last executing test programs: 26.256666679s ago: executing program 4 (id=677): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r0 = openat(0xffffffffffffff9c, 0x0, 0x80042, 0x4d) fallocate(r0, 0x100000000000011, 0x2000, 0x2f93) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) fallocate(r1, 0x20, 0x0, 0x4000) 25.914399763s ago: executing program 4 (id=681): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x101) r1 = epoll_create1(0x80000) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x6, 0xf8, 0x4, 0xff, 0x0, 0x0, 0x880, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={0x0, 0x2}, 0x9, 0x2, 0x7fff, 0x3, 0x70, 0x7, 0x6, 0x0, 0x3, 0x0, 0x7c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r4, 0x108000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x4) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x1, 0x80}], 0x76) 25.598512152s ago: executing program 4 (id=683): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/dynamic_events\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$usbfs(r0, 0x0, 0x0) 25.510052018s ago: executing program 4 (id=684): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) wait4(0x0, 0x0, 0x8, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 24.6385145s ago: executing program 4 (id=694): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x5, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x400d4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x6048040) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 23.964815445s ago: executing program 4 (id=700): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000001}, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000002980), 0x12) 23.926841162s ago: executing program 32 (id=700): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000001}, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000100), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000002980), 0x12) 4.575304879s ago: executing program 0 (id=928): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x2000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x20000014) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x13, 0x32, 0xe, 0xb, 0xa, 0x7, 0x0, 0x31, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x218, 0x2e0, 0x2e0, 0x218, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0x80000000, 0x0, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 4.51390629s ago: executing program 0 (id=940): socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x2, @perf_bp={0x0, 0xe}, 0x18011, 0x1, 0x10000, 0x2, 0x5, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd68c8afe300642f01f0128bfe8000000000000000000000000000bb0000"], 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 3.658849639s ago: executing program 0 (id=939): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x0) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x89, &(0x7f0000000180), &(0x7f00000001c0)=0x4) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x541c, &(0x7f0000000280)={0x6, 0x9}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone(0xb86511, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 3.158215903s ago: executing program 5 (id=942): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x111, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x20}, 0xe900) r1 = socket(0x1, 0x5, 0x0) mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x60000002}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80002017}) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003280)=[{0x0}, {&(0x7f0000002040)="010f9080fdde28", 0x7}], 0x2, &(0x7f00000033c0)=ANY=[], 0x118}, 0x80) 3.003599571s ago: executing program 5 (id=947): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1048b, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@debug}, {@data_err_abort}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@minixdf}]}, 0xfe, 0x459, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='.\x00', 0x4000523) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYRES64=r0], 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x200000, &(0x7f0000000d00), 0x3, 0x572, &(0x7f00000006c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x6001, 0x88) unlinkat(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) 2.464087321s ago: executing program 0 (id=950): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000140)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x118e5151, 0x0}, 0x20004095) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32, @ANYRESHEX], 0x3, 0x800, &(0x7f0000003640)="$eJzs3U9sHOXZAPBnjB0boy8g+MQXRSFMEr4qUYNZ22CwONBlPXYG7F1rd1MlqiqISIKiOIBAiBJVpblAW7WqeuqRckX0wK1VpVbqoe2pUjn00kOlSlxa0aqHqlVVKdXO7MZ/144TJ6b097PYd/adZ95539lhn53NzkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUZiqV8STm84E4lfZXm2k2FjaZ32vvZ6uKTdYbkXT+i5GR2FdW7fvf5dn3dx4Ox4Hy2YEY6RQjcfmu++958r7Bgd7ym3ToRh3qP2to5ZMk4uudTl08s7R07tVb0JHb6Fs/6U6MXPci/7jaeZzL6nmrkS9U57I0bzXS6ampyiMnZlvpbD6ftU632tlCWmtm1XajmR6tHUvHp6cn02zsdONkfW6mOp/1Kh9/eKJSmUqfGVvMqs1Wo/7IM2Ot2ol8fj6vzxUxE5U3ohPzeGdHfDZvp+2supCm5y8snZvcqqudoPFVNcOrdpwDD93z8et3d3e8fo0k3fkT4+MTE+NTj00/9nilMjhRmVhdUVkjrkXEQEQn4pbstOyuuzaoG+y3R0Vcvfvm37hhBwx083/MRx71OBmnIo00BorH5b+hqMVMNKMRC53nvx1aM39d/v//R/78683WuzL/97L8vuXZ+6PI/wfLZwf75f91vdiBv8F+rdY/KHuzsu61eDMux8U4E0uxFOfi1W2s6XM/7La3Z22rt/BvYGfbm4ss6pFHKxqRx0JUi5q0W5PGdEzFVFTiuTgRs9GKNGYjj/nIohWnoxXtyIo9qhbNyKIa7WhEM9I4GrU4FmmMx3RMx2SkkcVYnI5GnIx6zMVMVItWzseFYrtPrunX/V97/scv/ubjdzvT14LGNxlI0vkw1wn66yZB69L9NvJ/J2Kgu3fflpzEbTKyzVd1J962YUdcLfL/4G53AwAAALiFkuLb9yQihuKBYmo2n8++tNvdAgAAAHZQ8bvmA51iqDP1QCSd4//KBpEf3fa+AQAAADsjKc6xSyJiNB4sp3qnS230JQAAAADwH6j49/+DnWI04q2iwvE/AAAAfMZ8o9819v+wp3uN3dbicPLTv0SzOZRcWTz1UHKp2omrXrqjXK5bfPFai+3Z/cneopHzTxTF1ODlu5KIGKxlB5Le1S//NVyWnxSP+5cvQNjvWv/JFh2IDTpw3+C1DhTP4ttxqIw5dLYsz/bmlGsZnc3ns7FaY/7J8aT75Uj79ZcufCWK4X+zvrA3ifMXls6NvfDy0tmiL1c6rVy51L08fNJbKqI8oWKTvlztboF4YOMRDxUnYnTXO1qut7Jy/N2ryQ5sPv5k5TrfjsNlzOHRshxdPf6RzjrHx54cj2p170A7O9V+/eqK0Xd7Mb488uHeaJNtvApvx5Ey5sjRI2WxQS8mVvXipfW9mFi5/a9vW1x3L9499Napv/2ikWSTW/Vi8iZ7AbBbzhdX/VnOQncWWeifV0udhLYm797ZW3I773Lnlz9l9JZfkesGY112T28ku78dR8uYo+XnicH9G+SVygbv6K9ceOWX3Xf0R9///g++fPBXH67J69voxftxrIzpFnHvz/vk2M6Yv7Mmq77XWeK9vuttzU8kbwxPDiXlzYfi8sMXLp158dyL516amJicqjxaqTw2EUPFR4Vu0aenMg/Af7et7rHz4Vevhfa7C0/y6BZH1fde+0nBWLwQL8dSnI3jxdkGEfHgxq2OrvgZwvEtjlpHV9zh5fgWx5bLsRNrY4ePJNEndnLFFvu/7xXF32/RCwIAt8HhXh7e0+8ee/eU89/4n+4SayLuSJLjWxx3r87lx8ob5/aOjqN/Ll/pj93yiVu+RQDgsy9rfpKMtt9Jms188bnx6enxavtEljYbtWfTZj4zl6V5vZ01ayeq9bksXWw22o1a76vjmayVtk4uLjaa7XS20UwXG638VHHn97R76/dWtlCtt/Naa3E+q7aSiKi3q7V2OpO3auniyafn89aJrFks3FrMavlsXqu280Y9bTVONmvZWJq2smxFYD6T1dv5bJ4NpXk9XWzmC9XmlYiYP7mQpTNZq9bMF9uNssFao1xXXp9tNBeKZsfWD/9Pt3t7A8CnwWtvXr54Zmnp3Ks3NvG76wne7TECAKvJ0gAAAAAAAAAAAAAA8Om3/nS9Tu22TgQcihs+ffC14biZsw8/exOf/6B8WXaiwZtp585Vr+me7s6y+9tn2xPPP/XUxeWaZHDl5n36rX0nfp9FObrh6C01sr6djf9P2ehU13f2Ruz50XfLmi/0CU4Gd3ikH0XEDSx+NdkkZjfejQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc/8OAAD//97aTX4=") sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 2.188179563s ago: executing program 5 (id=952): socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a, 0x2, @perf_bp={0x0, 0xe}, 0x18011, 0x1, 0x10000, 0x2, 0x5, 0x80000001, 0x800, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd68c8afe300642f01f0128bfe8000000000000000000000000000bb0000"], 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) 1.852890025s ago: executing program 2 (id=958): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r1, 0x29, 0x7, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0xf, 0xa, 0x0) 1.82816213s ago: executing program 0 (id=959): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x744c89a2}, 0x1, 0x2, 0xffffffff, 0x12, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x9}, 0x0, 0x40007, 0xffffffffffffffff, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x24, 0x101, 0x70bd22, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff270, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) 1.787362367s ago: executing program 2 (id=960): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0x808, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$getownex(r3, 0x10, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, 0x0, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 1.678528438s ago: executing program 3 (id=961): syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x121000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x97ff}], 0x400000000000172, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x1a, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xa, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300fb0000000000000800000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000001000000f00000093030000000800000001000000050000000a000000000000000600"], 0x0, 0x1a, 0x0, 0x4, 0x4004}, 0x28) setrlimit(0x1, &(0x7f0000000000)={0x9, 0xd}) 1.615172779s ago: executing program 3 (id=962): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10d5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x2008800, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, 0x0, 0x14) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x31}) close_range(r1, 0xffffffffffffffff, 0x0) 1.55797699s ago: executing program 2 (id=963): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x2000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x610) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, 0x0, 0x20000014) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000080)={0x13, 0x32, 0xe, 0xb, 0xa, 0x7, 0x0, 0x31, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x218, 0x2e0, 0x2e0, 0x218, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xe0, 0x128, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x7, 0x80000000, 0x0, {0x2}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 1.521797817s ago: executing program 3 (id=964): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8929, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.479299964s ago: executing program 2 (id=965): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(0x0, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000000)={[{@nodiscard}], [{@uid_eq={'uid', 0x3d, 0xee00}}]}, 0x7, 0x4ee, &(0x7f0000002080)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FAMILY={0x5, 0xd, 0x26}, @GTPA_VERSION={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x80}, 0x1, 0x0, 0x0, 0x41}, 0x4000091) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=P']) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x23}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.354521788s ago: executing program 2 (id=966): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000380)={[{@data_err_ignore}, {@resgid}, {@commit={'commit', 0x3d, 0xf1}}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$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") sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x9b, "736a417e64104a77d5445974f8fdf3e4316fad0168b8057249ede8629f8713f829d0718b9a59264a71a2bc28fb98562cdacaa8cd79dd4a3395f41ac0c90aa57d02bc4eb08f0c8581191c307be78ae48b4dac1d00156402075a150c4651b4de95270e8cd46bbc57445f6d688e7ca1b7f1a6ac58f238cc76def8aa7bb838e985f737674e9f169462d68b6a73a207cfa4e5ff900191d8e7070dbd728c"}, &(0x7f00000004c0)=0xa3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x6, 0x2cb, &(0x7f0000000e00)="$eJzs3buLXFUcB/Df3d15GMGZwkoEL5jCxpBNazOLTGBwClGmUAsNJgHZGYQEFnzgJJWtjaV/gSDY+U/YWNgHbAU7Fwxcua95ZWaSCZnEx+dTJGfPOd9zfvfunV22mDMfvTw5vZ7Gzbtf3ot2O4mDXvTiPIluHETtTizpfRMAwL/ZeZbFH1lpeSTZmstH27NJd/ZYIQDwpG3+/b/Bj3svCQDYs3ffe/+tk+Gw/06atuPq5OuzUf4nff5/OX5yMz6JcdyIy9GJ+xHZTNm+mmXZ9CjNdePiZHo2ypOTD3+u1j/5PaLIH0cnukXXcn4w7B+npYX8NK/jQrV/L89fiU68uGb/wbB/ZU0+Rs147dWF+i9FJ375OD6NcVwviijyr/81GPa/Ok7TN7Nv//zig7y8PJ9Mz0atYt5cdviUvzUAAAAAAAAAAAAAAAAAAAAAAPyHXUrTVqTFP924OMm7qvN3Du/nXzQirXWXz+cp87NTglfOB5pm8V19Ps/lNE2zauI8fxQvHcXRs7lqAAAAAAAAAAAAAAAAAAAA+Ge5/dnnp9fG4xu3nkijPg2gflv/467TW+h5JdbM6caspzXf8qDadsvKcVjPSSK2lpGvuFPxjYfvvqHx3KbU9z/seuvaD5/TeIwKd2zUT9fptWT9PWxF3dOuH5KfFuc04xH3am4aynZ6/JprhzqPGr93oXo1NZ8veqZbJkeyrbA3fitXqnqS1atoFnd1bbxRNcrXQjX0wkK8vdPz/ODPisRpHQAAAAAAAAAAAAAAAAAAsFfzN/2uGby7IfTroPyQ/+juuToAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeDrmn/+/qXGePTA0rcIrkyPejtV4M27dfsaXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/A3wEAAP//EPpehQ==") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f0000000280)=ANY=[], 0x33) sendfile(r2, r1, 0x0, 0x10000) 1.332673272s ago: executing program 3 (id=967): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xfe88, &(0x7f00000000c0)=""/181}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') socket(0x2, 0x80805, 0x0) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x160, 0x0, &(0x7f0000000940)="2f54d77e42bfcc1753fc634a54751cdaba85bf0a6766dff512a0d760384c938b068bf7827ed553948564beab936faa0c6379bfd2ad0aac30b47b71294c4e0589151bb4f588dd4fb0f637f2ab04e1f1b2b32c7f863ff50b88162bb9a78f9e91878dea832c1270826a49d8f6a8a5e5dba7d91931ee931313572679c112a1ad12745d907a2bbcb636bc5fde0a1991fa65389e2367e99b4c355ba3b03420d54cb82bd5645292f7358a04a6599edffcbd9ee9da67e90d3c2606ebcc88d483462e9d04a998f2c8c040981c38bff99daed1dbd48e08e16f3a4dc28500fc12519a87fa11be47236b8566abef0800000000000000922f3a5acac6511444c6b15460c2bc7a89255aeef67bcb2a651e4ecb4cdb8f1af9102e3cf76efe7583000d544a726630561d586439fad2c6d2080b3ec0e3c68e83cc60fddb820d1edd411f18d86e818a706dc415eef731526d5dd047ed3a2038236257c2e5ede6b7b93d0c080211e892", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.219212303s ago: executing program 1 (id=968): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x88c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000a80)="$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") r0 = getpid() perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x681c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0x4}, 0x13c0e8, 0x0, 0x0, 0x989c6d54a3fb7abf, 0x3, 0x10003, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x37, 0x5, 0x5a77c58ccee43646, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x4, 0x4}}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$nl_xfrm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@report={0x4c, 0x20, 0x20, 0x70bd2a, 0x25dfdbff, {0xff, {@in=@rand_addr=0x64010100, @in=@empty, 0x4e24, 0xa89d, 0x4e23, 0x4f6, 0x2, 0x80, 0x20, 0x2e, r3, r4}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20040810}, 0x40005) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0x2000}]) 786.157333ms ago: executing program 0 (id=969): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 785.825093ms ago: executing program 5 (id=970): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x108081, 0x400000, 0x100, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000140)='./file0\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x118e5151, 0x0}, 0x20004095) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES32, @ANYRESHEX], 0x3, 0x800, &(0x7f0000003640)="$eJzs3U9sHOXZAPBnjB0boy8g+MQXRSFMEr4qUYNZ22CwONBlPXYG7F1rd1MlqiqISIKiOIBAiBJVpblAW7WqeuqRckX0wK1VpVbqoe2pUjn00kOlSlxa0aqHqlVVKdXO7MZ/144TJ6b097PYd/adZ95539lhn53NzkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJHUZiqV8STm84E4lfZXm2k2FjaZ32vvZ6uKTdYbkXT+i5GR2FdW7fvf5dn3dx4Ox4Hy2YEY6RQjcfmu++958r7Bgd7ym3ToRh3qP2to5ZMk4uudTl08s7R07tVb0JHb6Fs/6U6MXPci/7jaeZzL6nmrkS9U57I0bzXS6ampyiMnZlvpbD6ftU632tlCWmtm1XajmR6tHUvHp6cn02zsdONkfW6mOp/1Kh9/eKJSmUqfGVvMqs1Wo/7IM2Ot2ol8fj6vzxUxE5U3ohPzeGdHfDZvp+2supCm5y8snZvcqqudoPFVNcOrdpwDD93z8et3d3e8fo0k3fkT4+MTE+NTj00/9nilMjhRmVhdUVkjrkXEQEQn4pbstOyuuzaoG+y3R0Vcvfvm37hhBwx083/MRx71OBmnIo00BorH5b+hqMVMNKMRC53nvx1aM39d/v//R/78683WuzL/97L8vuXZ+6PI/wfLZwf75f91vdiBv8F+rdY/KHuzsu61eDMux8U4E0uxFOfi1W2s6XM/7La3Z22rt/BvYGfbm4ss6pFHKxqRx0JUi5q0W5PGdEzFVFTiuTgRs9GKNGYjj/nIohWnoxXtyIo9qhbNyKIa7WhEM9I4GrU4FmmMx3RMx2SkkcVYnI5GnIx6zMVMVItWzseFYrtPrunX/V97/scv/ubjdzvT14LGNxlI0vkw1wn66yZB69L9NvJ/J2Kgu3fflpzEbTKyzVd1J962YUdcLfL/4G53AwAAALiFkuLb9yQihuKBYmo2n8++tNvdAgAAAHZQ8bvmA51iqDP1QCSd4//KBpEf3fa+AQAAADsjKc6xSyJiNB4sp3qnS230JQAAAADwH6j49/+DnWI04q2iwvE/AAAAfMZ8o9819v+wp3uN3dbicPLTv0SzOZRcWTz1UHKp2omrXrqjXK5bfPFai+3Z/cneopHzTxTF1ODlu5KIGKxlB5Le1S//NVyWnxSP+5cvQNjvWv/JFh2IDTpw3+C1DhTP4ttxqIw5dLYsz/bmlGsZnc3ns7FaY/7J8aT75Uj79ZcufCWK4X+zvrA3ifMXls6NvfDy0tmiL1c6rVy51L08fNJbKqI8oWKTvlztboF4YOMRDxUnYnTXO1qut7Jy/N2ryQ5sPv5k5TrfjsNlzOHRshxdPf6RzjrHx54cj2p170A7O9V+/eqK0Xd7Mb488uHeaJNtvApvx5Ey5sjRI2WxQS8mVvXipfW9mFi5/a9vW1x3L9499Napv/2ikWSTW/Vi8iZ7AbBbzhdX/VnOQncWWeifV0udhLYm797ZW3I773Lnlz9l9JZfkesGY112T28ku78dR8uYo+XnicH9G+SVygbv6K9ceOWX3Xf0R9///g++fPBXH67J69voxftxrIzpFnHvz/vk2M6Yv7Mmq77XWeK9vuttzU8kbwxPDiXlzYfi8sMXLp158dyL516amJicqjxaqTw2EUPFR4Vu0aenMg/Af7et7rHz4Vevhfa7C0/y6BZH1fde+0nBWLwQL8dSnI3jxdkGEfHgxq2OrvgZwvEtjlpHV9zh5fgWx5bLsRNrY4ePJNEndnLFFvu/7xXF32/RCwIAt8HhXh7e0+8ee/eU89/4n+4SayLuSJLjWxx3r87lx8ob5/aOjqN/Ll/pj93yiVu+RQDgsy9rfpKMtt9Jms188bnx6enxavtEljYbtWfTZj4zl6V5vZ01ayeq9bksXWw22o1a76vjmayVtk4uLjaa7XS20UwXG638VHHn97R76/dWtlCtt/Naa3E+q7aSiKi3q7V2OpO3auniyafn89aJrFks3FrMavlsXqu280Y9bTVONmvZWJq2smxFYD6T1dv5bJ4NpXk9XWzmC9XmlYiYP7mQpTNZq9bMF9uNssFao1xXXp9tNBeKZsfWD/9Pt3t7A8CnwWtvXr54Zmnp3Ks3NvG76wne7TECAKvJ0gAAAAAAAAAAAAAA8Om3/nS9Tu22TgQcihs+ffC14biZsw8/exOf/6B8WXaiwZtp585Vr+me7s6y+9tn2xPPP/XUxeWaZHDl5n36rX0nfp9FObrh6C01sr6djf9P2ehU13f2Ruz50XfLmi/0CU4Gd3ikH0XEDSx+NdkkZjfejQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc/8OAAD//97aTX4=") sendmsg$nl_netfilter(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 755.492919ms ago: executing program 3 (id=971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x8400, &(0x7f0000000080)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031372507000037773756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db857091a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcd9e94e5c255b5e8c90613e6b598b3b7a2c05de53dab700000000"], 0xfe, 0x2a1, &(0x7f0000000640)="$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") r1 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) rt_sigsuspend(0xffffffffffffffff, 0x8) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c5}, 0x200004c0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0) 745.222201ms ago: executing program 1 (id=972): msgget(0x2, 0x8) fchdir(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x1020, 0x0, 0xefffffff, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000100000000000000000010003c0003010000000000000000000010002b00000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 477.537581ms ago: executing program 2 (id=973): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000000104000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0), 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000"], 0xa0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 474.785431ms ago: executing program 3 (id=983): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4e142, 0x2e) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 383.974718ms ago: executing program 1 (id=974): syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x121000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x97ff}], 0x400000000000172, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x1a, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0xa, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="310300fb0000000000000800000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000001000000f00000093030000000800000001000000050000000a000000000000000600"], 0x0, 0x1a, 0x0, 0x4, 0x4004}, 0x28) setrlimit(0x1, &(0x7f0000000000)={0x9, 0xd}) 265.48488ms ago: executing program 5 (id=975): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000010) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x56f, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') open(0x0, 0x20000, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) lstat(&(0x7f0000005400)='./file1\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) syz_emit_ethernet(0xd6, &(0x7f0000000b40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000021000a03a00fc00000000000000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 233.130766ms ago: executing program 1 (id=976): socket(0x2, 0xa, 0x300) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='bridge0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000400)={'bridge0\x00', 0x1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 147.356082ms ago: executing program 1 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000900007333f75e000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186b00000a0000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x8, 0xc5, &(0x7f00000005c0)=""/197, 0x41000, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x1, 0x3, 0x9}, 0x10, 0x4615, 0xffffffffffffffff, 0x1, &(0x7f0000000b40)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x2, 0x4, 0xb, 0x6}], 0x10, 0x9}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x3, 0x0, 0x0, 0x0, 0x7, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x10001, 0xf11}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x22005, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dca6ff", 0x24) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) kexec_load(0x20000000, 0x0, 0x0, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x14080) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x67f, 0x7fffffffffffffff}, 0x20, 0x0, 0xc40, 0x2, 0x0, 0xa, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x100000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x2401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x34, 0x3, "64000000746573745f6c6162656c000000000000050000000000000000000000000100"/48}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x104}}, 0x0) 9.264588ms ago: executing program 1 (id=978): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001f80)={0xfffffff9}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0x9ca86080, 0x0, 0xfffffffffffffcd8, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) connect$vsock_stream(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x80000000, 0x0, 0x9, 0x800003, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd(0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") 0s ago: executing program 5 (id=979): socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0xfffffeb1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x46e4, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x10000}}, 0xa) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): s `syz.1.238'. [ 53.160864][ T4426] vlan2: entered allmulticast mode [ 53.160883][ T4426] bridge1: entered allmulticast mode [ 53.165751][ T4426] bridge1: port 1(erspan0) entered blocking state [ 53.165786][ T4426] bridge1: port 1(erspan0) entered disabled state [ 53.165863][ T4426] erspan0: entered allmulticast mode [ 53.166301][ T4426] erspan0: entered promiscuous mode [ 53.166577][ T4426] bridge1: port 1(erspan0) entered blocking state [ 53.166605][ T4426] bridge1: port 1(erspan0) entered forwarding state [ 53.547074][ T4437] loop4: detected capacity change from 0 to 512 [ 53.575452][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.242: iget: bad i_size value: 38620345925642 [ 53.575492][ T4437] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 53.579718][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 53.579739][ C0] EXT4-fs (loop4): initial error at time 1790757999: ext4_orphan_get:1403: inode 15 [ 53.579768][ C0] EXT4-fs (loop4): last error at time 1790757999: ext4_orphan_get:1403: inode 15 [ 53.581382][ T4437] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.242: couldn't read orphan inode 15 (err -117) [ 53.581420][ T4437] loop4: lost filesystem error report for type 5 error -117 [ 53.586354][ T4437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.676108][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.880928][ T31] IPVS: starting estimator thread 0... [ 54.989898][ T4497] IPVS: using max 2544 ests per chain, 127200 per kthread [ 55.068305][ T4507] loop3: detected capacity change from 0 to 4096 [ 55.129055][ T4507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.188995][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 55.189012][ T29] audit: type=1400 audit(1790758001.267:714): avc: denied { write } for pid=4511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.207120][ T29] audit: type=1400 audit(1790758001.287:715): avc: denied { write } for pid=4525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.244147][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.366925][ T29] audit: type=1326 audit(1790758001.447:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.2.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 55.366988][ T29] audit: type=1326 audit(1790758001.447:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.2.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 55.368449][ T29] audit: type=1326 audit(1790758001.447:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.2.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 55.507520][ T29] audit: type=1326 audit(1790758001.557:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.2.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 55.507575][ T29] audit: type=1326 audit(1790758001.557:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4530 comm="syz.2.274" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 55.712094][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 55.975125][ T4550] syzkaller0: entered promiscuous mode [ 55.975173][ T4550] syzkaller0: entered allmulticast mode [ 56.112998][ T4564] process 'syz.0.273' launched './file0' with NULL argv: empty string added [ 56.118581][ T29] audit: type=1400 audit(1790758002.197:721): avc: denied { execute_no_trans } for pid=4558 comm="syz.0.273" path="/40/file0" dev="tmpfs" ino=233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.164555][ T4568] random: crng reseeded on system resumption [ 56.434715][ T29] audit: type=1400 audit(1790758002.517:722): avc: denied { bind } for pid=4571 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.504080][ T4574] syzkaller0: entered promiscuous mode [ 56.504099][ T4574] syzkaller0: entered allmulticast mode [ 56.681555][ T4588] loop0: detected capacity change from 0 to 512 [ 56.713534][ T4588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.713597][ T4588] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.833326][ T29] audit: type=1326 audit(1790758002.917:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.0.285" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 56.959360][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.073305][ T4585] loop2: detected capacity change from 0 to 512 [ 57.280196][ T4585] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.280702][ T4585] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.338334][ T4592] loop3: detected capacity change from 0 to 1024 [ 57.375822][ T4592] EXT4-fs: Ignoring removed i_version option [ 57.386097][ T4592] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 57.389666][ T4592] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.413704][ T4592] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 57.414290][ T4592] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.419189][ T4592] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.286: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.419299][ T4592] loop3: lost filesystem error report for type 5 error -117 [ 57.419592][ T4592] EXT4-fs (loop3): Remounting filesystem read-only [ 57.419774][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 57.419834][ C0] EXT4-fs (loop3): initial error at time 1790758003: ext4_free_blocks:6719 [ 57.419944][ C0] EXT4-fs (loop3): last error at time 1790758003: ext4_free_blocks:6719 [ 57.434842][ T4592] EXT4-fs (loop3): 1 orphan inode deleted [ 57.460077][ T4592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.502821][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.421714][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.972199][ T4623] random: crng reseeded on system resumption [ 59.188216][ T4621] loop0: detected capacity change from 0 to 512 [ 59.205905][ T4621] EXT4-fs: test_dummy_encryption option not supported [ 59.364624][ T4638] syzkaller0: entered promiscuous mode [ 59.364644][ T4638] syzkaller0: entered allmulticast mode [ 59.835108][ T4653] loop4: detected capacity change from 0 to 512 [ 59.928689][ T4653] EXT4-fs (loop4): 1 orphan inode deleted [ 59.938882][ T4653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.941986][ T4653] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.951508][ T114] EXT4-fs error (device loop4): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 1 [ 59.988206][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.142153][ T4676] random: crng reseeded on system resumption [ 60.798240][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 60.798270][ T29] audit: type=1400 audit(1790758006.877:746): avc: denied { mount } for pid=4693 comm="syz.0.314" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 61.213223][ T29] audit: type=1400 audit(1790758007.297:747): avc: denied { listen } for pid=4710 comm="syz.1.321" lport=50437 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.222271][ T29] audit: type=1400 audit(1790758007.297:748): avc: denied { accept } for pid=4710 comm="syz.1.321" lport=50437 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.279788][ T29] audit: type=1400 audit(1790758007.357:749): avc: denied { bind } for pid=4708 comm="syz.0.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 61.281996][ T29] audit: type=1400 audit(1790758007.367:750): avc: denied { mounton } for pid=4708 comm="syz.0.320" path="/52/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 61.522772][ T4718] Driver unsupported XDP return value 0 on prog (id 56) dev N/A, expect packet loss! [ 62.766716][ T4741] FAULT_INJECTION: forcing a failure. [ 62.766716][ T4741] name failslab, interval 1, probability 0, space 0, times 0 [ 62.766749][ T4741] CPU: 0 UID: 0 PID: 4741 Comm: syz.3.330 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.766782][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.766797][ T4741] Call Trace: [ 62.766805][ T4741] [ 62.766814][ T4741] __dump_stack+0x1d/0x30 [ 62.766845][ T4741] dump_stack_lvl+0x95/0xd0 [ 62.766884][ T4741] dump_stack+0x15/0x1b [ 62.766909][ T4741] should_fail_ex+0x262/0x280 [ 62.767007][ T4741] ? proc_self_get_link+0x96/0x110 [ 62.767032][ T4741] should_failslab+0x8c/0xb0 [ 62.767131][ T4741] __kmalloc_cache_noprof+0x7a/0x400 [ 62.767168][ T4741] ? selinux_inode_follow_link+0x1ac/0x1f0 [ 62.767254][ T4741] ? proc_self_get_link+0x96/0x110 [ 62.767336][ T4741] ? __pfx_proc_self_get_link+0x10/0x10 [ 62.767369][ T4741] proc_self_get_link+0x96/0x110 [ 62.767464][ T4741] pick_link+0x514/0x8e0 [ 62.767547][ T4741] step_into_slowpath+0x36a/0x4c0 [ 62.767579][ T4741] ? inode_permission+0x1da/0x3b0 [ 62.767641][ T4741] link_path_walk+0x947/0xdd0 [ 62.767675][ T4741] path_openat+0xe7/0x10d0 [ 62.767726][ T4741] do_file_open+0x16c/0x290 [ 62.767810][ T4741] do_sys_openat2+0xa0/0x130 [ 62.767883][ T4741] __x64_sys_openat+0xf2/0x120 [ 62.768127][ T4741] x64_sys_call+0x1f72/0x2550 [ 62.768155][ T4741] do_syscall_64+0x112/0x360 [ 62.768243][ T4741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.768269][ T4741] RIP: 0033:0x7ff94662e98e [ 62.768284][ T4741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 62.768318][ T4741] RSP: 002b:00007ff9450c6f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 62.768422][ T4741] RAX: ffffffffffffffda RBX: 00007ff9450c76c0 RCX: 00007ff94662e98e [ 62.768514][ T4741] RDX: 0000000000000000 RSI: 00007ff9467047a6 RDI: ffffffffffffff9c [ 62.768605][ T4741] RBP: 00007ff94670506b R08: 0000000000000000 R09: 0000000000000000 [ 62.768617][ T4741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.768655][ T4741] R13: 00007ff9468f6038 R14: 00007ff9468f5fa0 R15: 00007ffdc2c9f7f8 [ 62.768672][ T4741] [ 62.784398][ T29] audit: type=1400 audit(1790758008.877:751): avc: denied { ioctl } for pid=4740 comm="syz.3.330" path="socket:[8372]" dev="sockfs" ino=8372 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.887036][ T4746] FAULT_INJECTION: forcing a failure. [ 62.887036][ T4746] name failslab, interval 1, probability 0, space 0, times 0 [ 62.887067][ T4746] CPU: 0 UID: 0 PID: 4746 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.887099][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 62.887113][ T4746] Call Trace: [ 62.887121][ T4746] [ 62.887129][ T4746] __dump_stack+0x1d/0x30 [ 62.887232][ T4746] dump_stack_lvl+0x95/0xd0 [ 62.887254][ T4746] dump_stack+0x15/0x1b [ 62.887276][ T4746] should_fail_ex+0x262/0x280 [ 62.887314][ T4746] should_failslab+0x8c/0xb0 [ 62.887348][ T4746] __kvmalloc_node_noprof+0x168/0x5c0 [ 62.887370][ T4746] ? alloc_netdev_mqs+0xa7/0xa90 [ 62.887442][ T4746] ? alloc_netdev_mqs+0xa7/0xa90 [ 62.887469][ T4746] ? __pfx_macsec_setup+0x10/0x10 [ 62.887559][ T4746] alloc_netdev_mqs+0xa7/0xa90 [ 62.887586][ T4746] rtnl_create_link+0x239/0x720 [ 62.887718][ T4746] rtnl_newlink_create+0x17a/0x4a0 [ 62.887754][ T4746] ? security_capable+0x7b/0x90 [ 62.887782][ T4746] ? netlink_ns_capable+0x86/0xa0 [ 62.887836][ T4746] rtnl_newlink+0x1255/0x1510 [ 62.887877][ T4746] ? try_charge_memcg+0x269/0xae0 [ 62.887937][ T4746] ? __memcg_slab_free_hook+0x154/0x340 [ 62.887974][ T4746] ? __rcu_read_unlock+0x4e/0x70 [ 62.888062][ T4746] ? avc_has_perm_noaudit+0xac/0x160 [ 62.888092][ T4746] ? cred_has_capability+0x224/0x2a0 [ 62.888121][ T4746] ? selinux_capable+0x31/0x40 [ 62.888153][ T4746] ? security_capable+0x7b/0x90 [ 62.888182][ T4746] ? ns_capable+0x80/0xb0 [ 62.888205][ T4746] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.888236][ T4746] rtnetlink_rcv_msg+0x64b/0x720 [ 62.888267][ T4746] netlink_rcv_skb+0x11e/0x220 [ 62.888474][ T4746] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.888512][ T4746] rtnetlink_rcv+0x1c/0x30 [ 62.888617][ T4746] netlink_unicast+0x5a9/0x680 [ 62.888757][ T4746] netlink_sendmsg+0x5be/0x6f0 [ 62.888781][ T4746] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.888848][ T4746] ____sys_sendmsg+0x532/0x580 [ 62.888876][ T4746] ___sys_sendmsg+0x195/0x1e0 [ 62.888912][ T4746] __x64_sys_sendmsg+0xd4/0x160 [ 62.888941][ T4746] x64_sys_call+0x22ab/0x2550 [ 62.889038][ T4746] do_syscall_64+0x112/0x360 [ 62.889064][ T4746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.889089][ T4746] RIP: 0033:0x7f17a0ece159 [ 62.889107][ T4746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.889152][ T4746] RSP: 002b:00007f179f927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.889254][ T4746] RAX: ffffffffffffffda RBX: 00007f17a1155fa0 RCX: 00007f17a0ece159 [ 62.889270][ T4746] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 62.889285][ T4746] RBP: 00007f17a0f6506b R08: 0000000000000000 R09: 0000000000000000 [ 62.889299][ T4746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.889319][ T4746] R13: 00007f17a1156038 R14: 00007f17a1155fa0 R15: 00007ffc10fb55b8 [ 62.889340][ T4746] [ 63.087244][ T29] audit: type=1326 audit(1790758009.177:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.1.333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 63.088701][ T29] audit: type=1326 audit(1790758009.177:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.1.333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 63.088809][ T29] audit: type=1326 audit(1790758009.177:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.1.333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 63.091206][ T29] audit: type=1326 audit(1790758009.177:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4747 comm="syz.1.333" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 63.301085][ T4756] netlink: 'syz.0.338': attribute type 1 has an invalid length. [ 63.327862][ T4756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.500168][ T4758] bond1: (slave dummy0): making interface the new active one [ 63.517198][ T4758] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 63.526133][ T4756] : renamed from dummy0 (while UP) [ 63.992588][ T4782] FAULT_INJECTION: forcing a failure. [ 63.992588][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 63.992660][ T4782] CPU: 0 UID: 0 PID: 4782 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.992688][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.992714][ T4782] Call Trace: [ 63.992722][ T4782] [ 63.992731][ T4782] __dump_stack+0x1d/0x30 [ 63.992756][ T4782] dump_stack_lvl+0x95/0xd0 [ 63.992777][ T4782] dump_stack+0x15/0x1b [ 63.992797][ T4782] should_fail_ex+0x262/0x280 [ 63.992863][ T4782] should_failslab+0x8c/0xb0 [ 63.992894][ T4782] __kvmalloc_node_noprof+0x168/0x5c0 [ 63.992923][ T4782] ? alloc_netdev_mqs+0xa7/0xa90 [ 63.993019][ T4782] ? alloc_netdev_mqs+0xa7/0xa90 [ 63.993041][ T4782] ? __pfx_macsec_setup+0x10/0x10 [ 63.993082][ T4782] alloc_netdev_mqs+0xa7/0xa90 [ 63.993160][ T4782] rtnl_create_link+0x239/0x720 [ 63.993188][ T4782] rtnl_newlink_create+0x17a/0x4a0 [ 63.993369][ T4782] rtnl_newlink+0x1255/0x1510 [ 63.993412][ T4782] ? should_fail_ex+0x31/0x280 [ 63.993441][ T4782] ? __memcg_slab_free_hook+0x154/0x340 [ 63.993499][ T4782] ? __rcu_read_unlock+0x4e/0x70 [ 63.993532][ T4782] ? avc_has_perm_noaudit+0xac/0x160 [ 63.993633][ T4782] ? cred_has_capability+0x224/0x2a0 [ 63.993658][ T4782] ? selinux_capable+0x31/0x40 [ 63.993692][ T4782] ? security_capable+0x7b/0x90 [ 63.993718][ T4782] ? ns_capable+0x80/0xb0 [ 63.993810][ T4782] ? __pfx_rtnl_newlink+0x10/0x10 [ 63.993845][ T4782] rtnetlink_rcv_msg+0x64b/0x720 [ 63.993960][ T4782] netlink_rcv_skb+0x11e/0x220 [ 63.994033][ T4782] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.994070][ T4782] rtnetlink_rcv+0x1c/0x30 [ 63.994095][ T4782] netlink_unicast+0x5a9/0x680 [ 63.994128][ T4782] netlink_sendmsg+0x5be/0x6f0 [ 63.994202][ T4782] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.994223][ T4782] ____sys_sendmsg+0x532/0x580 [ 63.994326][ T4782] ___sys_sendmsg+0x195/0x1e0 [ 63.994357][ T4782] __x64_sys_sendmsg+0xd4/0x160 [ 63.994431][ T4782] x64_sys_call+0x22ab/0x2550 [ 63.994520][ T4782] do_syscall_64+0x112/0x360 [ 63.994548][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.994611][ T4782] RIP: 0033:0x7f70c619e159 [ 63.994627][ T4782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.994645][ T4782] RSP: 002b:00007f70c4bf7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.994671][ T4782] RAX: ffffffffffffffda RBX: 00007f70c6425fa0 RCX: 00007f70c619e159 [ 63.994688][ T4782] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 63.994704][ T4782] RBP: 00007f70c623506b R08: 0000000000000000 R09: 0000000000000000 [ 63.994717][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.994782][ T4782] R13: 00007f70c6426038 R14: 00007f70c6425fa0 R15: 00007ffceed86aa8 [ 63.994838][ T4782] [ 64.753361][ T4807] FAULT_INJECTION: forcing a failure. [ 64.753361][ T4807] name failslab, interval 1, probability 0, space 0, times 0 [ 64.753393][ T4807] CPU: 0 UID: 0 PID: 4807 Comm: syz.4.358 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.753421][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 64.753457][ T4807] Call Trace: [ 64.753464][ T4807] [ 64.753473][ T4807] __dump_stack+0x1d/0x30 [ 64.753501][ T4807] dump_stack_lvl+0x95/0xd0 [ 64.753527][ T4807] dump_stack+0x15/0x1b [ 64.753551][ T4807] should_fail_ex+0x262/0x280 [ 64.753640][ T4807] ? snd_timer_instance_new+0x31/0x180 [ 64.753669][ T4807] should_failslab+0x8c/0xb0 [ 64.753725][ T4807] __kmalloc_cache_noprof+0x7a/0x400 [ 64.753764][ T4807] ? should_fail_ex+0xdb/0x280 [ 64.753808][ T4807] ? snd_timer_instance_new+0x31/0x180 [ 64.753840][ T4807] snd_timer_instance_new+0x31/0x180 [ 64.753883][ T4807] snd_seq_timer_open+0x12b/0x340 [ 64.753923][ T4807] ? _raw_spin_lock_irqsave+0x58/0xb0 [ 64.754020][ T4807] snd_seq_queue_alloc+0x23f/0x3f0 [ 64.754111][ T4807] snd_seq_ioctl_create_queue+0x4d/0x1b0 [ 64.754136][ T4807] snd_seq_ioctl+0x17d/0x2d0 [ 64.754167][ T4807] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 64.754194][ T4807] __se_sys_ioctl+0xce/0x140 [ 64.754272][ T4807] __x64_sys_ioctl+0x43/0x50 [ 64.754310][ T4807] x64_sys_call+0x239d/0x2550 [ 64.754362][ T4807] do_syscall_64+0x112/0x360 [ 64.754387][ T4807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.754412][ T4807] RIP: 0033:0x7f5986b3e159 [ 64.754429][ T4807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.754553][ T4807] RSP: 002b:00007f5985597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 64.754577][ T4807] RAX: ffffffffffffffda RBX: 00007f5986dc5fa0 RCX: 00007f5986b3e159 [ 64.754593][ T4807] RDX: 0000200000000380 RSI: 00000000c08c5332 RDI: 0000000000000005 [ 64.754634][ T4807] RBP: 00007f5986bd506b R08: 0000000000000000 R09: 0000000000000000 [ 64.754649][ T4807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.754663][ T4807] R13: 00007f5986dc6038 R14: 00007f5986dc5fa0 R15: 00007ffc3da6d878 [ 64.754684][ T4807] [ 64.991015][ T4803] loop1: detected capacity change from 0 to 512 [ 65.083848][ T4803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 65.091258][ T4803] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.356: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731432448 [ 65.091428][ T4803] loop1: lost filesystem error report for type 5 error -117 [ 65.098715][ T4803] EXT4-fs (loop1): 1 orphan inode deleted [ 65.108702][ T4803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.224813][ T4794] loop2: detected capacity change from 0 to 1024 [ 65.241858][ T4794] EXT4-fs: Ignoring removed oldalloc option [ 65.244533][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.267968][ T4794] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 65.394610][ T4794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.684428][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.900060][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 65.900075][ T29] audit: type=1400 audit(1790758011.987:826): avc: denied { read append } for pid=4842 comm="syz.2.370" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.900211][ T29] audit: type=1400 audit(1790758011.987:827): avc: denied { open } for pid=4842 comm="syz.2.370" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.175899][ T4855] syzkaller0: entered promiscuous mode [ 66.175920][ T4855] syzkaller0: entered allmulticast mode [ 66.217928][ T4857] FAULT_INJECTION: forcing a failure. [ 66.217928][ T4857] name failslab, interval 1, probability 0, space 0, times 0 [ 66.218016][ T4857] CPU: 0 UID: 0 PID: 4857 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.218039][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.218051][ T4857] Call Trace: [ 66.218058][ T4857] [ 66.218065][ T4857] __dump_stack+0x1d/0x30 [ 66.218088][ T4857] dump_stack_lvl+0x95/0xd0 [ 66.218187][ T4857] dump_stack+0x15/0x1b [ 66.218207][ T4857] should_fail_ex+0x262/0x280 [ 66.218255][ T4857] ? shrinker_alloc+0x3b/0x6e0 [ 66.218287][ T4857] should_failslab+0x8c/0xb0 [ 66.218380][ T4857] __kmalloc_cache_noprof+0x7a/0x400 [ 66.218418][ T4857] ? shrinker_alloc+0x3b/0x6e0 [ 66.218530][ T4857] shrinker_alloc+0x3b/0x6e0 [ 66.218576][ T4857] ? __percpu_init_rwsem+0x24/0x90 [ 66.218602][ T4857] ? rcu_sync_init+0x32/0x40 [ 66.218678][ T4857] sget_fc+0x875/0xfa0 [ 66.218702][ T4857] ? __pfx_set_anon_super_fc+0x10/0x10 [ 66.218737][ T4857] ? __kmalloc_cache_noprof+0x19b/0x400 [ 66.218790][ T4857] ? mqueue_init_fs_context+0x38/0x2c0 [ 66.218817][ T4857] ? __pfx_mqueue_fill_super+0x10/0x10 [ 66.218842][ T4857] get_tree_nodev+0x2a/0x100 [ 66.218942][ T4857] mqueue_get_tree+0x5d/0x80 [ 66.218966][ T4857] vfs_get_tree+0x57/0x1d0 [ 66.219074][ T4857] fc_mount_longterm+0x18/0xb0 [ 66.219104][ T4857] mq_init_ns+0x2db/0x370 [ 66.219149][ T4857] copy_ipcs+0x26d/0x460 [ 66.219181][ T4857] create_new_namespaces+0x121/0x420 [ 66.219220][ T4857] unshare_nsproxy_namespaces+0x115/0x150 [ 66.219253][ T4857] ksys_unshare+0x42b/0x710 [ 66.219284][ T4857] __x64_sys_unshare+0x1f/0x30 [ 66.219391][ T4857] x64_sys_call+0x1e33/0x2550 [ 66.219487][ T4857] do_syscall_64+0x112/0x360 [ 66.219513][ T4857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.219613][ T4857] RIP: 0033:0x7f70c619e159 [ 66.219631][ T4857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.219683][ T4857] RSP: 002b:00007f70c4bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 66.219705][ T4857] RAX: ffffffffffffffda RBX: 00007f70c6425fa0 RCX: 00007f70c619e159 [ 66.219720][ T4857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 66.219735][ T4857] RBP: 00007f70c623506b R08: 0000000000000000 R09: 0000000000000000 [ 66.219789][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.219801][ T4857] R13: 00007f70c6426038 R14: 00007f70c6425fa0 R15: 00007ffceed86aa8 [ 66.219819][ T4857] [ 66.425561][ T29] audit: type=1400 audit(1790758012.497:828): avc: denied { create } for pid=4863 comm="syz.2.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 66.426730][ T4864] loop2: detected capacity change from 0 to 256 [ 66.523509][ T4862] loop4: detected capacity change from 0 to 4096 [ 66.536922][ T4862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.569637][ T4871] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 66.590515][ T4871] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.639494][ T4871] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 66.693524][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.840773][ T4886] syzkaller0: entered promiscuous mode [ 66.840804][ T4886] syzkaller0: entered allmulticast mode [ 67.741964][ T29] audit: type=1400 audit(1790758013.827:829): avc: denied { setopt } for pid=4897 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.742174][ T29] audit: type=1400 audit(1790758013.827:830): avc: denied { bind } for pid=4897 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 67.743925][ T29] audit: type=1400 audit(1790758013.827:831): avc: denied { bind } for pid=4897 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.897119][ T4910] capability: warning: `syz.1.395' uses 32-bit capabilities (legacy support in use) [ 67.932706][ T29] audit: type=1400 audit(1790758014.007:832): avc: denied { read } for pid=4911 comm="syz.2.396" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 67.933588][ T29] audit: type=1400 audit(1790758014.017:833): avc: denied { open } for pid=4911 comm="syz.2.396" path="/76/trace/events/sched/sched_switch/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 68.056350][ T29] audit: type=1400 audit(1790758014.137:834): avc: denied { bind } for pid=4923 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.056960][ T29] audit: type=1400 audit(1790758014.137:835): avc: denied { write } for pid=4923 comm="syz.2.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.826928][ T4931] loop0: detected capacity change from 0 to 1024 [ 68.844086][ T4931] EXT4-fs: Ignoring removed i_version option [ 68.855664][ T4931] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.856362][ T4931] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.874988][ T4931] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.875905][ T4931] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.880406][ T4931] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.401: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.880630][ T4931] loop0: lost filesystem error report for type 5 error -117 [ 68.881461][ T4931] EXT4-fs (loop0): Remounting filesystem read-only [ 68.881860][ T4931] EXT4-fs (loop0): 1 orphan inode deleted [ 68.888538][ T4931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.960958][ T4941] loop2: detected capacity change from 0 to 128 [ 68.965406][ T4941] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 68.987559][ T4941] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.990102][ T4941] ext2 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.044474][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.057823][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.058008][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.066677][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.066712][ T4947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.066909][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.066942][ T4947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.081138][ T4947] team0: Failed to send options change via netlink (err -105) [ 69.081160][ T4947] team0: Port device bridge0 added [ 69.107512][ T4947] bridge1: port 1(erspan0) entered disabled state [ 69.143441][ T4947] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 69.192913][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.195636][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.216211][ T4947] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 69.219086][ T4947] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 69.350817][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.450602][ T4959] loop0: detected capacity change from 0 to 128 [ 69.458310][ T4959] FAT-fs (loop0): Directory bread(block 1048) failed [ 69.458334][ T4959] FAT-fs (loop0): Directory bread(block 1049) failed [ 69.458427][ T4959] FAT-fs (loop0): Directory bread(block 1050) failed [ 69.458519][ T4959] FAT-fs (loop0): Directory bread(block 1051) failed [ 69.458537][ T4959] FAT-fs (loop0): Directory bread(block 1052) failed [ 69.458556][ T4959] FAT-fs (loop0): Directory bread(block 1053) failed [ 69.458589][ T4959] FAT-fs (loop0): Directory bread(block 1054) failed [ 69.458608][ T4959] FAT-fs (loop0): Directory bread(block 1055) failed [ 69.687900][ T4959] FAT-fs (loop0): FAT read failed (blocknr 128) [ 70.736911][ T5007] batman_adv: batadv0: Adding interface: macsec1 [ 70.736980][ T5007] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.737041][ T5007] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 70.910981][ T5025] ip_tables: iptables: counters copy to user failed while replacing table [ 70.929715][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 70.929731][ T29] audit: type=1326 audit(1790758017.007:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.929758][ T29] audit: type=1326 audit(1790758017.007:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.935982][ T29] audit: type=1326 audit(1790758017.017:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.936011][ T29] audit: type=1326 audit(1790758017.017:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.936043][ T29] audit: type=1326 audit(1790758017.017:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.936075][ T29] audit: type=1326 audit(1790758017.017:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.949858][ T29] audit: type=1326 audit(1790758017.017:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.949890][ T29] audit: type=1326 audit(1790758017.017:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.949919][ T29] audit: type=1326 audit(1790758017.027:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 70.950000][ T29] audit: type=1326 audit(1790758017.027:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5009 comm="syz.3.423" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 72.221871][ T5040] syz_tun: entered promiscuous mode [ 72.221915][ T5040] vlan2: entered promiscuous mode [ 73.909879][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 73.977877][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'. [ 73.989798][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 73.989831][ T5057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.438'. [ 73.997016][ T5050] loop0: detected capacity change from 0 to 512 [ 74.016497][ T5059] netlink: 52 bytes leftover after parsing attributes in process `syz.2.439'. [ 74.043594][ T5050] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 74.075298][ T5050] EXT4-fs (loop0): 1 truncate cleaned up [ 74.105466][ T5050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.264628][ T5073] ÿ: renamed from bond_slave_0 (while UP) [ 74.296963][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.342916][ T5077] netlink: 108 bytes leftover after parsing attributes in process `syz.0.445'. [ 74.454363][ T5083] loop3: detected capacity change from 0 to 128 [ 74.468034][ T5083] FAT-fs (loop3): Directory bread(block 1048) failed [ 74.468117][ T5083] FAT-fs (loop3): Directory bread(block 1049) failed [ 74.468133][ T5083] FAT-fs (loop3): Directory bread(block 1050) failed [ 74.468151][ T5083] FAT-fs (loop3): Directory bread(block 1051) failed [ 74.468181][ T5083] FAT-fs (loop3): Directory bread(block 1052) failed [ 74.468200][ T5083] FAT-fs (loop3): Directory bread(block 1053) failed [ 74.468216][ T5083] FAT-fs (loop3): Directory bread(block 1054) failed [ 74.468235][ T5083] FAT-fs (loop3): Directory bread(block 1055) failed [ 74.674371][ T5093] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 74.690963][ T5093] 8021q: adding VLAN 0 to HW filter on device bond4 [ 74.707243][ T5093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 74.798008][ T5083] FAT-fs (loop3): FAT read failed (blocknr 128) [ 74.829022][ T5099] bond4: (slave bridge1): making interface the new active one [ 74.837921][ T5099] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 75.895061][ T5129] syzkaller0: entered promiscuous mode [ 75.895084][ T5129] syzkaller0: entered allmulticast mode [ 75.962766][ T5146] loop0: detected capacity change from 0 to 512 [ 75.972160][ T5146] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 75.972183][ T5146] loop0: lost filesystem error report for type 5 error -12 [ 75.972561][ T5146] EXT4-fs (loop0): 2 truncates cleaned up [ 75.977210][ T5146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.017430][ T5150] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.017618][ T5150] Cannot find add_set index 0 as target [ 76.047365][ T5152] syzkaller0: entered promiscuous mode [ 76.047385][ T5152] syzkaller0: entered allmulticast mode [ 76.340392][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 76.340435][ T29] audit: type=1400 audit(1790758022.387:985): avc: denied { watch watch_reads } for pid=5164 comm="syz.1.470" path="/proc/250" dev="proc" ino=9689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.652370][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.802729][ T5178] loop0: detected capacity change from 0 to 1024 [ 76.851635][ T5178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.851989][ T5178] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.857039][ T5187] netlink: 52 bytes leftover after parsing attributes in process `syz.3.475'. [ 76.894661][ T5178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 76.998391][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 77.053199][ T5190] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 77.056108][ T29] audit: type=1400 audit(1790758023.137:986): avc: denied { create } for pid=5189 comm="syz.0.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 77.144913][ T5194] netlink: 52 bytes leftover after parsing attributes in process `syz.0.477'. [ 77.192736][ T5192] md: could not open device unknown-block(1,0). [ 77.213909][ T5190] md: could not open device unknown-block(1,1). [ 77.389061][ T29] audit: type=1326 audit(1790758023.467:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.389126][ T29] audit: type=1326 audit(1790758023.467:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.389210][ T29] audit: type=1326 audit(1790758023.467:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.389239][ T29] audit: type=1326 audit(1790758023.467:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.415053][ T29] audit: type=1326 audit(1790758023.467:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.415141][ T29] audit: type=1326 audit(1790758023.477:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.415170][ T29] audit: type=1326 audit(1790758023.477:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.440735][ T29] audit: type=1326 audit(1790758023.507:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5203 comm="syz.0.481" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f17a0ece159 code=0x7ffc0000 [ 77.888575][ T5221] loop4: detected capacity change from 0 to 128 [ 77.901129][ T5221] FAT-fs (loop4): Directory bread(block 1048) failed [ 77.901152][ T5221] FAT-fs (loop4): Directory bread(block 1049) failed [ 77.901173][ T5221] FAT-fs (loop4): Directory bread(block 1050) failed [ 77.901199][ T5221] FAT-fs (loop4): Directory bread(block 1051) failed [ 77.901293][ T5221] FAT-fs (loop4): Directory bread(block 1052) failed [ 77.901310][ T5221] FAT-fs (loop4): Directory bread(block 1053) failed [ 77.901402][ T5221] FAT-fs (loop4): Directory bread(block 1054) failed [ 77.901468][ T5221] FAT-fs (loop4): Directory bread(block 1055) failed [ 78.010939][ T5221] FAT-fs (loop4): FAT read failed (blocknr 128) [ 78.190734][ T5116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.304978][ T5241] loop4: detected capacity change from 0 to 512 [ 78.537910][ T5241] EXT4-fs (loop4): bad s_min_extra_isize: 544 [ 78.629793][ T5233] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.629819][ T5233] SELinux: failed to load policy [ 78.670563][ T5245] syzkaller0: entered promiscuous mode [ 78.670607][ T5245] syzkaller0: entered allmulticast mode [ 79.111235][ T5259] netlink: 'syz.1.497': attribute type 22 has an invalid length. [ 79.111342][ T5259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 79.768143][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.505'. [ 80.062958][ T5278] loop0: detected capacity change from 0 to 512 [ 80.098140][ T5278] EXT4-fs: Ignoring removed i_version option [ 80.107221][ T5278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.129406][ T5278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.143597][ T5278] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.224590][ T5278] TC_ACT_REPEAT abuse ? [ 80.292608][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.560424][ T5291] 9p: Bad value for 'rfdno' [ 80.721492][ T5288] Cannot find set identified by id 0 to match [ 81.596929][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 81.596957][ T29] audit: type=1400 audit(1790758027.677:1032): avc: denied { ioctl } for pid=5294 comm="syz.2.511" path="/newroot/dev/cpu/0/msr" dev="devtmpfs" ino=85 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 81.665192][ T5300] loop0: detected capacity change from 0 to 512 [ 81.680310][ T5300] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 81.682105][ T5300] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.513: inode #2147418112: comm syz.0.513: iget: illegal inode # [ 81.682131][ T5300] loop0: lost filesystem error report for type 5 error -117 [ 81.682357][ T5300] EXT4-fs (loop0): no journal found [ 81.682393][ T5300] EXT4-fs (loop0): can't get journal size [ 81.684982][ T5300] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 81.685951][ T5300] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 81.687136][ T5300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.801372][ T29] audit: type=1400 audit(1790758027.877:1033): avc: denied { write } for pid=5299 comm="syz.0.513" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.804973][ T29] audit: type=1400 audit(1790758027.887:1034): avc: denied { create } for pid=5299 comm="syz.0.513" name="sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 81.805525][ T5300] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.513: Invalid inode bitmap blk 4 in block_group 0 [ 82.087819][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.452881][ T29] audit: type=1400 audit(1790758028.537:1035): avc: denied { ioctl } for pid=5310 comm="syz.3.516" path="socket:[10061]" dev="sockfs" ino=10061 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 82.484923][ T5311] netlink: 14 bytes leftover after parsing attributes in process `syz.3.516'. [ 82.536288][ T29] audit: type=1400 audit(1790758028.617:1036): avc: denied { map } for pid=5310 comm="syz.3.516" path="socket:[10463]" dev="sockfs" ino=10463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.536762][ T29] audit: type=1400 audit(1790758028.617:1037): avc: denied { read } for pid=5310 comm="syz.3.516" path="socket:[10463]" dev="sockfs" ino=10463 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 82.741030][ T29] audit: type=1400 audit(1790758028.827:1038): avc: denied { ioctl } for pid=5318 comm="syz.4.518" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 82.830357][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 82.830394][ T29] audit: type=1400 audit(1790758028.917:1039): avc: denied { write } for pid=5322 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 82.830939][ T5323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.520'. [ 82.886920][ T29] audit: type=1400 audit(1790758028.967:1040): avc: denied { bind } for pid=5322 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 82.887142][ T29] audit: type=1400 audit(1790758028.967:1041): avc: denied { listen } for pid=5322 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 83.191914][ T5344] team0 (unregistering): Port device team_slave_0 removed [ 83.213987][ T5344] team0 (unregistering): Port device team_slave_1 removed [ 83.261497][ T5344] team0 (unregistering): Port device bridge0 removed [ 84.004355][ T5365] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.204373][ T5365] md: could not open device unknown-block(1,0). [ 84.228073][ T5372] md: could not open device unknown-block(1,1). [ 84.237950][ T5369] loop3: detected capacity change from 0 to 164 [ 84.539049][ T5369] Unsupported NM flag settings (240) [ 84.733639][ T5384] syzkaller0: entered promiscuous mode [ 84.733661][ T5384] syzkaller0: entered allmulticast mode [ 85.002177][ T5390] loop3: detected capacity change from 0 to 512 [ 85.036912][ T5390] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.037036][ T5390] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.083184][ T5387] loop2: detected capacity change from 0 to 1024 [ 85.106791][ T5387] EXT4-fs: Ignoring removed i_version option [ 85.120295][ T5387] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.121236][ T5387] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.126122][ T5387] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 85.126862][ T5387] EXT4-fs (loop2): orphan cleanup on readonly fs [ 85.165332][ T5387] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.540: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.165382][ T5387] loop2: lost filesystem error report for type 5 error -117 [ 85.167927][ T5387] EXT4-fs (loop2): Remounting filesystem read-only [ 85.168556][ T5387] EXT4-fs (loop2): 1 orphan inode deleted [ 85.238146][ T5387] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.401382][ T5402] loop0: detected capacity change from 0 to 512 [ 85.411468][ T5402] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.432480][ T5402] EXT4-fs (loop0): 1 truncate cleaned up [ 85.432900][ T5402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.673302][ T5406] loop4: detected capacity change from 0 to 2048 [ 85.763090][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.763473][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.764886][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.817655][ T5406] loop4: p1 < > p4 [ 85.826144][ T5406] loop4: p4 size 8388608 extends beyond EOD, truncated [ 85.891781][ T5415] futex_wake_op: syz.1.551 tries to shift op by 144; fix this program [ 85.926925][ T3443] IPVS: starting estimator thread 0... [ 85.940670][ T5417] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 85.979202][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 85.979344][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.553'. [ 86.020209][ T5420] IPVS: using max 2400 ests per chain, 120000 per kthread [ 86.682487][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 86.682505][ T29] audit: type=1400 audit(1790758032.767:1245): avc: denied { read } for pid=5450 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 86.894515][ T5457] loop3: detected capacity change from 0 to 512 [ 86.906091][ T5457] EXT4-fs: Ignoring removed i_version option [ 86.916873][ T5457] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.934856][ T5457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.935168][ T5457] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.991313][ T5457] TC_ACT_REPEAT abuse ? [ 87.071231][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.148792][ T5461] loop3: detected capacity change from 0 to 2048 [ 87.186678][ T5461] loop3: p1 < > p4 [ 87.187438][ T5461] loop3: p4 size 8388608 extends beyond EOD, truncated [ 87.191080][ T2982] loop3: p1 < > p4 [ 87.191823][ T2982] loop3: p4 size 8388608 extends beyond EOD, truncated [ 87.275042][ T5455] loop4: detected capacity change from 0 to 1024 [ 87.278052][ T5455] EXT4-fs: Ignoring removed i_version option [ 87.279292][ T5455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.301521][ T5455] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.322580][ T5455] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 87.323166][ T5455] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.327027][ T5455] EXT4-fs error (device loop4): ext4_free_blocks:6719: comm syz.4.563: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.327207][ T5455] loop4: lost filesystem error report for type 5 error -117 [ 87.329378][ T5455] EXT4-fs (loop4): Remounting filesystem read-only [ 87.329727][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 87.329756][ C1] EXT4-fs (loop4): initial error at time 1790758033: ext4_free_blocks:6719 [ 87.329806][ C1] EXT4-fs (loop4): last error at time 1790758033: ext4_free_blocks:6719 [ 87.429839][ T5471] ip_tables: iptables: counters copy to user failed while replacing table [ 87.533144][ T5455] EXT4-fs (loop4): 1 orphan inode deleted [ 87.552079][ T5455] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.705140][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.969863][ T29] audit: type=1326 audit(1790758034.047:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 87.969948][ T29] audit: type=1326 audit(1790758034.047:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 87.969972][ T29] audit: type=1326 audit(1790758034.047:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 87.970117][ T29] audit: type=1326 audit(1790758034.047:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f70c619e159 code=0x7ffc0000 [ 88.032432][ T29] audit: type=1326 audit(1790758034.107:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70c615e98e code=0x7ffc0000 [ 88.032469][ T29] audit: type=1326 audit(1790758034.107:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70c615e98e code=0x7ffc0000 [ 88.032640][ T29] audit: type=1326 audit(1790758034.107:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70c615e98e code=0x7ffc0000 [ 88.032665][ T29] audit: type=1326 audit(1790758034.107:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70c615e98e code=0x7ffc0000 [ 88.032690][ T29] audit: type=1326 audit(1790758034.107:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5473 comm="syz.2.570" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f70c615e98e code=0x7ffc0000 [ 88.342826][ T5476] syz.4.571 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 88.342857][ T5476] CPU: 1 UID: 0 PID: 5476 Comm: syz.4.571 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.342929][ T5476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 88.342941][ T5476] Call Trace: [ 88.342948][ T5476] [ 88.342959][ T5476] __dump_stack+0x1d/0x30 [ 88.343038][ T5476] dump_stack_lvl+0x95/0xd0 [ 88.343071][ T5476] dump_stack+0x15/0x1b [ 88.343090][ T5476] dump_header+0x80/0x240 [ 88.343111][ T5476] oom_kill_process+0x294/0x420 [ 88.343144][ T5476] out_of_memory+0x981/0xbc0 [ 88.343167][ T5476] try_charge_memcg+0x6ba/0xae0 [ 88.343205][ T5476] charge_memcg+0x16f/0x220 [ 88.343310][ T5476] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 88.343339][ T5476] swap_cache_alloc_folio+0x47b/0x610 [ 88.343367][ T5476] swap_cluster_readahead+0x2b7/0x460 [ 88.343449][ T5476] swapin_readahead+0xd8/0x8a0 [ 88.343537][ T5476] ? _raw_spin_unlock+0x9/0x30 [ 88.343562][ T5476] ? swap_put_entries_cluster+0x49c/0x4c0 [ 88.343588][ T5476] ? __entry_text_end+0x12f48/0x1020f9 [ 88.343652][ T5476] ? __rcu_read_unlock+0x4e/0x70 [ 88.343687][ T5476] ? swap_cache_get_folio+0x1f7/0x200 [ 88.343715][ T5476] do_swap_page+0x2b7/0x1e40 [ 88.343786][ T5476] ? __css_rstat_updated+0xbb/0x280 [ 88.343809][ T5476] ? __rcu_read_lock+0x36/0x50 [ 88.343845][ T5476] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 88.343879][ T5476] handle_mm_fault+0xb29/0x3bb0 [ 88.343951][ T5476] do_user_addr_fault+0x636/0x1060 [ 88.343989][ T5476] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 88.344030][ T5476] ? trace_page_fault_user+0x1f/0xa0 [ 88.344069][ T5476] exc_page_fault+0x62/0xa0 [ 88.344099][ T5476] asm_exc_page_fault+0x26/0x30 [ 88.344215][ T5476] RIP: 0033:0x7f5986af92be [ 88.344229][ T5476] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 88.344250][ T5476] RSP: 002b:00007ffc3da6d960 EFLAGS: 00010246 [ 88.344301][ T5476] RAX: 0000000000000000 RBX: 0000555572bce500 RCX: 00007f5986afe98e [ 88.344314][ T5476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 88.344325][ T5476] RBP: 00007f5986dc7da0 R08: 0000000000000000 R09: 0000000000000000 [ 88.344339][ T5476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000015a60 [ 88.344351][ T5476] R13: 00007f5986dc609c R14: 000000000001579b R15: 00007f5986dc6090 [ 88.344367][ T5476] [ 88.377741][ T5476] memory: usage 307200kB, limit 307200kB, failcnt 657 [ 88.377774][ T5476] memory+swap: usage 307504kB, limit 9007199254740988kB, failcnt 0 [ 88.377789][ T5476] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 88.377802][ T5476] Memory cgroup stats for /syz4: [ 88.377994][ T5476] cache 0 [ 88.378012][ T5476] rss 8192 [ 88.378019][ T5476] shmem 0 [ 88.378026][ T5476] mapped_file 0 [ 88.378033][ T5476] dirty 0 [ 88.378040][ T5476] writeback 0 [ 88.378062][ T5476] workingset_refault_anon 51 [ 88.378070][ T5476] workingset_refault_file 2221 [ 88.378079][ T5476] swap 311296 [ 88.378086][ T5476] swapcached 569344 [ 88.378093][ T5476] pgpgin 63080 [ 88.378155][ T5476] pgpgout 63072 [ 88.378162][ T5476] pgfault 62624 [ 88.378169][ T5476] pgmajfault 38 [ 88.378177][ T5476] inactive_anon 0 [ 88.378184][ T5476] active_anon 32768 [ 88.378192][ T5476] inactive_file 0 [ 88.378244][ T5476] active_file 0 [ 88.378254][ T5476] unevictable 0 [ 88.378262][ T5476] hierarchical_memory_limit 314572800 [ 88.378271][ T5476] hierarchical_memsw_limit 9223372036854771712 [ 88.378281][ T5476] total_cache 0 [ 88.378288][ T5476] total_rss 8192 [ 88.378296][ T5476] total_shmem 0 [ 88.378303][ T5476] total_mapped_file 0 [ 88.378311][ T5476] total_dirty 0 [ 88.378318][ T5476] total_writeback 0 [ 88.378390][ T5476] total_workingset_refault_anon 51 [ 88.378399][ T5476] total_workingset_refault_file 2221 [ 88.378438][ T5476] total_swap 311296 [ 88.378446][ T5476] total_swapcached 569344 [ 88.378454][ T5476] total_pgpgin 63080 [ 88.378462][ T5476] total_pgpgout 63072 [ 88.378471][ T5476] total_pgfault 62624 [ 88.378522][ T5476] total_pgmajfault 38 [ 88.378604][ T5476] total_inactive_anon 0 [ 88.378612][ T5476] total_active_anon 32768 [ 88.378620][ T5476] total_inactive_file 0 [ 88.378628][ T5476] total_active_file 0 [ 88.378635][ T5476] total_unevictable 0 [ 88.378644][ T5476] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.571,pid=5476,uid=0 [ 88.378754][ T5476] Memory cgroup out of memory: Killed process 5476 (syz.4.571) total-vm:96236kB, anon-rss:1248kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 88.459749][ T5117] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.040856][ T5495] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 89.041760][ T5495] SELinux: failed to load policy [ 89.602983][ T5504] sch_fq: defrate 1 ignored. [ 89.783837][ T5514] loop2: detected capacity change from 0 to 512 [ 89.784141][ T5514] EXT4-fs: test_dummy_encryption option not supported [ 89.845992][ T5518] loop0: detected capacity change from 0 to 1024 [ 89.857769][ T5518] EXT4-fs: Ignoring removed orlov option [ 89.907213][ T5518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.937300][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.939550][ T5514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.957490][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.039869][ T5114] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.040091][ T5114] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.040178][ T5114] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.040383][ T5114] netdevsim netdevsim12 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.098038][ T5541] loop3: detected capacity change from 0 to 256 [ 90.142022][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 90.162495][ T5541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 90.170428][ T5114] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.170467][ T5114] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.170502][ T5114] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.170561][ T5114] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.260758][ T5542] loop4: detected capacity change from 0 to 512 [ 90.314103][ T5542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.314633][ T5542] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.471097][ T5555] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.471447][ T5555] vhci_hcd vhci_hcd.2: invalid port number 96 [ 90.471488][ T5555] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 90.473934][ T5555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.597'. [ 90.511280][ T5555] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.513250][ T5555] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.663969][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.681092][ T5567] nr0: port 1(veth1_virt_wifi) entered blocking state [ 90.681147][ T5567] nr0: port 1(veth1_virt_wifi) entered disabled state [ 90.681354][ T5567] veth1_virt_wifi: entered allmulticast mode [ 90.682054][ T5567] veth1_virt_wifi: entered promiscuous mode [ 90.710281][ T5567] nr0: port 1(veth1_virt_wifi) entered blocking state [ 90.710419][ T5567] nr0: port 1(veth1_virt_wifi) entered forwarding state [ 90.810428][ T5569] loop4: detected capacity change from 0 to 512 [ 90.822130][ T5569] EXT4-fs: Ignoring removed i_version option [ 90.828772][ T5569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 90.853074][ T5569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.853270][ T5569] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.893111][ T5569] TC_ACT_REPEAT abuse ? [ 90.970806][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.076792][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 91.212220][ T5579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 91.241787][ T5578] ipvlan1: renamed from veth0_vlan [ 91.325654][ T5575] loop0: detected capacity change from 0 to 1024 [ 91.329134][ T5575] EXT4-fs: Ignoring removed i_version option [ 91.345362][ T5575] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.347550][ T5575] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.370799][ T5575] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 91.373629][ T5575] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.376586][ T5575] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.603: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.376626][ T5575] loop0: lost filesystem error report for type 5 error -117 [ 91.377040][ T5575] EXT4-fs (loop0): Remounting filesystem read-only [ 91.377390][ T5575] EXT4-fs (loop0): 1 orphan inode deleted [ 91.436092][ T5575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.727516][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.755986][ T5594] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 92.747491][ T5608] loop2: detected capacity change from 0 to 512 [ 92.747845][ T5608] EXT4-fs: Ignoring removed nobh option [ 92.757838][ T5612] netlink: 24 bytes leftover after parsing attributes in process `syz.0.615'. [ 92.772579][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 92.772594][ T29] audit: type=1400 audit(1790758038.857:1326): avc: denied { listen } for pid=5606 comm="syz.4.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.815147][ T5608] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.611: inode #0: comm syz.2.611: iget: illegal inode # [ 92.815175][ T5608] loop2: lost filesystem error report for type 5 error -117 [ 92.815290][ T5608] EXT4-fs (loop2): Remounting filesystem read-only [ 92.815306][ T5608] EXT4-fs (loop2): get orphan inode failed [ 92.815366][ T5608] EXT4-fs (loop2): mount failed [ 92.866012][ T5615] syzkaller0: entered promiscuous mode [ 92.866033][ T5615] syzkaller0: entered allmulticast mode [ 92.926442][ T5626] loop0: detected capacity change from 0 to 164 [ 92.961359][ T5628] loop3: detected capacity change from 0 to 512 [ 92.970059][ T5628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 92.973089][ T5628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.975826][ T5628] EXT4-fs (loop3): 1 truncate cleaned up [ 92.977121][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.033522][ T29] audit: type=1400 audit(1790758039.117:1327): avc: denied { write } for pid=5627 comm="syz.3.621" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.037664][ T29] audit: type=1400 audit(1790758039.117:1328): avc: denied { read write } for pid=5627 comm="syz.3.621" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.037999][ T29] audit: type=1400 audit(1790758039.117:1329): avc: denied { open } for pid=5627 comm="syz.3.621" path="/125/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 93.098393][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.193026][ T29] audit: type=1400 audit(1790758039.277:1330): avc: denied { create } for pid=5636 comm="syz.3.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.291491][ T5642] loop4: detected capacity change from 0 to 512 [ 93.312566][ T5642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.361911][ T5114] syzkaller0: tun_net_xmit 76 [ 93.361971][ T5114] syzkaller0: tun_net_xmit 48 [ 93.389916][ T11] syzkaller0: tun_net_xmit 76 [ 93.407629][ T5644] syzkaller0: create flow: hash 2972989107 index 1 [ 93.421717][ T5644] syzkaller0: delete flow: hash 2972989107 index 1 [ 93.440908][ T5650] loop2: detected capacity change from 0 to 512 [ 93.442702][ T5650] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 93.442964][ T5650] EXT4-fs error (device loop2): ext4_get_journal_inode:5927: comm syz.2.629: inode #2147418112: comm syz.2.629: iget: illegal inode # [ 93.442989][ T5650] loop2: lost filesystem error report for type 5 error -117 [ 93.443175][ T5650] EXT4-fs (loop2): no journal found [ 93.443188][ T5650] EXT4-fs (loop2): can't get journal size [ 93.443543][ T5650] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 93.443747][ T5650] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 93.444136][ T5650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.462933][ T29] audit: type=1400 audit(1790758039.547:1331): avc: denied { write } for pid=5648 comm="syz.2.629" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.466158][ T5650] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.629: Invalid inode bitmap blk 4 in block_group 0 [ 93.538351][ T29] audit: type=1400 audit(1790758039.617:1332): avc: denied { wake_alarm } for pid=5641 comm="syz.4.627" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 93.653365][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.657455][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.744055][ T5670] loop4: detected capacity change from 0 to 512 [ 93.777513][ T5678] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 1, id = 0 [ 93.792209][ T5670] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.634: iget: bad i_size value: 38620345925642 [ 93.792359][ T5670] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.793921][ T5670] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.634: couldn't read orphan inode 15 (err -117) [ 93.794040][ T5670] loop4: lost filesystem error report for type 5 error -117 [ 93.809475][ T29] audit: type=1400 audit(1790758039.887:1333): avc: denied { egress } for pid=9 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 93.809547][ T29] audit: type=1400 audit(1790758039.887:1334): avc: denied { sendto } for pid=9 comm="kworker/0:0" saddr=fe80::1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 93.814781][ T5670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.844462][ T29] audit: type=1400 audit(1790758039.917:1335): avc: denied { write } for pid=5669 comm="syz.4.634" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.902561][ T5676] netlink: 52 bytes leftover after parsing attributes in process `syz.0.632'. [ 93.928508][ T5670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.634'. [ 93.995148][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.038009][ T5691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5691 comm=syz.1.641 [ 94.169449][ T5697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.644'. [ 94.173895][ T5699] netlink: 68 bytes leftover after parsing attributes in process `syz.3.645'. [ 94.174480][ T5697] netlink: 'syz.4.644': attribute type 49 has an invalid length. [ 94.228410][ T5697] ip6gretap0: entered promiscuous mode [ 94.228430][ T5697] ip6gretap0: entered allmulticast mode [ 94.262287][ T5704] blk-mq: reduced tag depth (128 -> 64) [ 95.496903][ T5722] IPVS: Error connecting to the multicast addr [ 95.602875][ T5732] ÿ: renamed from bond_slave_0 [ 95.796311][ T5763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'. [ 97.195977][ T5785] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 97.196157][ T5785] vhci_hcd vhci_hcd.2: invalid port number 96 [ 97.196183][ T5785] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 97.197174][ T5785] netlink: 32 bytes leftover after parsing attributes in process `syz.1.668'. [ 98.058010][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 98.058023][ T29] audit: type=1326 audit(1790758044.137:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 98.058377][ T29] audit: type=1326 audit(1790758044.137:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 98.058681][ T29] audit: type=1326 audit(1790758044.137:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 98.059090][ T29] audit: type=1326 audit(1790758044.137:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 98.273392][ T29] audit: type=1326 audit(1790758044.297:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.273456][ T29] audit: type=1326 audit(1790758044.297:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.273483][ T29] audit: type=1326 audit(1790758044.297:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.273512][ T29] audit: type=1326 audit(1790758044.297:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.273570][ T29] audit: type=1326 audit(1790758044.307:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.273597][ T29] audit: type=1326 audit(1790758044.307:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5795 comm="syz.3.673" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 98.502277][ T5819] set_capacity_and_notify: 2 callbacks suppressed [ 98.502295][ T5819] loop0: detected capacity change from 0 to 128 [ 98.517548][ T5819] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.517823][ T5819] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.550195][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.635184][ T5817] loop2: detected capacity change from 0 to 1024 [ 98.638047][ T5817] EXT4-fs: Ignoring removed i_version option [ 98.664864][ T5817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.665828][ T5817] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.692560][ T5817] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 98.693487][ T5817] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.694918][ T5817] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.679: Freeing blocks not in datazone - block = 0, count = 4096 [ 98.694958][ T5817] loop2: lost filesystem error report for type 5 error -117 [ 98.695638][ T5817] EXT4-fs (loop2): Remounting filesystem read-only [ 98.695861][ T5817] EXT4-fs (loop2): 1 orphan inode deleted [ 98.702215][ T5817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.860122][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.923931][ T5829] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.924628][ T5829] vhci_hcd vhci_hcd.2: invalid port number 96 [ 98.924710][ T5829] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 98.929165][ T5829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.681'. [ 98.941302][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.942392][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.251917][ T5837] gre1: entered promiscuous mode [ 99.310000][ T5843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.685'. [ 99.500592][ T5860] device-mapper: ioctl: Target spec extends beyond end of parameters [ 99.500644][ T5860] device-mapper: ioctl: unable to find target [ 100.536034][ T5870] loop3: detected capacity change from 0 to 2048 [ 100.552908][ T5870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.571885][ T5870] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.696: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 100.576873][ T5877] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.696: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 100.577859][ T5877] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.696: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 100.648938][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.727264][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.698'. [ 100.743553][ T5132] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.747306][ T5883] bond1: entered promiscuous mode [ 100.747327][ T5883] bond1: entered allmulticast mode [ 100.775281][ T5132] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.803275][ T5132] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.854362][ T5132] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.982897][ T5132] bridge_slave_1: left allmulticast mode [ 100.982921][ T5132] bridge_slave_1: left promiscuous mode [ 100.983095][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.092634][ T5132] bridge_slave_0: left allmulticast mode [ 101.092654][ T5132] bridge_slave_0: left promiscuous mode [ 101.092878][ T5132] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.216369][ T5916] openvswitch: netlink: Flow key attr not present in new flow. [ 101.359832][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (82) [ 101.496301][ T5132] bond4 (unregistering): (slave bridge1): Releasing active interface [ 101.518118][ T5132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.519124][ T5132] bond0 (unregistering): Released all slaves [ 101.541137][ T5132] bond1 (unregistering): (slave bond2): Releasing backup interface [ 101.548887][ T5132] bond1 (unregistering): (slave bond3): Releasing backup interface [ 101.549724][ T5132] bond1 (unregistering): Released all slaves [ 101.557145][ T5936] xt_TPROXY: Can be used only with -p tcp or -p udp [ 101.583900][ T5132] bond2 (unregistering): Released all slaves [ 101.594868][ T5132] bond3 (unregistering): Released all slaves [ 101.604449][ T5132] bond4 (unregistering): Released all slaves [ 101.607444][ T5930] loop3: detected capacity change from 0 to 164 [ 101.608926][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.763282][ T5132] hsr_slave_0: left promiscuous mode [ 101.763543][ T5132] hsr_slave_1: left promiscuous mode [ 101.764114][ T5132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.764129][ T5132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.768528][ T5132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.768588][ T5132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.785245][ T5132] veth1_macvtap: left promiscuous mode [ 101.785272][ T5132] veth0_macvtap: left promiscuous mode [ 101.928292][ T5132] team0 (unregistering): Port device team_slave_1 removed [ 101.941346][ T5132] team0 (unregistering): Port device team_slave_0 removed [ 101.993807][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.158173][ T5132] IPVS: stop unused estimator thread 0... [ 102.185867][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.185898][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.185951][ T5886] bridge_slave_0: entered allmulticast mode [ 102.186450][ T5886] bridge_slave_0: entered promiscuous mode [ 102.213581][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.213616][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.215269][ T5886] bridge_slave_1: entered allmulticast mode [ 102.215981][ T5886] bridge_slave_1: entered promiscuous mode [ 102.257971][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.274674][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.300970][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.302072][ T5886] team0: Port device team_slave_0 added [ 102.307194][ T5886] team0: Port device team_slave_1 added [ 102.345504][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.345517][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.345543][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.347016][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.347027][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.347052][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.461739][ T6001] syzkaller0: entered promiscuous mode [ 102.461757][ T6001] syzkaller0: entered allmulticast mode [ 102.480933][ T5886] hsr_slave_0: entered promiscuous mode [ 102.481335][ T5886] hsr_slave_1: entered promiscuous mode [ 102.491817][ T5886] debugfs: 'hsr0' already exists in 'hsr' [ 102.491833][ T5886] Cannot create hsr debugfs directory [ 102.527627][ T6001] tipc: Started in network mode [ 102.527732][ T6001] tipc: Node identity 4e8a91adbc42, cluster identity 4711 [ 102.527801][ T6001] tipc: Enabled bearer , priority 0 [ 102.551953][ T6005] loop2: detected capacity change from 0 to 2048 [ 102.651025][ T6000] tipc: Resetting bearer [ 102.655403][ T6005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.657144][ T6000] tipc: Disabling bearer [ 102.705107][ T6005] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.724: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 102.725065][ T6024] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.724: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 102.730293][ T6024] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.724: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 102.857263][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.064038][ T5886] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.073190][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.078492][ T5886] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 103.091787][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.096723][ T5886] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 103.112427][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.118977][ T5886] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 103.129465][ T5886] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.263576][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.276849][ T6035] FAULT_INJECTION: forcing a failure. [ 103.276849][ T6035] name failslab, interval 1, probability 0, space 0, times 0 [ 103.276923][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.2.726 Not tainted syzkaller #0 PREEMPT(lazy) [ 103.276953][ T6035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.276968][ T6035] Call Trace: [ 103.276975][ T6035] [ 103.276983][ T6035] __dump_stack+0x1d/0x30 [ 103.277016][ T6035] dump_stack_lvl+0x95/0xd0 [ 103.277066][ T6035] dump_stack+0x15/0x1b [ 103.277090][ T6035] should_fail_ex+0x262/0x280 [ 103.277129][ T6035] ? __alloc_skb+0x2e0/0x6f0 [ 103.277151][ T6035] should_failslab+0x8c/0xb0 [ 103.277195][ T6035] kmem_cache_alloc_node_noprof+0x82/0x400 [ 103.277297][ T6035] ? __alloc_skb+0x2e0/0x6f0 [ 103.277315][ T6035] __alloc_skb+0x2e0/0x6f0 [ 103.277332][ T6035] ? __alloc_skb+0x209/0x6f0 [ 103.277349][ T6035] sctp_ulpevent_make_assoc_change+0x107/0x410 [ 103.277394][ T6035] sctp_do_sm+0x1010/0x33b0 [ 103.277519][ T6035] sctp_primitive_ABORT+0x74/0x90 [ 103.277544][ T6035] sctp_close+0x1a5/0x560 [ 103.277663][ T6035] ? ip_mc_drop_socket+0x1b8/0x1e0 [ 103.277684][ T6035] inet_release+0xcd/0xf0 [ 103.277785][ T6035] inet6_release+0x3e/0x60 [ 103.277809][ T6035] __sock_release+0x65/0x150 [ 103.277848][ T6035] ? __pfx_sock_close+0x10/0x10 [ 103.277881][ T6035] sock_close+0x19/0x30 [ 103.277982][ T6035] __fput+0x29e/0x630 [ 103.278005][ T6035] fput_close_sync+0xad/0x190 [ 103.278092][ T6035] __x64_sys_close+0x55/0xf0 [ 103.278127][ T6035] x64_sys_call+0x812/0x2550 [ 103.278158][ T6035] do_syscall_64+0x112/0x360 [ 103.278180][ T6035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.278219][ T6035] RIP: 0033:0x7f70c619e159 [ 103.278287][ T6035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.278308][ T6035] RSP: 002b:00007f70c4bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 103.278394][ T6035] RAX: ffffffffffffffda RBX: 00007f70c6425fa0 RCX: 00007f70c619e159 [ 103.278411][ T6035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 103.278426][ T6035] RBP: 00007f70c623506b R08: 0000000000000000 R09: 0000000000000000 [ 103.278441][ T6035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.278531][ T6035] R13: 00007f70c6426038 R14: 00007f70c6425fa0 R15: 00007ffceed86aa8 [ 103.278549][ T6035] [ 103.290712][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.299529][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.299563][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.301765][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 103.301779][ T29] audit: type=1400 audit(1790758049.387:1479): avc: denied { write } for pid=6036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.318852][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.318887][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.426353][ T5886] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.449110][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 103.678990][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.730'. [ 103.682770][ T6055] syzkaller0: entered promiscuous mode [ 103.682813][ T6055] syzkaller0: entered allmulticast mode [ 103.698344][ T6055] tipc: Started in network mode [ 103.698371][ T6055] tipc: Node identity 2a867240078f, cluster identity 4711 [ 103.698433][ T6055] tipc: Enabled bearer , priority 0 [ 103.703051][ T6053] tipc: Resetting bearer [ 103.721416][ T6053] tipc: Disabling bearer [ 103.734459][ T29] audit: type=1400 audit(1790758049.817:1480): avc: denied { write } for pid=6040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.779141][ T29] audit: type=1400 audit(1790758049.857:1481): avc: denied { write } for pid=6068 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.805851][ T6072] loop2: detected capacity change from 0 to 128 [ 103.825014][ T6072] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.825298][ T6072] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.835651][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.835681][ T6072] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.735: Directory block failed checksum [ 103.835999][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.836049][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.836147][ T29] audit: type=1400 audit(1790758049.917:1482): avc: denied { write } for pid=6071 comm="syz.2.735" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.836451][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.836478][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.843194][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.843276][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.843688][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.843714][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.844045][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.844072][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.844275][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.844301][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.844615][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.844640][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.845415][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.845448][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.848891][ T6072] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.735: No space for directory leaf checksum. Please run e2fsck -D. [ 103.848977][ T6072] EXT4-fs error (device loop2): __ext4_find_entry:1628: inode #2: comm syz.2.735: checksumming directory block 0 [ 103.909092][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.065371][ T29] audit: type=1326 audit(1790758050.147:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 104.065404][ T29] audit: type=1326 audit(1790758050.147:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 104.071949][ T29] audit: type=1326 audit(1790758050.157:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 104.073374][ T29] audit: type=1326 audit(1790758050.157:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 104.079769][ T29] audit: type=1326 audit(1790758050.157:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff94666e159 code=0x7ffc0000 [ 104.131630][ T29] audit: type=1326 audit(1790758050.217:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6078 comm="syz.3.737" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff94662e98e code=0x7ffc0000 [ 104.147046][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.370637][ T6081] loop0: detected capacity change from 0 to 512 [ 104.483530][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.487954][ T6081] ext4 filesystem being mounted at /135/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.539461][ T5886] veth0_vlan: entered promiscuous mode [ 104.547475][ T5886] veth1_vlan: entered promiscuous mode [ 104.575731][ T5886] veth0_macvtap: entered promiscuous mode [ 104.579458][ T5886] veth1_macvtap: entered promiscuous mode [ 104.590526][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.595594][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.630825][ T5132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630877][ T5132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630952][ T5132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630988][ T5132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.344278][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.757362][ T6196] netlink: 12 bytes leftover after parsing attributes in process `syz.5.748'. [ 105.758566][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.748'. [ 105.758584][ T6196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.748'. [ 105.795588][ T6196] veth3: entered allmulticast mode [ 105.830075][ T6165] loop3: detected capacity change from 0 to 512 [ 105.903944][ T6202] syzkaller0: entered promiscuous mode [ 105.903976][ T6202] syzkaller0: entered allmulticast mode [ 105.908051][ T6202] tipc: Enabled bearer , priority 0 [ 105.912952][ T6201] tipc: Resetting bearer [ 105.943974][ T6201] tipc: Disabling bearer [ 105.961651][ T6165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.965077][ T6165] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.202455][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.268823][ T6240] device-mapper: table: 252:0: : unknown target type [ 106.268913][ T6240] device-mapper: ioctl: error adding target to table [ 106.515985][ T6287] loop3: detected capacity change from 0 to 1024 [ 106.530572][ T6287] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 106.534504][ T6287] JBD2: no valid journal superblock found [ 106.534613][ T6287] EXT4-fs (loop3): Could not load journal inode [ 106.895682][ T6330] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.045126][ T6340] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 107.049227][ T6343] loop5: detected capacity change from 0 to 512 [ 107.127471][ T6343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.127619][ T6343] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.166487][ T6343] EXT4-fs (loop5): shut down requested (1) [ 108.264241][ T5886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.702287][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 108.702303][ T29] audit: type=1326 audit(1790758054.787:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.704285][ T29] audit: type=1326 audit(1790758054.787:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.704373][ T29] audit: type=1326 audit(1790758054.787:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.704450][ T29] audit: type=1326 audit(1790758054.787:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.704476][ T29] audit: type=1326 audit(1790758054.787:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.704743][ T29] audit: type=1326 audit(1790758054.787:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.705277][ T29] audit: type=1326 audit(1790758054.787:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.705364][ T29] audit: type=1326 audit(1790758054.787:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.705865][ T29] audit: type=1326 audit(1790758054.787:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.708219][ T29] audit: type=1326 audit(1790758054.787:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.1.786" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 108.794144][ T6393] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.611220][ T6419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.647038][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 109.647057][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.798'. [ 109.667846][ T6417] device-mapper: table: 252:0: : unknown target type [ 109.667997][ T6417] device-mapper: ioctl: error adding target to table [ 109.698058][ T6428] netlink: 'syz.5.798': attribute type 4 has an invalid length. [ 109.698084][ T6428] netlink: 152 bytes leftover after parsing attributes in process `syz.5.798'. [ 109.782648][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.797177][ T6419] bond1: (slave bond0): making interface the new active one [ 109.798457][ T6419] bond1: (slave bond0): Enslaving as an active interface with an up link [ 109.815491][ T6428] .`: renamed from bond0 (while UP) [ 109.899743][ T6447] IPVS: set_ctl: invalid protocol: 22 100.1.1.5:20000 [ 109.930063][ T5114] bond1: (slave .`): link status definitely down, disabling slave [ 109.930134][ T5114] bond1: now running without any active interface! [ 109.932483][ T6448] netlink: 'syz.0.810': attribute type 1 has an invalid length. [ 110.128501][ T6462] loop3: detected capacity change from 0 to 1024 [ 110.138183][ T6465] ./dev/sda1: Can't lookup blockdev [ 110.150849][ T6462] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.816: Failed to acquire dquot type 0 [ 110.150876][ T6462] loop3: lost filesystem error report for type 5 error -117 [ 110.151288][ T6462] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 110.151745][ T6462] EXT4-fs (loop3): 1 truncate cleaned up [ 110.152166][ T6462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.269905][ T6462] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.816: Failed to acquire dquot type 0 [ 110.334356][ T6466] netlink: 52 bytes leftover after parsing attributes in process `syz.5.818'. [ 110.544651][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.351987][ T6482] loop3: detected capacity change from 0 to 512 [ 111.378483][ T6484] ./dev/sda1: Can't lookup blockdev [ 111.396636][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.396736][ T6482] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.685133][ T6498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.685202][ T6498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.952466][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.280444][ T6532] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 112.305322][ T6532] veth3: entered allmulticast mode [ 112.306482][ T6532] bond1: (slave veth3): Enslaving as an active interface with a down link [ 112.328926][ T6532] bond1: (slave veth0_to_bond): making interface the new active one [ 112.329449][ T6532] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 112.384255][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.384360][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.384442][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.386834][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.386985][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.387157][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.387229][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.393093][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.393233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.498988][ T6544] loop3: detected capacity change from 0 to 1024 [ 112.519489][ T6544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.530651][ T6544] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 112.530780][ T6544] EXT4-fs (loop3): orphan cleanup on readonly fs [ 112.538839][ T6544] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.843: Invalid inode table block 0 in block_group 0 [ 112.538957][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.539335][ T6544] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 112.539358][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.539437][ T6544] EXT4-fs error (device loop3): ext4_quota_write:7458: inode #3: comm syz.3.843: mark_inode_dirty error [ 112.539474][ T6544] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 112.539689][ C1] EXT4-fs (loop3): error count since last fsck: 3 [ 112.539710][ C1] EXT4-fs (loop3): initial error at time 1790758058: __ext4_get_inode_loc:4916 [ 112.539736][ C1] EXT4-fs (loop3): last error at time 1790758058: ext4_quota_write:7458: inode 3 [ 112.605032][ T6541] loop5: detected capacity change from 0 to 1024 [ 112.614497][ T6544] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.843: Failed to acquire dquot type 0 [ 112.614538][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.614963][ T6544] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.843: Invalid inode table block 0 in block_group 0 [ 112.615005][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.616938][ T6544] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 112.616970][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.621322][ T6544] EXT4-fs error (device loop3): ext4_ext_truncate:4565: inode #15: comm syz.3.843: mark_inode_dirty error [ 112.621349][ T6544] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.624267][ T6544] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.843: Invalid inode table block 0 in block_group 0 [ 112.624312][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.625239][ T6544] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 112.625272][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.625386][ T6544] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 112.625419][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.625562][ T6544] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.843: Invalid inode table block 0 in block_group 0 [ 112.625608][ T6544] loop3: lost filesystem error report for type 5 error -117 [ 112.625834][ T6544] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6522: Corrupt filesystem [ 112.625967][ T6544] EXT4-fs error (device loop3): ext4_truncate:4721: inode #15: comm syz.3.843: mark_inode_dirty error [ 112.626057][ T6544] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.626233][ T6544] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 112.629723][ T6544] EXT4-fs (loop3): 1 truncate cleaned up [ 112.632537][ T6544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.659573][ T6541] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 112.665488][ T6541] JBD2: no valid journal superblock found [ 112.665500][ T6541] EXT4-fs (loop5): Could not load journal inode [ 112.777898][ T6548] loop5: detected capacity change from 0 to 256 [ 112.977576][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 112.990686][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 112.996977][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 113.022870][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 113.026037][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.847'. [ 113.158955][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 113.211163][ T6564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.507877][ T6568] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.519604][ T70] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 113.603137][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.670089][ T3443] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 113.805681][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 113.805739][ T29] audit: type=1326 audit(1790758059.887:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa02718e98e code=0x7ffc0000 [ 113.906113][ T29] audit: type=1326 audit(1790758059.987:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa02718e98e code=0x7ffc0000 [ 114.007212][ T29] audit: type=1326 audit(1790758060.087:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa02718e98e code=0x7ffc0000 [ 114.100322][ T6601] netlink: 'syz.2.866': attribute type 17 has an invalid length. [ 114.108619][ T29] audit: type=1326 audit(1790758060.187:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa02718e98e code=0x7ffc0000 [ 114.160149][ T6602] loop3: detected capacity change from 0 to 512 [ 114.160507][ T6602] EXT4-fs: Ignoring removed oldalloc option [ 114.167922][ T6602] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.864: bg 0: block 5: invalid block bitmap [ 114.168127][ T6602] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 114.168479][ T6602] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.864: invalid indirect mapped block 3 (level 2) [ 114.168603][ T6602] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 114.168919][ T6602] EXT4-fs (loop3): 1 orphan inode deleted [ 114.168977][ T6602] EXT4-fs (loop3): 1 truncate cleaned up [ 114.169518][ T6602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.203095][ T29] audit: type=1400 audit(1790758060.287:1900): avc: denied { execute } for pid=6598 comm="syz.3.864" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 114.243654][ T6601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.249017][ T6601] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.268170][ T6601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.272277][ T29] audit: type=1326 audit(1790758060.337:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6563 comm="syz.1.854" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa0271ce159 code=0x7ffc0000 [ 114.418139][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.445183][ T6601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.479441][ T6601] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.479516][ T6601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.553868][ T6601] veth1_vlan: left promiscuous mode [ 114.554479][ T6601] veth0_vlan: left promiscuous mode [ 114.571364][ T6601] veth0_vlan: entered promiscuous mode [ 114.572005][ T6601] veth1_vlan: entered promiscuous mode [ 114.607633][ T6601] veth1_macvtap: left promiscuous mode [ 114.608668][ T29] audit: type=1400 audit(1790758060.687:1902): avc: denied { listen } for pid=6608 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.626064][ T6601] veth0_macvtap: left promiscuous mode [ 114.626571][ T6601] veth0_macvtap: entered promiscuous mode [ 114.638516][ T6601] veth1_macvtap: entered promiscuous mode [ 114.640574][ T29] audit: type=1400 audit(1790758060.727:1903): avc: denied { accept } for pid=6608 comm="syz.0.868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.661800][ T6601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.663196][ T6601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.664855][ T6601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.666259][ T6601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.668700][ T6601] 8021q: adding VLAN 0 to HW filter on device eth0 [ 114.746595][ T5114] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 114.746696][ T5114] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 114.747127][ T5114] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 114.749114][ T6614] syzkaller0: entered promiscuous mode [ 114.749140][ T6614] syzkaller0: entered allmulticast mode [ 114.779903][ T3396] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 114.799945][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.800018][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.800056][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.800124][ T70] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.931565][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.100363][ T3403] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 115.137632][ T6633] loop5: detected capacity change from 0 to 512 [ 115.218100][ T6633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.223459][ T6633] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.505149][ T29] audit: type=1400 audit(1790758061.577:1904): avc: denied { write } for pid=6632 comm="syz.5.878" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 115.598732][ T6642] loop3: detected capacity change from 0 to 1024 [ 115.631984][ T5886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.634031][ T6642] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 115.649876][ T3410] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 115.653647][ T6642] JBD2: no valid journal superblock found [ 115.653696][ T6642] EXT4-fs (loop3): Could not load journal inode [ 115.762090][ T6649] loop3: detected capacity change from 0 to 256 [ 115.992454][ T6650] 8021q: adding VLAN 0 to HW filter on device .` [ 116.056878][ T29] audit: type=1400 audit(1790758062.137:1905): avc: denied { mounton } for pid=6654 comm="syz.0.886" path="/file0" dev="autofs" ino=14609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 116.057732][ T5114] bond1: (slave .`): link status definitely up, 20000 Mbps full duplex [ 116.057815][ T5114] bond1: (slave .`): making interface the new active one [ 116.058925][ T5114] bond1: active interface up! [ 116.060969][ T3386] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 116.147049][ T6658] syzkaller0: entered promiscuous mode [ 116.147062][ T6658] syzkaller0: entered allmulticast mode [ 116.379551][ T6666] loop3: detected capacity change from 0 to 512 [ 116.383610][ T6666] EXT4-fs: inline encryption not supported [ 116.392812][ T6666] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 116.392947][ T6666] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.891: invalid indirect mapped block 2683928664 (level 1) [ 116.393054][ T6666] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 116.397420][ T6666] EXT4-fs (loop3): 1 truncate cleaned up [ 116.397772][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.450048][ T6668] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 116.450985][ T6668] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:487: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 116.555898][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.743234][ T6702] loop3: detected capacity change from 0 to 512 [ 116.765093][ T6702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.765163][ T6702] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.834313][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.082059][ T3386] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 117.400408][ T3386] net_ratelimit: 1016 callbacks suppressed [ 117.400427][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.719748][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 118.200597][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.258924][ T6759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.271493][ T6759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.274283][ T6759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.304981][ T6759] lo: Caught tx_queue_len zero misconfig [ 118.305114][ T6759] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 118.770040][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 118.839827][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 118.934681][ T6785] __nla_validate_parse: 2 callbacks suppressed [ 118.934707][ T6785] netlink: 104 bytes leftover after parsing attributes in process `syz.0.918'. [ 119.716868][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 119.716886][ T29] audit: type=1400 audit(1790758065.797:1968): avc: denied { write } for pid=6789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.750178][ T29] audit: type=1400 audit(1790758065.837:1969): avc: denied { write } for pid=6802 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.788388][ T6809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.921'. [ 119.788435][ T6809] lo: Caught tx_queue_len zero misconfig [ 119.910108][ T29] audit: type=1400 audit(1790758065.997:1970): avc: denied { create } for pid=6812 comm="syz.1.923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 120.338925][ T6834] netlink: 'syz.1.933': attribute type 17 has an invalid length. [ 121.051009][ T6853] veth0: Caught tx_queue_len zero misconfig [ 121.131309][ T29] audit: type=1400 audit(1790758067.217:1971): avc: denied { getopt } for pid=6855 comm="syz.0.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.714072][ T6872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.805341][ T6875] loop5: detected capacity change from 0 to 512 [ 121.838581][ T6875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.857842][ T6875] EXT4-fs: journaled quota format not specified [ 122.277172][ T6875] loop5: detected capacity change from 0 to 1024 [ 122.289752][ T6882] netlink: 'syz.1.951': attribute type 4 has an invalid length. [ 122.420054][ T6875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.429824][ T29] audit: type=1400 audit(1790758068.507:1972): avc: denied { write } for pid=6873 comm="syz.5.947" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.510756][ T5886] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.746227][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 122.763188][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 122.772563][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 122.779293][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 122.784148][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.950'. [ 123.083271][ T6911] loop3: detected capacity change from 0 to 256 [ 123.294252][ T6917] tmpfs: Bad value for 'size' [ 123.971925][ T6931] loop3: detected capacity change from 0 to 128 [ 124.181005][ T6928] loop5: detected capacity change from 0 to 764 [ 124.265047][ T6928] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 124.293781][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 124.320243][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 124.333976][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 124.351975][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 124.534348][ T6943] loop5: detected capacity change from 0 to 164 [ 124.605474][ T6943] Unsupported NM flag settings (240) [ 124.730254][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.730366][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.736284][ T6951] loop5: detected capacity change from 0 to 164 [ 124.779765][ T6862] ================================================================== [ 124.779804][ T6862] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 124.779847][ T6862] [ 124.779851][ T6862] read-write to 0xffffffff86e07a00 of 8 bytes by interrupt on cpu 1: [ 124.779871][ T6862] tick_do_update_jiffies64+0x113/0x1c0 [ 124.779904][ T6862] tick_nohz_handler+0x88/0x380 [ 124.779934][ T6862] __hrtimer_run_queues+0x1f8/0x510 [ 124.779960][ T6862] hrtimer_interrupt+0x27b/0x860 [ 124.779981][ T6862] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 124.780007][ T6862] sysvec_apic_timer_interrupt+0x6f/0x80 [ 124.780043][ T6862] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.780069][ T6862] __sanitizer_cov_trace_pc+0x8/0x80 [ 124.780098][ T6862] get_signal+0x2d/0xf10 [ 124.780132][ T6862] arch_do_signal_or_restart+0x96/0x480 [ 124.780165][ T6862] exit_to_user_mode_loop+0x15d/0x8c0 [ 124.780203][ T6862] do_syscall_64+0x212/0x360 [ 124.780226][ T6862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.780250][ T6862] [ 124.780256][ T6862] read to 0xffffffff86e07a00 of 8 bytes by task 6862 on cpu 0: [ 124.780274][ T6862] mem_cgroup_flush_stats_ratelimited+0x29/0x50 [ 124.780299][ T6862] count_shadow_nodes+0x6a/0x250 [ 124.780320][ T6862] do_shrink_slab+0x61/0x650 [ 124.780349][ T6862] shrink_slab+0x53b/0x8e0 [ 124.780378][ T6862] shrink_node+0x6b8/0x2000 [ 124.780411][ T6862] do_try_to_free_pages+0x408/0xca0 [ 124.780449][ T6862] try_to_free_mem_cgroup_pages+0x201/0x420 [ 124.780490][ T6862] try_charge_memcg+0x422/0xae0 [ 124.780523][ T6862] charge_memcg+0x16f/0x220 [ 124.780552][ T6862] __mem_cgroup_charge+0x28/0xb0 [ 124.780583][ T6862] shmem_get_folio_gfp+0x49f/0xd90 [ 124.780616][ T6862] shmem_write_begin+0xfc/0x1f0 [ 124.780651][ T6862] generic_perform_write+0x186/0x490 [ 124.780683][ T6862] shmem_file_write_iter+0xc5/0xf0 [ 124.780706][ T6862] __kernel_write_iter+0x30f/0x590 [ 124.780740][ T6862] dump_user_range+0xa73/0xd00 [ 124.780775][ T6862] elf_core_dump+0x21c0/0x2340 [ 124.780797][ T6862] coredump_write+0xafb/0xdd0 [ 124.780833][ T6862] vfs_coredump+0x2762/0x3270 [ 124.780866][ T6862] get_signal+0xd33/0xf10 [ 124.780901][ T6862] arch_do_signal_or_restart+0x96/0x480 [ 124.780934][ T6862] irqentry_exit+0x14d/0x610 [ 124.780967][ T6862] asm_exc_page_fault+0x26/0x30 [ 124.780989][ T6862] [ 124.780993][ T6862] value changed: 0x00000000ffffbb59 -> 0x00000000ffffbb5a [ 124.781007][ T6862] [ 124.781011][ T6862] Reported by Kernel Concurrency Sanitizer on: [ 124.781028][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.0.939 Not tainted syzkaller #0 PREEMPT(lazy) [ 124.781056][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.781075][ T6862] ================================================================== [ 126.221628][ T6862] syz.0.939 (6862) used greatest stack depth: 8544 bytes left [ 127.079916][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 127.080003][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 127.719991][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!