 77.195246][ T6057] name failslab, interval 1, probability 0, space 0, times 0 [ 77.207933][ T6057] CPU: 0 UID: 0 PID: 6057 Comm: syz.4.832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.207996][ T6057] Tainted: [W]=WARN [ 77.208002][ T6057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.208015][ T6057] Call Trace: [ 77.208021][ T6057] [ 77.208029][ T6057] __dump_stack+0x1d/0x30 [ 77.208056][ T6057] dump_stack_lvl+0xe8/0x140 [ 77.208102][ T6057] dump_stack+0x15/0x1b [ 77.208124][ T6057] should_fail_ex+0x265/0x280 [ 77.208146][ T6057] should_failslab+0x8c/0xb0 [ 77.208205][ T6057] kmem_cache_alloc_noprof+0x50/0x480 [ 77.208237][ T6057] ? skb_clone+0x151/0x1f0 [ 77.208256][ T6057] skb_clone+0x151/0x1f0 [ 77.208273][ T6057] __netlink_deliver_tap+0x2c9/0x500 [ 77.208325][ T6057] netlink_unicast+0x66b/0x690 [ 77.208361][ T6057] netlink_sendmsg+0x58b/0x6b0 [ 77.208454][ T6057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.208475][ T6057] __sock_sendmsg+0x145/0x180 [ 77.208505][ T6057] ____sys_sendmsg+0x31e/0x4e0 [ 77.208544][ T6057] ___sys_sendmsg+0x17b/0x1d0 [ 77.208650][ T6057] __x64_sys_sendmsg+0xd4/0x160 [ 77.208671][ T6057] x64_sys_call+0x191e/0x3000 [ 77.208694][ T6057] do_syscall_64+0xd2/0x200 [ 77.208715][ T6057] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 77.208780][ T6057] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 77.208816][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.208839][ T6057] RIP: 0033:0x7f0cd29ff6c9 [ 77.208854][ T6057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.208947][ T6057] RSP: 002b:00007f0cd1467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.208968][ T6057] RAX: ffffffffffffffda RBX: 00007f0cd2c55fa0 RCX: 00007f0cd29ff6c9 [ 77.208981][ T6057] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 77.208993][ T6057] RBP: 00007f0cd1467090 R08: 0000000000000000 R09: 0000000000000000 [ 77.209005][ T6057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.209018][ T6057] R13: 00007f0cd2c56038 R14: 00007f0cd2c55fa0 R15: 00007ffdcfcfa7e8 [ 77.209039][ T6057] [ 77.446371][ T5990] syz.3.810 (5990) used greatest stack depth: 7032 bytes left [ 77.663722][ T6089] random: crng reseeded on system resumption [ 77.835430][ T6099] lo speed is unknown, defaulting to 1000 [ 77.906476][ T6099] loop4: detected capacity change from 0 to 512 [ 78.230245][ T6096] syz.4.848 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 78.244575][ T6096] CPU: 1 UID: 0 PID: 6096 Comm: syz.4.848 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 78.244613][ T6096] Tainted: [W]=WARN [ 78.244620][ T6096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.244633][ T6096] Call Trace: [ 78.244641][ T6096] [ 78.244650][ T6096] __dump_stack+0x1d/0x30 [ 78.244714][ T6096] dump_stack_lvl+0xe8/0x140 [ 78.244794][ T6096] dump_stack+0x15/0x1b [ 78.244813][ T6096] dump_header+0x81/0x220 [ 78.244833][ T6096] oom_kill_process+0x342/0x400 [ 78.244867][ T6096] out_of_memory+0x979/0xb80 [ 78.244971][ T6096] try_charge_memcg+0x610/0xa10 [ 78.245027][ T6096] obj_cgroup_charge_pages+0xa6/0x150 [ 78.245049][ T6096] __memcg_kmem_charge_page+0x9f/0x170 [ 78.245155][ T6096] __alloc_frozen_pages_noprof+0x188/0x360 [ 78.245194][ T6096] alloc_pages_mpol+0xb3/0x260 [ 78.245222][ T6096] alloc_pages_noprof+0x90/0x130 [ 78.245248][ T6096] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 78.245300][ T6096] __kvmalloc_node_noprof+0x483/0x670 [ 78.245418][ T6096] ? ip_set_alloc+0x24/0x30 [ 78.245450][ T6096] ? ip_set_alloc+0x24/0x30 [ 78.245508][ T6096] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 78.245546][ T6096] ip_set_alloc+0x24/0x30 [ 78.245577][ T6096] hash_netiface_create+0x282/0x740 [ 78.245683][ T6096] ? __pfx_hash_netiface_create+0x10/0x10 [ 78.245718][ T6096] ip_set_create+0x3cc/0x970 [ 78.245749][ T6096] ? __nla_parse+0x40/0x60 [ 78.245847][ T6096] nfnetlink_rcv_msg+0x4c6/0x590 [ 78.245893][ T6096] netlink_rcv_skb+0x123/0x220 [ 78.246000][ T6096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.246090][ T6096] nfnetlink_rcv+0x167/0x16c0 [ 78.246186][ T6096] ? kmem_cache_free+0xe4/0x3d0 [ 78.246221][ T6096] ? __kfree_skb+0x109/0x150 [ 78.246252][ T6096] ? nlmon_xmit+0x4f/0x60 [ 78.246309][ T6096] ? consume_skb+0x49/0x150 [ 78.246415][ T6096] ? nlmon_xmit+0x4f/0x60 [ 78.246443][ T6096] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 78.246485][ T6096] ? __dev_queue_xmit+0x1200/0x2000 [ 78.246529][ T6096] ? __dev_queue_xmit+0x182/0x2000 [ 78.246547][ T6096] ? merge_sched_in+0x605/0xa30 [ 78.246584][ T6096] ? ref_tracker_free+0x37d/0x3e0 [ 78.246630][ T6096] ? __netlink_deliver_tap+0x4dc/0x500 [ 78.246681][ T6096] netlink_unicast+0x5c0/0x690 [ 78.246717][ T6096] netlink_sendmsg+0x58b/0x6b0 [ 78.246741][ T6096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.246786][ T6096] __sock_sendmsg+0x145/0x180 [ 78.246812][ T6096] ____sys_sendmsg+0x31e/0x4e0 [ 78.246869][ T6096] ___sys_sendmsg+0x17b/0x1d0 [ 78.246901][ T6096] __x64_sys_sendmsg+0xd4/0x160 [ 78.246922][ T6096] x64_sys_call+0x191e/0x3000 [ 78.246937][ T6096] do_syscall_64+0xd2/0x200 [ 78.246985][ T6096] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 78.247002][ T6096] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 78.247133][ T6096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.247146][ T6096] RIP: 0033:0x7f0cd29ff6c9 [ 78.247158][ T6096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.247176][ T6096] RSP: 002b:00007f0cd1467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.247238][ T6096] RAX: ffffffffffffffda RBX: 00007f0cd2c55fa0 RCX: 00007f0cd29ff6c9 [ 78.247246][ T6096] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 78.247253][ T6096] RBP: 00007f0cd2a81f91 R08: 0000000000000000 R09: 0000000000000000 [ 78.247320][ T6096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.247327][ T6096] R13: 00007f0cd2c56038 R14: 00007f0cd2c55fa0 R15: 00007ffdcfcfa7e8 [ 78.247339][ T6096] [ 78.247368][ T6096] memory: usage 307200kB, limit 307200kB, failcnt 433 [ 78.394621][ T6112] program syz.2.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.398158][ T6096] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 78.398176][ T6096] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 78.398195][ T6096] Memory cgroup stats for /syz4: [ 78.632326][ T6112] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 78.655691][ T6096] cache 0 [ 78.658723][ T6096] rss 0 [ 78.661550][ T6096] shmem 0 [ 78.664478][ T6096] mapped_file 0 [ 78.667941][ T6096] dirty 0 [ 78.670859][ T6096] writeback 0 [ 78.674152][ T6096] workingset_refault_anon 69 [ 78.678760][ T6096] workingset_refault_file 387 [ 78.683495][ T6096] swap 200704 [ 78.686836][ T6096] swapcached 16384 [ 78.690605][ T6096] pgpgin 62298 [ 78.693996][ T6096] pgpgout 62293 [ 78.697447][ T6096] pgfault 70067 [ 78.700898][ T6096] pgmajfault 59 [ 78.704380][ T6096] inactive_anon 0 [ 78.708221][ T6096] active_anon 16384 [ 78.712148][ T6096] inactive_file 0 [ 78.715773][ T6096] active_file 4096 [ 78.719492][ T6096] unevictable 0 [ 78.723102][ T6096] hierarchical_memory_limit 314572800 [ 78.728482][ T6096] hierarchical_memsw_limit 9223372036854771712 [ 78.734705][ T6096] total_cache 0 [ 78.738158][ T6096] total_rss 0 [ 78.741650][ T6096] total_shmem 0 [ 78.745188][ T6096] total_mapped_file 0 [ 78.749345][ T6096] total_dirty 0 [ 78.752949][ T6096] total_writeback 0 [ 78.756770][ T6096] total_workingset_refault_anon 69 [ 78.761935][ T6096] total_workingset_refault_file 387 [ 78.767177][ T6096] total_swap 200704 [ 78.770986][ T6096] total_swapcached 16384 [ 78.775348][ T6096] total_pgpgin 62298 [ 78.779228][ T6096] total_pgpgout 62293 [ 78.783253][ T6096] total_pgfault 70067 [ 78.787313][ T6096] total_pgmajfault 59 [ 78.791312][ T6096] total_inactive_anon 0 [ 78.795527][ T6096] total_active_anon 16384 [ 78.799897][ T6096] total_inactive_file 0 [ 78.804189][ T6096] total_active_file 4096 [ 78.808444][ T6096] total_unevictable 0 [ 78.812442][ T6096] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.848,pid=6095,uid=0 [ 78.827066][ T6096] Memory cgroup out of memory: Killed process 6095 (syz.4.848) total-vm:93960kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 79.055249][ T29] kauditd_printk_skb: 4189 callbacks suppressed [ 79.055259][ T29] audit: type=1326 audit(1763026807.277:24415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 79.088673][ T29] audit: type=1326 audit(1763026807.277:24416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa505eb779 code=0x7ffc0000 [ 79.112089][ T29] audit: type=1326 audit(1763026807.277:24417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 79.135630][ T29] audit: type=1326 audit(1763026807.287:24418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 79.159023][ T29] audit: type=1326 audit(1763026807.287:24419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 79.182434][ T29] audit: type=1326 audit(1763026807.287:24420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 79.205833][ T29] audit: type=1326 audit(1763026807.297:24421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 79.229160][ T29] audit: type=1326 audit(1763026807.297:24422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 79.252510][ T29] audit: type=1326 audit(1763026807.297:24423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6127 comm="syz.2.860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 79.275983][ T29] audit: type=1326 audit(1763026807.307:24424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6113 comm="syz.0.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 79.340180][ T6145] program syz.0.867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.349881][ T6145] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.430445][ T6151] program syz.4.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.440276][ T6151] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.620941][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 79.630632][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'. [ 79.781022][ T6170] loop4: detected capacity change from 0 to 2048 [ 79.787830][ T6167] lo speed is unknown, defaulting to 1000 [ 79.799134][ T6173] program syz.2.878 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.808580][ T6173] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 79.843750][ T6170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.913461][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.992123][ T6187] loop4: detected capacity change from 0 to 1024 [ 79.999354][ T6187] EXT4-fs: Ignoring removed orlov option [ 80.005850][ T6187] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 80.025157][ T6187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.063942][ T6187] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 80.076373][ T6187] EXT4-fs (loop4): This should not happen!! Data will be lost [ 80.076373][ T6187] [ 80.086033][ T6187] EXT4-fs (loop4): Total free blocks count 0 [ 80.092028][ T6187] EXT4-fs (loop4): Free/Dirty block details [ 80.097929][ T6187] EXT4-fs (loop4): free_blocks=0 [ 80.102877][ T6187] EXT4-fs (loop4): dirty_blocks=0 [ 80.107902][ T6187] EXT4-fs (loop4): Block reservation details [ 80.113986][ T6187] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 80.138891][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.189364][ T6192] netlink: 'syz.4.883': attribute type 13 has an invalid length. [ 80.197152][ T6192] netlink: 152 bytes leftover after parsing attributes in process `syz.4.883'. [ 80.219131][ T6192] : renamed from syz_tun (while UP) [ 80.227330][ T6192] : refused to change device tx_queue_len [ 80.233194][ T6192] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 80.249506][ T6195] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 80.257735][ T6195] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 80.325424][ T6199] FAULT_INJECTION: forcing a failure. [ 80.325424][ T6199] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 80.325528][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.0.886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.325560][ T6199] Tainted: [W]=WARN [ 80.325567][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.325586][ T6199] Call Trace: [ 80.325593][ T6199] [ 80.325601][ T6199] __dump_stack+0x1d/0x30 [ 80.325626][ T6199] dump_stack_lvl+0xe8/0x140 [ 80.325653][ T6199] dump_stack+0x15/0x1b [ 80.325672][ T6199] should_fail_ex+0x265/0x280 [ 80.325694][ T6199] should_fail_alloc_page+0xf2/0x100 [ 80.325728][ T6199] __alloc_frozen_pages_noprof+0xff/0x360 [ 80.325755][ T6199] alloc_pages_mpol+0xb3/0x260 [ 80.325783][ T6199] alloc_frozen_pages_noprof+0x90/0x110 [ 80.325825][ T6199] ___kmalloc_large_node+0x52/0x100 [ 80.325920][ T6199] ? path_openat+0x1bf8/0x2170 [ 80.326020][ T6199] __kmalloc_large_node_noprof+0x16/0xa0 [ 80.326054][ T6199] __kmalloc_noprof+0x348/0x570 [ 80.326086][ T6199] ? vc_do_resize+0x20e/0xd70 [ 80.326111][ T6199] vc_do_resize+0x20e/0xd70 [ 80.326143][ T6199] ? cred_has_capability+0x210/0x280 [ 80.326203][ T6199] ? selinux_capable+0x31/0x40 [ 80.326229][ T6199] __vc_resize+0x3c/0x50 [ 80.326305][ T6199] vt_ioctl+0x16ca/0x18a0 [ 80.326327][ T6199] ? tty_jobctrl_ioctl+0x29e/0x810 [ 80.326363][ T6199] tty_ioctl+0x7d8/0xb80 [ 80.326407][ T6199] ? __pfx_tty_ioctl+0x10/0x10 [ 80.326481][ T6199] __se_sys_ioctl+0xce/0x140 [ 80.326504][ T6199] __x64_sys_ioctl+0x43/0x50 [ 80.326526][ T6199] x64_sys_call+0x1816/0x3000 [ 80.326550][ T6199] do_syscall_64+0xd2/0x200 [ 80.326573][ T6199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.326620][ T6199] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 80.326656][ T6199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.326742][ T6199] RIP: 0033:0x7ffa5064f6c9 [ 80.326757][ T6199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.326804][ T6199] RSP: 002b:00007ffa4f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.326823][ T6199] RAX: ffffffffffffffda RBX: 00007ffa508a5fa0 RCX: 00007ffa5064f6c9 [ 80.326836][ T6199] RDX: 0000200000000080 RSI: 0000000000005609 RDI: 0000000000000003 [ 80.326859][ T6199] RBP: 00007ffa4f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.326872][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.326886][ T6199] R13: 00007ffa508a6038 R14: 00007ffa508a5fa0 R15: 00007ffdb15f5018 [ 80.326906][ T6199] [ 80.359950][ T6195] vhci_hcd: invalid port number 96 [ 80.359966][ T6195] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 80.463197][ T6164] syz.3.876 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 80.463277][ T6164] CPU: 0 UID: 0 PID: 6164 Comm: syz.3.876 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 80.463308][ T6164] Tainted: [W]=WARN [ 80.463372][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 80.463442][ T6164] Call Trace: [ 80.463449][ T6164] [ 80.463457][ T6164] __dump_stack+0x1d/0x30 [ 80.463482][ T6164] dump_stack_lvl+0xe8/0x140 [ 80.463575][ T6164] dump_stack+0x15/0x1b [ 80.463594][ T6164] dump_header+0x81/0x220 [ 80.463612][ T6164] oom_kill_process+0x342/0x400 [ 80.463645][ T6164] out_of_memory+0x979/0xb80 [ 80.463683][ T6164] try_charge_memcg+0x610/0xa10 [ 80.463757][ T6164] charge_memcg+0x51/0xc0 [ 80.463798][ T6164] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 80.463840][ T6164] __read_swap_cache_async+0x17b/0x2d0 [ 80.463928][ T6164] swap_cluster_readahead+0x262/0x3c0 [ 80.463968][ T6164] swapin_readahead+0xde/0x6f0 [ 80.463989][ T6164] ? rep_movs_alternative+0x1e/0x90 [ 80.464025][ T6164] ? copy_to_user_nofault+0xd1/0x120 [ 80.464048][ T6164] ? __rcu_read_unlock+0x4f/0x70 [ 80.464076][ T6164] ? __rcu_read_unlock+0x4f/0x70 [ 80.464102][ T6164] ? swap_cache_get_folio+0x277/0x280 [ 80.464166][ T6164] do_swap_page+0x2ae/0x2370 [ 80.464193][ T6164] ? _raw_spin_unlock+0x26/0x50 [ 80.464219][ T6164] ? finish_task_switch+0xad/0x2b0 [ 80.464282][ T6164] ? __pfx_default_wake_function+0x10/0x10 [ 80.464317][ T6164] handle_mm_fault+0x9a5/0x2be0 [ 80.464348][ T6164] ? vma_start_read+0x141/0x1f0 [ 80.464388][ T6164] do_user_addr_fault+0x630/0x1080 [ 80.464411][ T6164] ? fpregs_restore_userregs+0xe2/0x1d0 [ 80.464447][ T6164] ? switch_fpu_return+0xe/0x20 [ 80.464589][ T6164] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 80.464623][ T6164] exc_page_fault+0x62/0xa0 [ 80.464660][ T6164] asm_exc_page_fault+0x26/0x30 [ 80.464684][ T6164] RIP: 0033:0x7f07fdee1f33 [ 80.464703][ T6164] Code: ed 08 00 48 8d 3d b6 ed 08 00 e8 b8 47 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 80.464842][ T6164] RSP: 002b:00007ffc03aaf958 EFLAGS: 00010293 [ 80.464861][ T6164] RAX: 00000000fffffffa RBX: 00007f07fe105fa0 RCX: 0000000000000000 [ 80.464875][ T6164] RDX: 00007ffc03aaf970 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.464888][ T6164] RBP: 00007f07fe107da0 R08: 000000001699fbb9 R09: 7fffffffffffffff [ 80.464901][ T6164] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000013a66 [ 80.464913][ T6164] R13: 00007f07fe106090 R14: ffffffffffffffff R15: 00007ffc03aafab0 [ 80.464975][ T6164] [ 80.464995][ T6164] memory: usage 307200kB, limit 307200kB, failcnt 402 [ 80.465009][ T6164] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 80.465024][ T6164] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 80.465038][ T6164] Memory cgroup stats for /syz3: [ 80.467503][ T6164] cache 12288 [ 80.467512][ T6164] rss 0 [ 80.467518][ T6164] shmem 0 [ 80.467524][ T6164] mapped_file 0 [ 80.467530][ T6164] dirty 0 [ 80.467537][ T6164] writeback 4096 [ 80.467543][ T6164] workingset_refault_anon 143 [ 80.467551][ T6164] workingset_refault_file 1024 [ 80.467559][ T6164] swap 196608 [ 80.467565][ T6164] swapcached 32768 [ 80.467573][ T6164] pgpgin 79648 [ 80.467581][ T6164] pgpgout 79637 [ 80.467599][ T6164] pgfault 79778 [ 80.467607][ T6164] pgmajfault 104 [ 80.467616][ T6164] inactive_anon 20480 [ 80.467624][ T6164] active_anon 12288 [ 80.467632][ T6164] inactive_file 12288 [ 80.467641][ T6164] active_file 0 [ 80.467648][ T6164] unevictable 0 [ 80.467656][ T6164] hierarchical_memory_limit 314572800 [ 80.467667][ T6164] hierarchical_memsw_limit 9223372036854771712 [ 80.467677][ T6164] total_cache 12288 [ 80.467710][ T6164] total_rss 0 [ 80.467716][ T6164] total_shmem 0 [ 80.467722][ T6164] total_mapped_file 0 [ 80.467730][ T6164] total_dirty 0 [ 80.467736][ T6164] total_writeback 4096 [ 80.467744][ T6164] total_workingset_refault_anon 143 [ 80.467752][ T6164] total_workingset_refault_file 1024 [ 80.467761][ T6164] total_swap 196608 [ 80.467768][ T6164] total_swapcached 32768 [ 80.467777][ T6164] total_pgpgin 79648 [ 80.467785][ T6164] total_pgpgout 79637 [ 80.467794][ T6164] total_pgfault 79778 [ 80.467802][ T6164] total_pgmajfault 104 [ 80.467880][ T6164] total_inactive_anon 20480 [ 80.467888][ T6164] total_active_anon 12288 [ 80.467895][ T6164] total_inactive_file 12288 [ 80.467904][ T6164] total_active_file 0 [ 80.467913][ T6164] total_unevictable 0 [ 80.467921][ T6164] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.876,pid=6164,uid=0 [ 80.468005][ T6164] Memory cgroup out of memory: Killed process 6164 (syz.3.876) total-vm:94092kB, anon-rss:1264kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 80.832686][ T6165] syz.3.876 (6165) used greatest stack depth: 6376 bytes left [ 80.968567][ T6223] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 81.586585][ T6244] loop4: detected capacity change from 0 to 1024 [ 81.596953][ T6244] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 81.635438][ T6250] can0: slcan on ptm0. [ 81.671798][ T6250] can0 (unregistered): slcan off ptm0. [ 81.677521][ T6250] Falling back ldisc for ptm0. [ 81.742137][ T6251] lo speed is unknown, defaulting to 1000 [ 81.785891][ T6259] ALSA: seq fatal error: cannot create timer (-19) [ 82.227286][ T6276] Invalid ELF header magic: != ELF [ 82.238529][ T6274] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 82.288184][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 82.297166][ T6276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.912'. [ 82.300581][ T6248] syz.4.903 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 82.320082][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.4.903 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.320117][ T6248] Tainted: [W]=WARN [ 82.320155][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.320205][ T6248] Call Trace: [ 82.320213][ T6248] [ 82.320222][ T6248] __dump_stack+0x1d/0x30 [ 82.320249][ T6248] dump_stack_lvl+0xe8/0x140 [ 82.320270][ T6248] dump_stack+0x15/0x1b [ 82.320288][ T6248] dump_header+0x81/0x220 [ 82.320318][ T6248] oom_kill_process+0x342/0x400 [ 82.320354][ T6248] out_of_memory+0x979/0xb80 [ 82.320388][ T6248] try_charge_memcg+0x610/0xa10 [ 82.320422][ T6248] obj_cgroup_charge_pages+0xa6/0x150 [ 82.320478][ T6248] __memcg_kmem_charge_page+0x9f/0x170 [ 82.320505][ T6248] __alloc_frozen_pages_noprof+0x188/0x360 [ 82.320538][ T6248] alloc_pages_mpol+0xb3/0x260 [ 82.320566][ T6248] alloc_pages_noprof+0x90/0x130 [ 82.320592][ T6248] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 82.320669][ T6248] __kvmalloc_node_noprof+0x483/0x670 [ 82.320757][ T6248] ? ip_set_alloc+0x24/0x30 [ 82.320789][ T6248] ? ip_set_alloc+0x24/0x30 [ 82.320899][ T6248] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 82.320980][ T6248] ip_set_alloc+0x24/0x30 [ 82.321016][ T6248] hash_netiface_create+0x282/0x740 [ 82.321106][ T6248] ? __pfx_hash_netiface_create+0x10/0x10 [ 82.321191][ T6248] ip_set_create+0x3cc/0x970 [ 82.321263][ T6248] ? __nla_parse+0x40/0x60 [ 82.321290][ T6248] nfnetlink_rcv_msg+0x4c6/0x590 [ 82.321341][ T6248] netlink_rcv_skb+0x123/0x220 [ 82.321431][ T6248] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 82.321471][ T6248] nfnetlink_rcv+0x167/0x16c0 [ 82.321498][ T6248] ? kmem_cache_free+0xe4/0x3d0 [ 82.321633][ T6248] ? __kfree_skb+0x109/0x150 [ 82.321667][ T6248] ? nlmon_xmit+0x4f/0x60 [ 82.321694][ T6248] ? consume_skb+0x49/0x150 [ 82.321767][ T6248] ? nlmon_xmit+0x4f/0x60 [ 82.321794][ T6248] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 82.321902][ T6248] ? __dev_queue_xmit+0x1200/0x2000 [ 82.321920][ T6248] ? __dev_queue_xmit+0x182/0x2000 [ 82.321978][ T6248] ? merge_sched_in+0x605/0xa30 [ 82.322044][ T6248] ? ref_tracker_free+0x37d/0x3e0 [ 82.322084][ T6248] ? __netlink_deliver_tap+0x4dc/0x500 [ 82.322194][ T6248] netlink_unicast+0x5c0/0x690 [ 82.322233][ T6248] netlink_sendmsg+0x58b/0x6b0 [ 82.322254][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.322298][ T6248] __sock_sendmsg+0x145/0x180 [ 82.322330][ T6248] ____sys_sendmsg+0x31e/0x4e0 [ 82.322372][ T6248] ___sys_sendmsg+0x17b/0x1d0 [ 82.322485][ T6248] __x64_sys_sendmsg+0xd4/0x160 [ 82.322510][ T6248] x64_sys_call+0x191e/0x3000 [ 82.322533][ T6248] do_syscall_64+0xd2/0x200 [ 82.322557][ T6248] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.322589][ T6248] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.322623][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.322647][ T6248] RIP: 0033:0x7f0cd29ff6c9 [ 82.322690][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.322709][ T6248] RSP: 002b:00007f0cd1467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.322728][ T6248] RAX: ffffffffffffffda RBX: 00007f0cd2c55fa0 RCX: 00007f0cd29ff6c9 [ 82.322741][ T6248] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 82.322753][ T6248] RBP: 00007f0cd2a81f91 R08: 0000000000000000 R09: 0000000000000000 [ 82.322767][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.322783][ T6248] R13: 00007f0cd2c56038 R14: 00007f0cd2c55fa0 R15: 00007ffdcfcfa7e8 [ 82.322803][ T6248] [ 82.671179][ T6248] memory: usage 307200kB, limit 307200kB, failcnt 769 [ 82.678006][ T6248] memory+swap: usage 307420kB, limit 9007199254740988kB, failcnt 0 [ 82.685923][ T6248] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 82.693260][ T6248] Memory cgroup stats for /syz4: [ 82.695226][ T6280] can0: slcan on ptm0. [ 82.709655][ T6248] cache 4096 [ 82.713052][ T6248] rss 0 [ 82.715861][ T6248] shmem 0 [ 82.718804][ T6248] mapped_file 0 [ 82.722492][ T6248] dirty 0 [ 82.725688][ T6248] writeback 0 [ 82.729093][ T6248] workingset_refault_anon 155 [ 82.733820][ T6248] workingset_refault_file 1073 [ 82.738750][ T6248] swap 225280 [ 82.742174][ T6248] swapcached 0 [ 82.745593][ T6248] pgpgin 72914 [ 82.748980][ T6248] pgpgout 72912 [ 82.752528][ T6248] pgfault 80687 [ 82.755976][ T6248] pgmajfault 112 [ 82.759594][ T6248] inactive_anon 0 [ 82.763256][ T6248] active_anon 0 [ 82.766704][ T6248] inactive_file 0 [ 82.770325][ T6248] active_file 8192 [ 82.774142][ T6248] unevictable 0 [ 82.777605][ T6248] hierarchical_memory_limit 314572800 [ 82.783031][ T6248] hierarchical_memsw_limit 9223372036854771712 [ 82.789176][ T6248] total_cache 4096 [ 82.792927][ T6248] total_rss 0 [ 82.796207][ T6248] total_shmem 0 [ 82.800024][ T6248] total_mapped_file 0 [ 82.804098][ T6248] total_dirty 0 [ 82.807756][ T6248] total_writeback 0 [ 82.811570][ T6248] total_workingset_refault_anon 155 [ 82.816783][ T6248] total_workingset_refault_file 1073 [ 82.822085][ T6248] total_swap 225280 [ 82.825877][ T6248] total_swapcached 0 [ 82.829763][ T6248] total_pgpgin 72914 [ 82.833684][ T6248] total_pgpgout 72912 [ 82.837712][ T6248] total_pgfault 80687 [ 82.841754][ T6248] total_pgmajfault 112 [ 82.845837][ T6248] total_inactive_anon 0 [ 82.849976][ T6248] total_active_anon 0 [ 82.853980][ T6248] total_inactive_file 0 [ 82.858124][ T6248] total_active_file 8192 [ 82.862559][ T6248] total_unevictable 0 [ 82.866619][ T6248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.903,pid=6247,uid=0 [ 82.881396][ T6248] Memory cgroup out of memory: Killed process 6247 (syz.4.903) total-vm:94092kB, anon-rss:1136kB, file-rss:22580kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 82.932060][ T6281] can0 (unregistered): slcan off ptm0. [ 82.937745][ T6281] Falling back ldisc for ptm0. [ 83.200333][ T6316] loop4: detected capacity change from 0 to 512 [ 83.207439][ T6316] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.219768][ T6316] EXT4-fs (loop4): 1 truncate cleaned up [ 83.225964][ T6316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.264137][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.283886][ T6323] loop4: detected capacity change from 0 to 1024 [ 83.290563][ T6323] EXT4-fs: Ignoring removed orlov option [ 83.298629][ T6323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.320300][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.931'. [ 83.332788][ T6325] team0: Port device team_slave_1 removed [ 83.444983][ T6330] FAULT_INJECTION: forcing a failure. [ 83.444983][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 83.457636][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz.0.933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 83.457700][ T6330] Tainted: [W]=WARN [ 83.457704][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 83.457712][ T6330] Call Trace: [ 83.457717][ T6330] [ 83.457722][ T6330] __dump_stack+0x1d/0x30 [ 83.457746][ T6330] dump_stack_lvl+0xe8/0x140 [ 83.457758][ T6330] dump_stack+0x15/0x1b [ 83.457775][ T6330] should_fail_ex+0x265/0x280 [ 83.457788][ T6330] should_failslab+0x8c/0xb0 [ 83.457806][ T6330] __kvmalloc_node_noprof+0x12e/0x670 [ 83.457831][ T6330] ? xt_alloc_entry_offsets+0x4d/0x60 [ 83.457899][ T6330] xt_alloc_entry_offsets+0x4d/0x60 [ 83.457923][ T6330] translate_table+0xa9/0x1070 [ 83.457936][ T6330] ? __rcu_read_unlock+0x4f/0x70 [ 83.457952][ T6330] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 83.458016][ T6330] ? should_fail_ex+0xdb/0x280 [ 83.458028][ T6330] ? _copy_from_user+0x89/0xb0 [ 83.458044][ T6330] do_ip6t_set_ctl+0x678/0x840 [ 83.458057][ T6330] ? exc_page_fault+0x7b/0xa0 [ 83.458155][ T6330] ? __rcu_read_unlock+0x4f/0x70 [ 83.458173][ T6330] nf_setsockopt+0x199/0x1b0 [ 83.458200][ T6330] ipv6_setsockopt+0x11a/0x130 [ 83.458220][ T6330] tcp_setsockopt+0x98/0xb0 [ 83.458244][ T6330] sock_common_setsockopt+0x69/0x80 [ 83.458260][ T6330] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 83.458276][ T6330] __sys_setsockopt+0x184/0x200 [ 83.458369][ T6330] __x64_sys_setsockopt+0x64/0x80 [ 83.458388][ T6330] x64_sys_call+0x20ec/0x3000 [ 83.458402][ T6330] do_syscall_64+0xd2/0x200 [ 83.458475][ T6330] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 83.458503][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.458559][ T6330] RIP: 0033:0x7ffa5064f6c9 [ 83.458575][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.458593][ T6330] RSP: 002b:00007ffa4f0b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.458616][ T6330] RAX: ffffffffffffffda RBX: 00007ffa508a5fa0 RCX: 00007ffa5064f6c9 [ 83.458664][ T6330] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 83.458677][ T6330] RBP: 00007ffa4f0b7090 R08: 0000000000000500 R09: 0000000000000000 [ 83.458689][ T6330] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 83.458702][ T6330] R13: 00007ffa508a6038 R14: 00007ffa508a5fa0 R15: 00007ffdb15f5018 [ 83.458722][ T6330] [ 83.722688][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.772192][ T6334] loop4: detected capacity change from 0 to 2048 [ 83.792800][ T6334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.853627][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.884891][ T6349] loop4: detected capacity change from 0 to 512 [ 83.928536][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.007740][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.3.942'. [ 84.026329][ T6349] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.113579][ T6361] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 84.153628][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.164631][ T29] kauditd_printk_skb: 1445 callbacks suppressed [ 84.164646][ T29] audit: type=1326 audit(1763026812.386:25870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.252128][ T29] audit: type=1326 audit(1763026812.426:25871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f475ddadf10 code=0x7ffc0000 [ 84.275628][ T29] audit: type=1326 audit(1763026812.426:25872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.299216][ T29] audit: type=1326 audit(1763026812.426:25873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.322684][ T29] audit: type=1326 audit(1763026812.426:25874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.346016][ T29] audit: type=1326 audit(1763026812.426:25875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.369514][ T29] audit: type=1326 audit(1763026812.426:25876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.392958][ T29] audit: type=1326 audit(1763026812.426:25877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.416375][ T29] audit: type=1326 audit(1763026812.426:25878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 84.439799][ T29] audit: type=1326 audit(1763026812.426:25879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.1.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f475ddaf6c9 code=0x7ffc0000 [ 85.040546][ T6392] loop4: detected capacity change from 0 to 512 [ 85.246528][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 85.266201][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'. [ 86.025289][ T6467] loop4: detected capacity change from 0 to 1024 [ 86.032141][ T6467] EXT4-fs: Ignoring removed orlov option [ 86.038584][ T6467] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 86.054017][ T6470] netlink: 'syz.3.986': attribute type 3 has an invalid length. [ 86.054899][ T6467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.098738][ T6467] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 86.111500][ T6467] EXT4-fs (loop4): This should not happen!! Data will be lost [ 86.111500][ T6467] [ 86.121203][ T6467] EXT4-fs (loop4): Total free blocks count 0 [ 86.127259][ T6467] EXT4-fs (loop4): Free/Dirty block details [ 86.133146][ T6467] EXT4-fs (loop4): free_blocks=0 [ 86.138080][ T6467] EXT4-fs (loop4): dirty_blocks=0 [ 86.143185][ T6467] EXT4-fs (loop4): Block reservation details [ 86.149225][ T6467] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 86.166966][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.467742][ T6506] loop4: detected capacity change from 0 to 512 [ 86.474717][ T6506] EXT4-fs: Ignoring removed i_version option [ 86.481000][ T6506] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 86.492423][ T6506] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.998: corrupted xattr entries [ 86.504237][ T6506] EXT4-fs (loop4): 1 orphan inode deleted [ 86.510248][ T6506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.538306][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.770909][ T6511] lo speed is unknown, defaulting to 1000 [ 87.020020][ T6516] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 87.031172][ T6516] netlink: 'syz.0.1001': attribute type 29 has an invalid length. [ 87.048541][ T6516] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1001'. [ 87.073673][ T9] kernel read not supported for file /ppp (pid: 9 comm: kworker/0:0) [ 87.136568][ T6518] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 87.158230][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1002'. [ 87.331703][ T6524] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 87.345080][ T6527] FAULT_INJECTION: forcing a failure. [ 87.345080][ T6527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.358395][ T6527] CPU: 0 UID: 0 PID: 6527 Comm: syz.0.1006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.358435][ T6527] Tainted: [W]=WARN [ 87.358442][ T6527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 87.358474][ T6527] Call Trace: [ 87.358488][ T6527] [ 87.358544][ T6527] __dump_stack+0x1d/0x30 [ 87.358571][ T6527] dump_stack_lvl+0xe8/0x140 [ 87.358597][ T6527] dump_stack+0x15/0x1b [ 87.358618][ T6527] should_fail_ex+0x265/0x280 [ 87.358642][ T6527] should_fail+0xb/0x20 [ 87.358659][ T6527] should_fail_usercopy+0x1a/0x20 [ 87.358735][ T6527] _copy_from_iter+0xd2/0xe80 [ 87.358763][ T6527] ? alloc_pages_mpol+0x217/0x260 [ 87.358791][ T6527] copy_page_from_iter+0x178/0x2a0 [ 87.358817][ T6527] tun_get_user+0x679/0x26e0 [ 87.358852][ T6527] ? ref_tracker_alloc+0x1f2/0x2f0 [ 87.358933][ T6527] tun_chr_write_iter+0x15e/0x210 [ 87.358968][ T6527] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 87.359013][ T6527] vfs_write+0x52a/0x960 [ 87.359044][ T6527] ksys_write+0xda/0x1a0 [ 87.359128][ T6527] __x64_sys_write+0x40/0x50 [ 87.359155][ T6527] x64_sys_call+0x2802/0x3000 [ 87.359192][ T6527] do_syscall_64+0xd2/0x200 [ 87.359213][ T6527] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 87.359245][ T6527] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 87.359338][ T6527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.359362][ T6527] RIP: 0033:0x7ffa5064e17f [ 87.359380][ T6527] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 87.359399][ T6527] RSP: 002b:00007ffa4f0b7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 87.359419][ T6527] RAX: ffffffffffffffda RBX: 00007ffa508a5fa0 RCX: 00007ffa5064e17f [ 87.359433][ T6527] RDX: 0000000000000034 RSI: 0000200000000340 RDI: 00000000000000c8 [ 87.359461][ T6527] RBP: 00007ffa4f0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 87.359474][ T6527] R10: 0000000000000034 R11: 0000000000000293 R12: 0000000000000001 [ 87.359493][ T6527] R13: 00007ffa508a6038 R14: 00007ffa508a5fa0 R15: 00007ffdb15f5018 [ 87.359510][ T6527] [ 87.980048][ T6540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1011'. [ 88.314509][ T6553] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 88.400632][ T4679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.531456][ T6570] bond1: entered promiscuous mode [ 88.536548][ T6570] bond1: entered allmulticast mode [ 88.541925][ T6570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.624550][ T6570] bond1 (unregistering): Released all slaves [ 88.756014][ T6584] can0: slcan on ptm0. [ 88.922916][ T6584] can0 (unregistered): slcan off ptm0. [ 88.930945][ T6584] Falling back ldisc for ptm0. [ 89.814133][ T6599] loop4: detected capacity change from 0 to 1024 [ 89.836524][ T6599] EXT4-fs: Ignoring removed orlov option [ 89.852276][ T6599] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 89.918081][ T29] kauditd_printk_skb: 1390 callbacks suppressed [ 89.918098][ T29] audit: type=1326 audit(1763026818.126:27270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 89.947472][ T29] audit: type=1326 audit(1763026818.126:27271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 89.971045][ T29] audit: type=1326 audit(1763026818.186:27272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 89.994254][ T29] audit: type=1326 audit(1763026818.186:27273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6600 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.018013][ T6599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.050336][ T6610] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1038'. [ 90.059425][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 90.069949][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.096007][ T29] audit: type=1400 audit(1763026818.266:27274): avc: denied { ioctl } for pid=6598 comm="syz.4.1034" path="/178/file1/file1" dev="loop4" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 90.150710][ T6614] loop4: detected capacity change from 0 to 2048 [ 90.166228][ T29] audit: type=1326 audit(1763026818.386:27275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.189995][ T29] audit: type=1326 audit(1763026818.386:27276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.213787][ T29] audit: type=1326 audit(1763026818.386:27277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.237478][ T29] audit: type=1326 audit(1763026818.386:27278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.247692][ T6628] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 90.261362][ T29] audit: type=1326 audit(1763026818.386:27279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6620 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 90.313186][ T6614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.369277][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.385954][ T6626] infiniband syz!: set active [ 90.390684][ T6626] infiniband syz!: added team_slave_0 [ 90.398323][ T6641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.427270][ T6641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.435318][ T6626] RDS/IB: syz!: added [ 90.439358][ T6626] smc: adding ib device syz! with port count 1 [ 90.445849][ T6626] smc: ib device syz! port 1 has no pnetid [ 90.654649][ T6658] ALSA: seq fatal error: cannot create timer (-19) [ 90.895944][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 90.904933][ T6671] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 90.984977][ T6675] lo speed is unknown, defaulting to 1000 [ 91.219436][ T6680] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.288161][ T6680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1062'. [ 91.395082][ T6697] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 91.715326][ T6709] loop4: detected capacity change from 0 to 8192 [ 91.724730][ T6712] lo speed is unknown, defaulting to 1000 [ 91.736686][ T5344] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.045929][ T6720] tmpfs: Bad value for 'mpol' [ 92.190109][ T6707] syz.3.1074 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 92.204116][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.3.1074 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 92.204154][ T6707] Tainted: [W]=WARN [ 92.204163][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 92.204178][ T6707] Call Trace: [ 92.204187][ T6707] [ 92.204197][ T6707] __dump_stack+0x1d/0x30 [ 92.204223][ T6707] dump_stack_lvl+0xe8/0x140 [ 92.204247][ T6707] dump_stack+0x15/0x1b [ 92.204309][ T6707] dump_header+0x81/0x220 [ 92.204329][ T6707] oom_kill_process+0x342/0x400 [ 92.204459][ T6707] out_of_memory+0x979/0xb80 [ 92.204500][ T6707] try_charge_memcg+0x610/0xa10 [ 92.204534][ T6707] obj_cgroup_charge_pages+0xa6/0x150 [ 92.204575][ T6707] __memcg_kmem_charge_page+0x9f/0x170 [ 92.204602][ T6707] __alloc_frozen_pages_noprof+0x188/0x360 [ 92.204679][ T6707] alloc_pages_mpol+0xb3/0x260 [ 92.204700][ T6707] ? alloc_pages_noprof+0x61/0x130 [ 92.204805][ T6707] alloc_pages_noprof+0x90/0x130 [ 92.204827][ T6707] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 92.204979][ T6707] __kvmalloc_node_noprof+0x483/0x670 [ 92.205021][ T6707] ? ip_set_alloc+0x24/0x30 [ 92.205060][ T6707] ? ip_set_alloc+0x24/0x30 [ 92.205101][ T6707] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 92.205153][ T6707] ip_set_alloc+0x24/0x30 [ 92.205188][ T6707] hash_netiface_create+0x282/0x740 [ 92.205223][ T6707] ? __pfx_hash_netiface_create+0x10/0x10 [ 92.205347][ T6707] ip_set_create+0x3cc/0x970 [ 92.205459][ T6707] ? __nla_parse+0x40/0x60 [ 92.205482][ T6707] nfnetlink_rcv_msg+0x4c6/0x590 [ 92.205617][ T6707] netlink_rcv_skb+0x123/0x220 [ 92.205681][ T6707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 92.205724][ T6707] nfnetlink_rcv+0x167/0x16c0 [ 92.205756][ T6707] ? kmem_cache_free+0xe4/0x3d0 [ 92.205819][ T6707] ? __kfree_skb+0x109/0x150 [ 92.205855][ T6707] ? nlmon_xmit+0x4f/0x60 [ 92.205884][ T6707] ? consume_skb+0x49/0x150 [ 92.205919][ T6707] ? nlmon_xmit+0x4f/0x60 [ 92.205956][ T6707] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 92.205996][ T6707] ? __dev_queue_xmit+0x1200/0x2000 [ 92.206036][ T6707] ? __dev_queue_xmit+0x182/0x2000 [ 92.206059][ T6707] ? ref_tracker_free+0x37d/0x3e0 [ 92.206107][ T6707] ? __netlink_deliver_tap+0x4dc/0x500 [ 92.206220][ T6707] netlink_unicast+0x5c0/0x690 [ 92.206321][ T6707] netlink_sendmsg+0x58b/0x6b0 [ 92.206374][ T6707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.206409][ T6707] __sock_sendmsg+0x145/0x180 [ 92.206435][ T6707] ____sys_sendmsg+0x31e/0x4e0 [ 92.206518][ T6707] ___sys_sendmsg+0x17b/0x1d0 [ 92.206554][ T6707] __x64_sys_sendmsg+0xd4/0x160 [ 92.206580][ T6707] x64_sys_call+0x191e/0x3000 [ 92.206604][ T6707] do_syscall_64+0xd2/0x200 [ 92.206627][ T6707] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 92.206669][ T6707] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 92.206749][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.206793][ T6707] RIP: 0033:0x7f07fdeaf6c9 [ 92.206809][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.206828][ T6707] RSP: 002b:00007f07fc90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.206849][ T6707] RAX: ffffffffffffffda RBX: 00007f07fe105fa0 RCX: 00007f07fdeaf6c9 [ 92.206866][ T6707] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 92.206881][ T6707] RBP: 00007f07fdf31f91 R08: 0000000000000000 R09: 0000000000000000 [ 92.206963][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.206978][ T6707] R13: 00007f07fe106038 R14: 00007f07fe105fa0 R15: 00007ffc03aaf838 [ 92.206999][ T6707] [ 92.207006][ T6707] memory: usage 307200kB, limit 307200kB, failcnt 746 [ 92.207038][ T6707] memory+swap: usage 307416kB, limit 9007199254740988kB, failcnt 0 [ 92.207054][ T6707] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 92.207069][ T6707] Memory cgroup stats for /syz3: [ 92.207389][ T6707] cache 0 [ 92.207398][ T6707] rss 0 [ 92.207404][ T6707] shmem 0 [ 92.207410][ T6707] mapped_file 0 [ 92.207417][ T6707] dirty 0 [ 92.207423][ T6707] writeback 4096 [ 92.207430][ T6707] workingset_refault_anon 193 [ 92.207437][ T6707] workingset_refault_file 1536 [ 92.207445][ T6707] swap 221184 [ 92.207452][ T6707] swapcached 8192 [ 92.207458][ T6707] pgpgin 90308 [ 92.207474][ T6707] pgpgout 90306 [ 92.207482][ T6707] pgfault 91617 [ 92.207490][ T6707] pgmajfault 140 [ 92.207498][ T6707] inactive_anon 8192 [ 92.207506][ T6707] active_anon 0 [ 92.207514][ T6707] inactive_file 0 [ 92.207543][ T6707] active_file 0 [ 92.207551][ T6707] unevictable 0 [ 92.207559][ T6707] hierarchical_memory_limit 314572800 [ 92.207569][ T6707] hierarchical_memsw_limit 9223372036854771712 [ 92.207579][ T6707] total_cache 0 [ 92.207587][ T6707] total_rss 0 [ 92.207594][ T6707] total_shmem 0 [ 92.207602][ T6707] total_mapped_file 0 [ 92.207679][ T6707] total_dirty 0 [ 92.207687][ T6707] total_writeback 4096 [ 92.207694][ T6707] total_workingset_refault_anon 193 [ 92.207702][ T6707] total_workingset_refault_file 1536 [ 92.207711][ T6707] total_swap 221184 [ 92.207719][ T6707] total_swapcached 8192 [ 92.207726][ T6707] total_pgpgin 90308 [ 92.207734][ T6707] total_pgpgout 90306 [ 92.207792][ T6707] total_pgfault 91617 [ 92.207801][ T6707] total_pgmajfault 140 [ 92.207841][ T6707] total_inactive_anon 8192 [ 92.207849][ T6707] total_active_anon 0 [ 92.207857][ T6707] total_inactive_file 0 [ 92.207866][ T6707] total_active_file 0 [ 92.734953][ T6707] total_unevictable 0 [ 92.734964][ T6707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1074,pid=6706,uid=0 [ 92.735115][ T6707] Memory cgroup out of memory: Killed process 6706 (syz.3.1074) total-vm:94092kB, anon-rss:1260kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 93.184171][ T6755] lo speed is unknown, defaulting to 1000 [ 93.285371][ T6755] siw: device registration error -23 [ 93.726948][ T6760] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 93.743555][ T3968] Bluetooth: hci0: command 0x1003 tx timeout [ 93.749823][ T4679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.897443][ T6777] loop4: detected capacity change from 0 to 2048 [ 93.906300][ T6779] ALSA: seq fatal error: cannot create timer (-19) [ 93.925290][ T6777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.954752][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.509941][ T6800] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 94.538813][ T6802] ALSA: seq fatal error: cannot create timer (-19) [ 94.718527][ T6814] 9pnet_fd: Insufficient options for proto=fd [ 94.749558][ T6814] lo speed is unknown, defaulting to 1000 [ 94.861555][ T6822] lo speed is unknown, defaulting to 1000 [ 94.963473][ T6822] siw: device registration error -23 [ 94.993237][ T29] kauditd_printk_skb: 2027 callbacks suppressed [ 94.993254][ T29] audit: type=1326 audit(1763026823.195:29307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 95.022936][ T29] audit: type=1326 audit(1763026823.195:29308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 95.046752][ T29] audit: type=1326 audit(1763026823.195:29309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 95.070362][ T29] audit: type=1326 audit(1763026823.195:29310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 95.093924][ T29] audit: type=1326 audit(1763026823.195:29311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 95.117375][ T29] audit: type=1326 audit(1763026823.195:29312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 95.140789][ T29] audit: type=1326 audit(1763026823.195:29313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 95.259961][ T29] audit: type=1400 audit(1763026823.475:29314): avc: denied { mount } for pid=6830 comm="syz.3.1122" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.340579][ T29] audit: type=1400 audit(1763026823.555:29315): avc: denied { mount } for pid=6833 comm="syz.3.1123" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 95.382387][ T29] audit: type=1400 audit(1763026823.585:29316): avc: denied { search } for pid=6833 comm="syz.3.1123" name="/" dev="configfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 96.167152][ T6868] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 96.225018][ T3968] Bluetooth: hci0: command 0x1003 tx timeout [ 96.231238][ T4679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 96.562807][ T6905] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 96.681337][ T6914] FAULT_INJECTION: forcing a failure. [ 96.681337][ T6914] name failslab, interval 1, probability 0, space 0, times 0 [ 96.693976][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.1.1161 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 96.693998][ T6914] Tainted: [W]=WARN [ 96.694002][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.694091][ T6914] Call Trace: [ 96.694095][ T6914] [ 96.694101][ T6914] __dump_stack+0x1d/0x30 [ 96.694116][ T6914] dump_stack_lvl+0xe8/0x140 [ 96.694128][ T6914] dump_stack+0x15/0x1b [ 96.694169][ T6914] should_fail_ex+0x265/0x280 [ 96.694183][ T6914] should_failslab+0x8c/0xb0 [ 96.694216][ T6914] __kmalloc_noprof+0xa5/0x570 [ 96.694260][ T6914] ? cond_policydb_dup+0xa3/0x4e0 [ 96.694278][ T6914] cond_policydb_dup+0xa3/0x4e0 [ 96.694297][ T6914] security_set_bools+0xa0/0x340 [ 96.694318][ T6914] sel_commit_bools_write+0x1ea/0x270 [ 96.694374][ T6914] vfs_writev+0x406/0x8b0 [ 96.694392][ T6914] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 96.694433][ T6914] ? mutex_lock+0xd/0x30 [ 96.694451][ T6914] do_writev+0xe7/0x210 [ 96.694469][ T6914] __x64_sys_writev+0x45/0x50 [ 96.694525][ T6914] x64_sys_call+0x1e9a/0x3000 [ 96.694538][ T6914] do_syscall_64+0xd2/0x200 [ 96.694619][ T6914] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.694646][ T6914] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 96.694705][ T6914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.694725][ T6914] RIP: 0033:0x7f475ddaf6c9 [ 96.694783][ T6914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.694795][ T6914] RSP: 002b:00007f475c817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 96.694807][ T6914] RAX: ffffffffffffffda RBX: 00007f475e005fa0 RCX: 00007f475ddaf6c9 [ 96.694815][ T6914] RDX: 0000000000000002 RSI: 00002000000025c0 RDI: 0000000000000003 [ 96.694822][ T6914] RBP: 00007f475c817090 R08: 0000000000000000 R09: 0000000000000000 [ 96.694830][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.694837][ T6914] R13: 00007f475e006038 R14: 00007f475e005fa0 R15: 00007ffd86abec28 [ 96.694894][ T6914] [ 97.660837][ T6947] netlink: 'syz.3.1174': attribute type 13 has an invalid length. [ 97.697878][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.705086][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.797108][ T5320] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.825801][ T5320] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.844514][ T5320] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.863304][ T5320] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.214598][ T6987] loop4: detected capacity change from 0 to 2048 [ 98.228561][ T6987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.255349][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.311739][ T7000] loop4: detected capacity change from 0 to 2048 [ 98.325824][ T7000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.470681][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.827304][ T7019] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 99.401977][ T7053] FAULT_INJECTION: forcing a failure. [ 99.401977][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 99.417829][ T7053] CPU: 1 UID: 0 PID: 7053 Comm: syz.1.1214 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 99.417933][ T7053] Tainted: [W]=WARN [ 99.417941][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 99.417956][ T7053] Call Trace: [ 99.417962][ T7053] [ 99.417969][ T7053] __dump_stack+0x1d/0x30 [ 99.418040][ T7053] dump_stack_lvl+0xe8/0x140 [ 99.418066][ T7053] dump_stack+0x15/0x1b [ 99.418084][ T7053] should_fail_ex+0x265/0x280 [ 99.418104][ T7053] ? percpu_ref_init+0x9c/0x250 [ 99.418127][ T7053] should_failslab+0x8c/0xb0 [ 99.418242][ T7053] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 99.418271][ T7053] __kmalloc_cache_noprof+0x4c/0x4a0 [ 99.418347][ T7053] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 99.418428][ T7053] percpu_ref_init+0x9c/0x250 [ 99.418453][ T7053] io_ring_ctx_alloc+0x1b4/0x670 [ 99.418489][ T7053] io_uring_create+0x134/0x630 [ 99.418523][ T7053] __se_sys_io_uring_setup+0x1f7/0x210 [ 99.418618][ T7053] __x64_sys_io_uring_setup+0x31/0x40 [ 99.418722][ T7053] x64_sys_call+0x2b25/0x3000 [ 99.418751][ T7053] do_syscall_64+0xd2/0x200 [ 99.418777][ T7053] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 99.418812][ T7053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.418854][ T7053] RIP: 0033:0x7f475ddaf6c9 [ 99.418871][ T7053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.418894][ T7053] RSP: 002b:00007f475c816fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 99.418917][ T7053] RAX: ffffffffffffffda RBX: 00007f475e005fa0 RCX: 00007f475ddaf6c9 [ 99.418930][ T7053] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 99.418946][ T7053] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 99.418971][ T7053] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 99.418984][ T7053] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 99.419001][ T7053] [ 99.642574][ T7062] can0: slcan on ptm0. [ 99.658159][ T7053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 99.675466][ T7053] netlink: 'syz.1.1214': attribute type 3 has an invalid length. [ 99.703818][ T7062] can0 (unregistered): slcan off ptm0. [ 99.709374][ T7062] Falling back ldisc for ptm0. [ 99.730011][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1220'. [ 99.748024][ T7066] loop4: detected capacity change from 0 to 1024 [ 99.861187][ T7077] loop4: detected capacity change from 0 to 2048 [ 99.934224][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.961280][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.994265][ T7085] loop4: detected capacity change from 0 to 2048 [ 100.007924][ T7085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.008688][ T29] kauditd_printk_skb: 2046 callbacks suppressed [ 100.008701][ T29] audit: type=1326 audit(1763026828.234:31363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 100.074629][ T29] audit: type=1326 audit(1763026828.254:31364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 100.098081][ T29] audit: type=1326 audit(1763026828.254:31365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 100.121611][ T29] audit: type=1326 audit(1763026828.254:31366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 100.145099][ T29] audit: type=1326 audit(1763026828.254:31367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 100.168637][ T29] audit: type=1326 audit(1763026828.254:31368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 100.192099][ T29] audit: type=1326 audit(1763026828.254:31369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 100.215503][ T29] audit: type=1326 audit(1763026828.254:31370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f86e867f6c9 code=0x7ffc0000 [ 100.239070][ T29] audit: type=1326 audit(1763026828.254:31371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86e8676567 code=0x7ffc0000 [ 100.262564][ T29] audit: type=1326 audit(1763026828.254:31372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7046 comm="syz.2.1212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86e861b779 code=0x7ffc0000 [ 100.316937][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.370582][ T7099] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1233'. [ 100.403464][ T7101] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1232'. [ 100.513631][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1235'. [ 100.524369][ T7106] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 100.609136][ T7108] lo speed is unknown, defaulting to 1000 [ 101.072578][ T7119] lo speed is unknown, defaulting to 1000 [ 101.326931][ T7131] loop4: detected capacity change from 0 to 1024 [ 101.367007][ T7131] EXT4-fs: Ignoring removed orlov option [ 101.387429][ T7131] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.428295][ T7131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.477120][ T7131] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 101.489516][ T7131] EXT4-fs (loop4): This should not happen!! Data will be lost [ 101.489516][ T7131] [ 101.499241][ T7131] EXT4-fs (loop4): Total free blocks count 0 [ 101.505271][ T7131] EXT4-fs (loop4): Free/Dirty block details [ 101.511223][ T7131] EXT4-fs (loop4): free_blocks=0 [ 101.516281][ T7131] EXT4-fs (loop4): dirty_blocks=0 [ 101.521296][ T7131] EXT4-fs (loop4): Block reservation details [ 101.527303][ T7131] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 101.572025][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.779468][ T7153] loop4: detected capacity change from 0 to 2048 [ 101.792049][ T36] hid_parser_main: 11 callbacks suppressed [ 101.792143][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.803917][ T7153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.805551][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x2 [ 101.825123][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.832858][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.840711][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.841817][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.848356][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.865037][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.872558][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.880017][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x0 [ 101.887431][ T36] hid-generic 0005:0000:0000.0008: unknown main item tag 0x2 [ 101.911318][ T36] hid-generic 0005:0000:0000.0008: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 102.048971][ T7177] SELinux: Context system_u:object_r:audit_spool_t:s0 is not valid (left unmapped). [ 102.061658][ T7177] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 102.153950][ T7181] lo speed is unknown, defaulting to 1000 [ 102.256179][ T7181] siw: device registration error -23 [ 103.246222][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1269'. [ 103.256737][ T7207] team0 (unregistering): Port device team_slave_0 removed [ 103.264669][ T7207] team0 (unregistering): Port device team_slave_1 removed [ 103.565029][ T7229] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1278'. [ 103.877776][ T7255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7255 comm=syz.0.1290 [ 104.396641][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1302'. [ 104.406799][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.414054][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.588574][ T7292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1306'. [ 104.598051][ T7292] netlink: 'syz.1.1306': attribute type 3 has an invalid length. [ 104.725530][ T7297] netdevsim netdevsim3: Direct firmware load for r failed with error -2 [ 104.741619][ T7308] can0: slcan on ptm0. [ 104.784889][ T7308] can0 (unregistered): slcan off ptm0. [ 104.798052][ T7308] Falling back ldisc for ptm0. [ 104.877830][ T7319] lo speed is unknown, defaulting to 1000 [ 105.050530][ T7328] lo speed is unknown, defaulting to 1000 [ 105.205284][ T29] kauditd_printk_skb: 905 callbacks suppressed [ 105.205299][ T29] audit: type=1326 audit(1763026833.424:32278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.235092][ T29] audit: type=1326 audit(1763026833.424:32279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.258931][ T29] audit: type=1326 audit(1763026833.424:32280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.282518][ T29] audit: type=1326 audit(1763026833.424:32281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.306103][ T29] audit: type=1326 audit(1763026833.424:32282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.329656][ T29] audit: type=1326 audit(1763026833.424:32283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.353421][ T29] audit: type=1326 audit(1763026833.424:32284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.376982][ T29] audit: type=1326 audit(1763026833.424:32285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.400730][ T29] audit: type=1326 audit(1763026833.424:32286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.409105][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 105.424324][ T29] audit: type=1326 audit(1763026833.424:32287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7330 comm="syz.0.1321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 105.770337][ T7363] SELinux: policydb version -1479847338 does not match my version range 15-35 [ 105.779820][ T7363] SELinux: failed to load policy [ 105.823792][ T7371] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1336'. [ 105.845513][ T7373] ALSA: seq fatal error: cannot create timer (-19) [ 105.852904][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 106.044359][ T7402] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 106.128458][ T7406] futex_wake_op: syz.3.1350 tries to shift op by 36; fix this program [ 106.207778][ T7420] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 106.351309][ T7431] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1361'. [ 106.678850][ T7441] ALSA: seq fatal error: cannot create timer (-19) [ 106.861317][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1372'. [ 107.022623][ T7461] lo speed is unknown, defaulting to 1000 [ 107.229094][ T7467] 9pnet_fd: Insufficient options for proto=fd [ 107.294279][ T7467] wg2: entered promiscuous mode [ 107.299473][ T7467] wg2: entered allmulticast mode [ 107.336274][ T7470] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1376'. [ 107.466452][ T7486] FAULT_INJECTION: forcing a failure. [ 107.466452][ T7486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.479658][ T7486] CPU: 0 UID: 0 PID: 7486 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.479692][ T7486] Tainted: [W]=WARN [ 107.479752][ T7486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.479767][ T7486] Call Trace: [ 107.479774][ T7486] [ 107.479858][ T7486] __dump_stack+0x1d/0x30 [ 107.479883][ T7486] dump_stack_lvl+0xe8/0x140 [ 107.479913][ T7486] dump_stack+0x15/0x1b [ 107.479933][ T7486] should_fail_ex+0x265/0x280 [ 107.479957][ T7486] should_fail+0xb/0x20 [ 107.480096][ T7486] should_fail_usercopy+0x1a/0x20 [ 107.480122][ T7486] _copy_from_user+0x1c/0xb0 [ 107.480150][ T7486] vmemdup_user+0x5e/0xd0 [ 107.480180][ T7486] con_set_unimap+0x3f/0x700 [ 107.480213][ T7486] ? selinux_capable+0x31/0x40 [ 107.480249][ T7486] ? should_fail_ex+0xdb/0x280 [ 107.480269][ T7486] vt_ioctl+0xfbb/0x18a0 [ 107.480291][ T7486] ? tty_jobctrl_ioctl+0x29e/0x810 [ 107.480348][ T7486] tty_ioctl+0x7d8/0xb80 [ 107.480362][ T7486] ? __pfx_tty_ioctl+0x10/0x10 [ 107.480375][ T7486] __se_sys_ioctl+0xce/0x140 [ 107.480389][ T7486] __x64_sys_ioctl+0x43/0x50 [ 107.480402][ T7486] x64_sys_call+0x1816/0x3000 [ 107.480441][ T7486] do_syscall_64+0xd2/0x200 [ 107.480501][ T7486] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.480518][ T7486] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 107.480538][ T7486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.480552][ T7486] RIP: 0033:0x7f86e867f6c9 [ 107.480632][ T7486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.480644][ T7486] RSP: 002b:00007f86e70e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.480737][ T7486] RAX: ffffffffffffffda RBX: 00007f86e88d5fa0 RCX: 00007f86e867f6c9 [ 107.480801][ T7486] RDX: 0000200000000040 RSI: 0000000000004b67 RDI: 0000000000000003 [ 107.480809][ T7486] RBP: 00007f86e70e7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.480817][ T7486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.480885][ T7486] R13: 00007f86e88d6038 R14: 00007f86e88d5fa0 R15: 00007fffd8f91a68 [ 107.480902][ T7486] [ 107.723770][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 107.755006][ T7488] hsr_slave_0: left promiscuous mode [ 107.762131][ T7488] hsr_slave_1: left promiscuous mode [ 107.772804][ T7492] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 107.785611][ T7490] SELinux: failed to load policy [ 107.798021][ T7490] netlink: 'syz.4.1384': attribute type 12 has an invalid length. [ 107.830884][ T7496] loop4: detected capacity change from 0 to 512 [ 107.832351][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1388'. [ 107.839304][ T7496] ext4: Unknown parameter 'e4u{OUϹ8S/ [ 107.839304][ T7496] >TsO6^Jt(fMDPx' [ 107.878318][ T7496] loop4: detected capacity change from 0 to 512 [ 107.886153][ T7496] EXT4-fs: Ignoring removed bh option [ 107.892889][ T7500] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1389'. [ 107.901572][ T7502] ALSA: seq fatal error: cannot create timer (-19) [ 107.903958][ T7496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.935091][ T7496] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.955489][ T7496] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.306136][ T7539] team0 (unregistering): Failed to send options change via netlink (err -105) [ 108.317665][ T7539] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 108.345638][ T7539] team0 (unregistering): Port device team_slave_0 removed [ 108.398005][ T1036] hid_parser_main: 11 callbacks suppressed [ 108.398025][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.411288][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x2 [ 108.418723][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.426257][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.455644][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.459786][ T7551] loop4: detected capacity change from 0 to 512 [ 108.463215][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.463241][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.463292][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.470254][ T7551] EXT4-fs: Ignoring removed i_version option [ 108.476905][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x0 [ 108.485617][ T7551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.491754][ T1036] hid-generic 0005:0000:0000.0009: unknown main item tag 0x2 [ 108.499351][ T7551] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1410: corrupted xattr entries [ 108.586297][ T7554] can: request_module (can-proto-0) failed. [ 108.629364][ T7551] EXT4-fs (loop4): 1 orphan inode deleted [ 108.636166][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.734447][ T7559] pim6reg9: entered allmulticast mode [ 108.828200][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.899847][ T1036] hid-generic 0005:0000:0000.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 109.071750][ T7577] FAULT_INJECTION: forcing a failure. [ 109.071750][ T7577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.084868][ T7577] CPU: 0 UID: 0 PID: 7577 Comm: syz.1.1421 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.084928][ T7577] Tainted: [W]=WARN [ 109.084936][ T7577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.084949][ T7577] Call Trace: [ 109.084956][ T7577] [ 109.084964][ T7577] __dump_stack+0x1d/0x30 [ 109.085010][ T7577] dump_stack_lvl+0xe8/0x140 [ 109.085034][ T7577] dump_stack+0x15/0x1b [ 109.085060][ T7577] should_fail_ex+0x265/0x280 [ 109.085152][ T7577] should_fail+0xb/0x20 [ 109.085171][ T7577] should_fail_usercopy+0x1a/0x20 [ 109.085196][ T7577] strncpy_from_user+0x25/0x230 [ 109.085224][ T7577] ? kmem_cache_alloc_noprof+0x242/0x480 [ 109.085253][ T7577] ? getname_flags+0x80/0x3b0 [ 109.085339][ T7577] getname_flags+0xae/0x3b0 [ 109.085369][ T7577] __x64_sys_lgetxattr+0xfd/0x140 [ 109.085430][ T7577] x64_sys_call+0x2fb3/0x3000 [ 109.085515][ T7577] do_syscall_64+0xd2/0x200 [ 109.085539][ T7577] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 109.085572][ T7577] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 109.085659][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.085684][ T7577] RIP: 0033:0x7f475ddaf6c9 [ 109.085702][ T7577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.085724][ T7577] RSP: 002b:00007f475c817038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 109.085766][ T7577] RAX: ffffffffffffffda RBX: 00007f475e005fa0 RCX: 00007f475ddaf6c9 [ 109.085779][ T7577] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 109.085795][ T7577] RBP: 00007f475c817090 R08: 0000000000000000 R09: 0000000000000000 [ 109.085810][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.085825][ T7577] R13: 00007f475e006038 R14: 00007f475e005fa0 R15: 00007ffd86abec28 [ 109.085915][ T7577] [ 109.444734][ T7575] loop4: detected capacity change from 0 to 512 [ 109.451755][ T7575] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 109.542308][ T7609] loop4: detected capacity change from 0 to 512 [ 109.549767][ T7609] EXT4-fs: Ignoring removed i_version option [ 109.556099][ T7609] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.568029][ T7609] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.1432: corrupted xattr entries [ 109.580243][ T7609] EXT4-fs (loop4): 1 orphan inode deleted [ 109.593729][ T7609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.622994][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.650199][ T7616] ALSA: seq fatal error: cannot create timer (-19) [ 109.819067][ T7636] can0: slcan on ptm0. [ 109.837730][ T1036] hid-generic 0005:0000:0000.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 109.865241][ T7636] can0 (unregistered): slcan off ptm0. [ 109.871723][ T7636] Falling back ldisc for ptm0. [ 110.003518][ T7650] SELinux: security_context_str_to_sid (TN8c~hEoi$g+$^u=Im%BFM6nʜjXo^M2r{.~2aH ߭$t:(y}M``GI[_WV ӛv-3lŞ\s̱ڢ'P;>sw0r,-rkv՘4: gS,'.~ޘ0ML?CdN{ΡTRv) failed with errno=-22 [ 110.219474][ T29] kauditd_printk_skb: 2860 callbacks suppressed [ 110.219489][ T29] audit: type=1326 audit(1763026838.443:35148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdea6567 code=0x7ffc0000 [ 110.263587][ T29] audit: type=1326 audit(1763026838.483:35149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fde4b779 code=0x7ffc0000 [ 110.287103][ T29] audit: type=1326 audit(1763026838.483:35150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdea6567 code=0x7ffc0000 [ 110.310699][ T29] audit: type=1326 audit(1763026838.483:35151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fde4b779 code=0x7ffc0000 [ 110.334245][ T29] audit: type=1326 audit(1763026838.483:35152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f07fdeaf6c9 code=0x7ffc0000 [ 110.357793][ T29] audit: type=1326 audit(1763026838.483:35153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdea6567 code=0x7ffc0000 [ 110.381334][ T29] audit: type=1326 audit(1763026838.483:35154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fde4b779 code=0x7ffc0000 [ 110.404766][ T29] audit: type=1326 audit(1763026838.483:35155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f07fdeaf6c9 code=0x7ffc0000 [ 110.470168][ T7663] __nla_validate_parse: 8 callbacks suppressed [ 110.470191][ T7663] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1454'. [ 110.479865][ T29] audit: type=1326 audit(1763026838.563:35156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f07fdea6567 code=0x7ffc0000 [ 110.509058][ T29] audit: type=1326 audit(1763026838.563:35157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7597 comm="syz.3.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f07fde4b779 code=0x7ffc0000 [ 110.550167][ T7667] ALSA: seq fatal error: cannot create timer (-19) [ 110.799654][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 110.875680][ T7694] ALSA: seq fatal error: cannot create timer (-19) [ 110.951935][ T7706] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1470'. [ 111.134902][ T7718] lo speed is unknown, defaulting to 1000 [ 111.194011][ T7718] siw: device registration error -23 [ 111.502784][ T7725] netlink: 'syz.1.1475': attribute type 3 has an invalid length. [ 111.513217][ T7725] netlink: 'syz.1.1475': attribute type 3 has an invalid length. [ 111.521637][ T7725] FAULT_INJECTION: forcing a failure. [ 111.521637][ T7725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.534913][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.1.1475 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 111.534947][ T7725] Tainted: [W]=WARN [ 111.534953][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.534966][ T7725] Call Trace: [ 111.534973][ T7725] [ 111.535061][ T7725] __dump_stack+0x1d/0x30 [ 111.535085][ T7725] dump_stack_lvl+0xe8/0x140 [ 111.535106][ T7725] dump_stack+0x15/0x1b [ 111.535123][ T7725] should_fail_ex+0x265/0x280 [ 111.535151][ T7725] should_fail+0xb/0x20 [ 111.535170][ T7725] should_fail_usercopy+0x1a/0x20 [ 111.535200][ T7725] _copy_from_iter+0xd2/0xe80 [ 111.535284][ T7725] ? __build_skb_around+0x1ab/0x200 [ 111.535316][ T7725] ? __alloc_skb+0x223/0x320 [ 111.535351][ T7725] netlink_sendmsg+0x471/0x6b0 [ 111.535378][ T7725] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.535401][ T7725] __sock_sendmsg+0x145/0x180 [ 111.535429][ T7725] ____sys_sendmsg+0x31e/0x4e0 [ 111.535470][ T7725] ___sys_sendmsg+0x17b/0x1d0 [ 111.535511][ T7725] __x64_sys_sendmsg+0xd4/0x160 [ 111.535552][ T7725] x64_sys_call+0x191e/0x3000 [ 111.535581][ T7725] do_syscall_64+0xd2/0x200 [ 111.535602][ T7725] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 111.535704][ T7725] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 111.535801][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.535874][ T7725] RIP: 0033:0x7f475ddaf6c9 [ 111.535892][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.535951][ T7725] RSP: 002b:00007f475c817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.535971][ T7725] RAX: ffffffffffffffda RBX: 00007f475e005fa0 RCX: 00007f475ddaf6c9 [ 111.536059][ T7725] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000004 [ 111.536072][ T7725] RBP: 00007f475c817090 R08: 0000000000000000 R09: 0000000000000000 [ 111.536084][ T7725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.536098][ T7725] R13: 00007f475e006038 R14: 00007f475e005fa0 R15: 00007ffd86abec28 [ 111.536121][ T7725] [ 111.828098][ T7730] SELinux: failed to load policy [ 111.921507][ T7747] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 112.749562][ T5353] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.819933][ T7769] lo speed is unknown, defaulting to 1000 [ 112.904596][ T7775] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 112.912606][ T7775] netlink: 'syz.3.1495': attribute type 3 has an invalid length. [ 112.938209][ T7768] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 112.989312][ T7770] block device autoloading is deprecated and will be removed. [ 113.585145][ T7799] loop4: detected capacity change from 0 to 2048 [ 113.596963][ T7799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.711547][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.971214][ T7813] FAULT_INJECTION: forcing a failure. [ 113.971214][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 113.984072][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.1.1511 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.984108][ T7813] Tainted: [W]=WARN [ 113.984116][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.984130][ T7813] Call Trace: [ 113.984165][ T7813] [ 113.984173][ T7813] __dump_stack+0x1d/0x30 [ 113.984198][ T7813] dump_stack_lvl+0xe8/0x140 [ 113.984222][ T7813] dump_stack+0x15/0x1b [ 113.984312][ T7813] should_fail_ex+0x265/0x280 [ 113.984334][ T7813] ? alloc_tty_struct+0x4c/0x400 [ 113.984358][ T7813] should_failslab+0x8c/0xb0 [ 113.984392][ T7813] __kmalloc_cache_noprof+0x4c/0x4a0 [ 113.984460][ T7813] alloc_tty_struct+0x4c/0x400 [ 113.984504][ T7813] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 113.984539][ T7813] pty_unix98_install+0x105/0x390 [ 113.984575][ T7813] tty_init_dev+0x7c/0x330 [ 113.984735][ T7813] ptmx_open+0xda/0x240 [ 113.984767][ T7813] chrdev_open+0x2eb/0x3a0 [ 113.984798][ T7813] do_dentry_open+0x649/0xa20 [ 113.984815][ T7813] ? __pfx_chrdev_open+0x10/0x10 [ 113.984856][ T7813] vfs_open+0x37/0x1e0 [ 113.984876][ T7813] path_openat+0x1c5e/0x2170 [ 113.984930][ T7813] ? path_openat+0x1bf8/0x2170 [ 113.985020][ T7813] ? _parse_integer_limit+0x170/0x190 [ 113.985062][ T7813] do_filp_open+0x109/0x230 [ 113.985167][ T7813] file_open_name+0xfa/0x120 [ 113.985191][ T7813] __se_sys_acct+0xeb/0x530 [ 113.985215][ T7813] __x64_sys_acct+0x1f/0x30 [ 113.985233][ T7813] x64_sys_call+0x2f3a/0x3000 [ 113.985338][ T7813] do_syscall_64+0xd2/0x200 [ 113.985360][ T7813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 113.985389][ T7813] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 113.985432][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.985458][ T7813] RIP: 0033:0x7f475ddaf6c9 [ 113.985476][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.985499][ T7813] RSP: 002b:00007f475c817038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 113.985519][ T7813] RAX: ffffffffffffffda RBX: 00007f475e005fa0 RCX: 00007f475ddaf6c9 [ 113.985533][ T7813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 113.985546][ T7813] RBP: 00007f475c817090 R08: 0000000000000000 R09: 0000000000000000 [ 113.985632][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.985645][ T7813] R13: 00007f475e006038 R14: 00007f475e005fa0 R15: 00007ffd86abec28 [ 113.985663][ T7813] [ 114.334217][ T7817] can0: slcan on ptm1. [ 114.405647][ T7817] can0 (unregistered): slcan off ptm1. [ 114.417240][ T7815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.429065][ T7817] Falling back ldisc for ptm1. [ 114.498710][ T7833] loop1: detected capacity change from 0 to 512 [ 114.510065][ T7833] EXT4-fs: Ignoring removed i_version option [ 114.528317][ T7833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.572105][ T7833] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.1517: corrupted xattr entries [ 114.585859][ T7833] EXT4-fs (loop1): 1 orphan inode deleted [ 114.597962][ T7833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.660243][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.711894][ T7841] lo speed is unknown, defaulting to 1000 [ 114.771674][ T7841] siw: device registration error -23 [ 114.782125][ T7843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1521'. [ 114.791976][ T3968] Bluetooth: hci0: command 0x1003 tx timeout [ 114.841187][ T4679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.884416][ T7845] netlink: 'syz.3.1522': attribute type 5 has an invalid length. [ 114.905964][ T7765] FAULT_INJECTION: forcing a failure. [ 114.905964][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 114.918617][ T7765] CPU: 0 UID: 0 PID: 7765 Comm: syz.2.1492 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.918695][ T7765] Tainted: [W]=WARN [ 114.918702][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.918717][ T7765] Call Trace: [ 114.918724][ T7765] [ 114.918733][ T7765] __dump_stack+0x1d/0x30 [ 114.918756][ T7765] dump_stack_lvl+0xe8/0x140 [ 114.918777][ T7765] dump_stack+0x15/0x1b [ 114.918794][ T7765] should_fail_ex+0x265/0x280 [ 114.918856][ T7765] should_failslab+0x8c/0xb0 [ 114.918926][ T7765] __kmalloc_noprof+0xa5/0x570 [ 114.918956][ T7765] ? kobject_get_path+0x92/0x1c0 [ 114.919041][ T7765] kobject_get_path+0x92/0x1c0 [ 114.919075][ T7765] kobject_uevent_env+0x1da/0x570 [ 114.919111][ T7765] ? device_pm_check_callbacks+0x683/0x6a0 [ 114.919227][ T7765] kobject_uevent+0x1d/0x30 [ 114.919310][ T7765] device_del+0x710/0x790 [ 114.919332][ T7765] rfkill_unregister+0x80/0x170 [ 114.919420][ T7765] hci_unregister_dev+0x26c/0x2b0 [ 114.919443][ T7765] hci_uart_tty_close+0x115/0x170 [ 114.919478][ T7765] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 114.919514][ T7765] tty_ldisc_close+0x74/0xa0 [ 114.919551][ T7765] tty_set_ldisc+0x1b9/0x380 [ 114.919636][ T7765] tiocsetd+0x51/0x60 [ 114.919660][ T7765] tty_ioctl+0xa79/0xb80 [ 114.919682][ T7765] ? __pfx_tty_ioctl+0x10/0x10 [ 114.919714][ T7765] __se_sys_ioctl+0xce/0x140 [ 114.919741][ T7765] __x64_sys_ioctl+0x43/0x50 [ 114.919800][ T7765] x64_sys_call+0x1816/0x3000 [ 114.919825][ T7765] do_syscall_64+0xd2/0x200 [ 114.919852][ T7765] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 114.919942][ T7765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.919969][ T7765] RIP: 0033:0x7f86e867f6c9 [ 114.919984][ T7765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.920082][ T7765] RSP: 002b:00007f86e70e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.920102][ T7765] RAX: ffffffffffffffda RBX: 00007f86e88d5fa0 RCX: 00007f86e867f6c9 [ 114.920115][ T7765] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000003 [ 114.920128][ T7765] RBP: 00007f86e70e7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.920140][ T7765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.920155][ T7765] R13: 00007f86e88d6038 R14: 00007f86e88d5fa0 R15: 00007fffd8f91a68 [ 114.920217][ T7765] [ 115.214401][ T7849] loop1: detected capacity change from 0 to 512 [ 115.232190][ T29] kauditd_printk_skb: 2130 callbacks suppressed [ 115.232203][ T29] audit: type=1326 audit(1763026843.453:37288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 115.262885][ T29] audit: type=1326 audit(1763026843.483:37289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 115.286496][ T29] audit: type=1326 audit(1763026843.483:37290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 115.309939][ T29] audit: type=1326 audit(1763026843.483:37291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 115.333504][ T29] audit: type=1326 audit(1763026843.483:37292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 115.359188][ T7849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.382932][ T7849] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.394409][ T29] audit: type=1326 audit(1763026843.583:37293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 115.418030][ T29] audit: type=1326 audit(1763026843.583:37294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 115.441474][ T29] audit: type=1326 audit(1763026843.583:37295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f0cd29ff6c9 code=0x7ffc0000 [ 115.464978][ T29] audit: type=1326 audit(1763026843.593:37296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0cd29f6567 code=0x7ffc0000 [ 115.488449][ T29] audit: type=1326 audit(1763026843.593:37297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.4.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0cd299b779 code=0x7ffc0000 [ 115.496547][ T7849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.600094][ T7860] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1520'. [ 115.621060][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 115.633505][ T7860] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1520'. [ 115.697817][ T7862] can0: slcan on ptm1. [ 115.735810][ T7862] can0 (unregistered): slcan off ptm1. [ 115.741559][ T7862] Falling back ldisc for ptm1. [ 115.757981][ T7864] netlink: 'syz.2.1528': attribute type 3 has an invalid length. [ 115.766436][ T7864] netlink: 'syz.2.1528': attribute type 3 has an invalid length. [ 115.811291][ T7866] netlink: 'syz.2.1529': attribute type 3 has an invalid length. [ 115.819372][ T7866] netlink: 'syz.2.1529': attribute type 3 has an invalid length. [ 116.194361][ T7882] infiniband sy: set down [ 116.198866][ T7882] infiniband sy: added bond_slave_0 [ 116.208492][ T7882] RDS/IB: sy: added [ 116.212487][ T7882] smc: adding ib device sy with port count 1 [ 116.219033][ T7882] smc: ib device sy port 1 has no pnetid [ 116.329863][ T7893] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 116.554447][ T7909] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1547'. [ 116.588398][ T7911] ipt_REJECT: TCP_RESET invalid for non-tcp [ 116.662515][ T7915] lo speed is unknown, defaulting to 1000 [ 116.668925][ T7918] lo speed is unknown, defaulting to 1000 [ 116.976016][ T7935] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1555'. [ 117.017833][ T7938] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1558'. [ 117.041466][ T7940] program syz.4.1556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.303345][ T7953] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 117.319628][ T7953] team0 (unregistering): Port device team_slave_0 removed [ 117.370017][ T7953] team0 (unregistering): Port device dummy0 removed [ 117.390722][ T10] syz!: Port: 1 Link DOWN [ 117.618592][ T7975] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1573'. [ 117.862595][ T7983] loop1: detected capacity change from 0 to 1024 [ 117.869995][ T7983] EXT4-fs: Ignoring removed orlov option [ 117.875993][ T7983] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.898571][ T7983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.917555][ T7983] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 117.930080][ T7983] EXT4-fs (loop1): This should not happen!! Data will be lost [ 117.930080][ T7983] [ 117.939827][ T7983] EXT4-fs (loop1): Total free blocks count 0 [ 117.945842][ T7983] EXT4-fs (loop1): Free/Dirty block details [ 117.951888][ T7983] EXT4-fs (loop1): free_blocks=0 [ 117.956847][ T7983] EXT4-fs (loop1): dirty_blocks=0 [ 117.961961][ T7983] EXT4-fs (loop1): Block reservation details [ 117.968005][ T7983] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 117.993553][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.075148][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'. [ 118.095370][ T7993] team0 (unregistering): Port device team_slave_0 removed [ 118.104877][ T7993] team0 (unregistering): Port device team_slave_1 removed [ 118.229187][ T8008] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1586'. [ 118.258869][ T8012] can0: slcan on ptm0. [ 118.306316][ T8012] can0 (unregistered): slcan off ptm0. [ 118.312453][ T8012] Falling back ldisc for ptm0. [ 118.358468][ T8020] can0: slcan on ptm0. [ 118.386168][ T8020] can0 (unregistered): slcan off ptm0. [ 118.392758][ T8020] Falling back ldisc for ptm0. [ 118.588641][ T8041] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 119.297913][ T8101] can0: slcan on ttyS3. [ 119.376317][ T8101] can0 (unregistered): slcan off ttyS3. [ 119.755918][ T8119] can0: slcan on ptm0. [ 119.816348][ T8119] can0 (unregistered): slcan off ptm0. [ 119.835382][ T8119] Falling back ldisc for ptm0. [ 120.236404][ T29] kauditd_printk_skb: 2479 callbacks suppressed [ 120.236421][ T29] audit: type=1326 audit(1763026848.372:39777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 120.266343][ T29] audit: type=1326 audit(1763026848.372:39778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa505eb779 code=0x7ffc0000 [ 120.289798][ T29] audit: type=1326 audit(1763026848.372:39779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 120.313429][ T29] audit: type=1326 audit(1763026848.372:39780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 120.337006][ T29] audit: type=1326 audit(1763026848.372:39781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa505eb779 code=0x7ffc0000 [ 120.360502][ T29] audit: type=1326 audit(1763026848.372:39782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 120.384013][ T29] audit: type=1326 audit(1763026848.382:39783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 120.407429][ T29] audit: type=1326 audit(1763026848.382:39784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa505eb779 code=0x7ffc0000 [ 120.430947][ T29] audit: type=1326 audit(1763026848.382:39785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ffa5064f6c9 code=0x7ffc0000 [ 120.454433][ T29] audit: type=1326 audit(1763026848.392:39786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8128 comm="syz.0.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffa50646567 code=0x7ffc0000 [ 120.761807][ T8154] __nla_validate_parse: 3 callbacks suppressed [ 120.761823][ T8154] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1651'. [ 120.868057][ T8158] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1652'. [ 120.932955][ T8167] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1656'. [ 121.048510][ T8191] loop4: detected capacity change from 0 to 512 [ 121.057976][ T8191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.070571][ T8191] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.083234][ T8191] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1665: corrupted inode contents [ 121.095181][ T8191] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.1665: mark_inode_dirty error [ 121.106937][ T8191] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.1665: corrupted inode contents [ 121.118985][ T8191] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1665: mark_inode_dirty error [ 121.153025][ T8191] netlink: 'syz.4.1665': attribute type 3 has an invalid length. [ 121.160951][ T8191] netlink: 'syz.4.1665': attribute type 3 has an invalid length. [ 121.177788][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.368653][ T36] hid_parser_main: 32 callbacks suppressed [ 121.368673][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.382229][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x2 [ 121.389667][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.397103][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.406294][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.413822][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.421263][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.428739][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.436136][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x0 [ 121.443645][ T36] hid-generic 0005:0000:0000.000B: unknown main item tag 0x2 [ 121.452475][ T36] hid-generic 0005:0000:0000.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 121.718354][ T8170] ================================================================== [ 121.726520][ T8170] BUG: KCSAN: data-race in pipe_release / pipe_wait_readable [ 121.733923][ T8170] [ 121.736248][ T8170] read-write to 0xffff88811d7badec of 4 bytes by task 8162 on cpu 0: [ 121.744314][ T8170] pipe_release+0x16a/0x1d0 [ 121.748834][ T8170] __fput+0x29b/0x650 [ 121.752817][ T8170] ____fput+0x1c/0x30 [ 121.756804][ T8170] task_work_run+0x131/0x1a0 [ 121.761409][ T8170] get_signal+0xe12/0xf70 [ 121.765739][ T8170] arch_do_signal_or_restart+0x96/0x440 [ 121.771287][ T8170] exit_to_user_mode_loop+0x77/0x110 [ 121.776583][ T8170] do_syscall_64+0x1d6/0x200 [ 121.781182][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.787079][ T8170] [ 121.789398][ T8170] read to 0xffff88811d7badec of 4 bytes by task 8170 on cpu 1: [ 121.796932][ T8170] pipe_wait_readable+0x1c2/0x210 [ 121.801976][ T8170] do_tee+0x1fc/0x910 [ 121.805967][ T8170] __se_sys_tee+0x93/0x130 [ 121.810397][ T8170] __x64_sys_tee+0x55/0x70 [ 121.814815][ T8170] x64_sys_call+0xb7d/0x3000 [ 121.819414][ T8170] do_syscall_64+0xd2/0x200 [ 121.823926][ T8170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.829828][ T8170] [ 121.832145][ T8170] value changed: 0x00000002 -> 0x00000001 [ 121.837848][ T8170] [ 121.840180][ T8170] Reported by Kernel Concurrency Sanitizer on: [ 121.846342][ T8170] CPU: 1 UID: 0 PID: 8170 Comm: syz.0.1654 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 121.857644][ T8170] Tainted: [W]=WARN [ 121.861442][ T8170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.871511][ T8170] ==================================================================