last executing test programs: 10m15.49185459s ago: executing program 32 (id=193): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000036c0)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x7c, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_ACT={0x64, 0x6, [@m_nat={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0x34, 0x2, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}]}}]}, 0xac}}, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x4, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0x0, 0x10000}, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r10}}) write$P9_RVERSION(r9, &(0x7f0000000140)=ANY=[], 0x13) epoll_pwait2(r8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0xd]}, 0x8) (async) epoll_pwait2(r8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000000300)={0x0, 0x989680}, &(0x7f0000000340)={[0xd]}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040000) 10m1.83871946s ago: executing program 33 (id=379): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x80004001, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fa00"/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00ecab9fe6", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create(0x401) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)={0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4014) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000240)="53d38327618ea978d262acb7d7", 0xd) sendfile(r7, r6, 0x0, 0x3ffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x2, 0x0, 0x0, 0x20000004}, 0x48004) syz_io_uring_setup(0x221d, &(0x7f0000000340)={0x0, 0xf125, 0x800, 0x2, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) 9m18.715321878s ago: executing program 5 (id=865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffdfffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@multicast2, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) creat(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fcntl$setstatus(r0, 0x4, 0x2c00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x406}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) 9m18.636913913s ago: executing program 5 (id=868): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18, &(0x7f00000002c0)=ANY=[], 0x3, 0x256, &(0x7f0000000580)="$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") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x403f, 0x0, 0xffffffffffff0700}]) 9m18.281057886s ago: executing program 5 (id=872): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xab}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 9m18.075359358s ago: executing program 5 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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"], 0xf9, 0x1223, &(0x7f0000003480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x20600, 0x80) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000180)={0x6, 0x1, {0x2, 0x2, 0x0, 0x1, 0x5}, 0x4}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x2c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048050}, 0x48804) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000000c0)=0x12) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81001) 9m16.857161828s ago: executing program 5 (id=887): syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000ff5000/0x4000)=nil, 0x7fffdf008002, 0x7fffdf008000, 0x0, &(0x7f0000ffc000/0x2000)=nil) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) r5 = socket(0x22, 0x2, 0x3) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x40010, r6, 0x180000000) setsockopt$inet6_tcp_int(r5, 0x6, 0x1, &(0x7f0000000440)=0x8, 0x4) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}}, &(0x7f00000003c0)) timer_gettime(r1, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000400)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier}, {@nodiscard}, {@grpquota}, {@jqfmt_vfsold}], [{@subj_user={'subj_user', 0x3d, '\''}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x5}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fsname={'fsname', 0x3d, 'jqfmt=vfsv1'}}, {@fsmagic={'fsmagic', 0x3d, 0xe8f}}, {@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0x0, 0x55a, &(0x7f0000001400)="$eJzs3dFrJHcdAPDvTLJ3ubvUbNWHWrQWW7kreptL47XBh1pBfCsoFZ+EMySbELLJHsmmvSyHTfFVEES04Is++SL4BwjSF99FKNR3UVGk3umDQtuR2Z3N5fZ2k5TbzZzJ5wOTmd/8duf7/e0yv/3NzmQ2gDPr6Yi4EhETEfFcRMwU69Niir3ulD/u7p3bS/mURJa9+l4SSbGut63zxfxS8bSpiE8Pi7u9215fbDTqW0V5trWRvJ9l7atrG4ur9dX65vz83AsLLy5cX7j24JNf/ujtrEbES1/7609++Muvv/TbL77+pxt/v/K9PP//Ztkb0deOUUo6fyv5a7FvMiK2xhGsJJOdFnZdLzkXAAAOl4/3Px4Rn+uM/2diojOaAwAAAE6T7CvT8X4SkQEAAACnVhoR05GkteJ63+niitVLEfHJuJg2mtutL6w0dzaX87qIalTSlbVG/VpMda4dqEYlyctzxTW2vfLzfeX5iHg8In48c6FTri01G8tlf/kBAAAAZ8SlvuP/f8+kaa1WVO6VnBwAAAAwOtWyEwAAAADGzvE/AAAAnH7VLDnOw9LxZwIAAACMwTdeeSWfst7vXy+/truz3nzt6nJ9e722sbNUW2pu3aytNpurnXv2bRy1vUazefNLsblza7ZV327Nbu+2b2w0dzZbN9bu+wlsAAAA4AQ9/tm3/5hExN6XL3Sm3LmirhKRTRx88GQZGQLj8pGu6fnL+PIATt7Bz/cLJeYBnDxDeji7KmUnAJTuqH8AGnrxzu9HnwsAADAelz+1f/5//1Rg7/z/eyvl5QWMX7HTJ4cf/7vzB5xGE2UnAJSme/7vw6yr7GyAk1Q5bARwrLsCAv/P0tGc/z/iUsJEhwIAACWb7kxJWiuOA6YjTWu1iMc6PwtYSVbWGvVrEfGxiHh3pnI+L891npkYzQMAAAAAAAAAAAAAAAAAAAAAAADAMWVZEhkAAABwqkWkf+v9MtflmWen+78fOJf8Z6Yzj4jXf/bqT28ttlpbc/n6f+6vb71VrH++jG8wAAAAgH694/TecTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjNLdO7eX7mZZlt25vXSScf/x1YioFvGLqVszGVOd+VRUIuLiv5KYPPC8JCImRhB/782IeGJQ/CRPK6pFFvfFPxeRRsSFUcWP/vhbh8ePbvxLsTeCDODsejvvf14etP9PxdPFPAbsf5PF9LCG93/pfv83MaT/e2zYRiv3F59859ezQ+O/GfHk5OD+rxc/ybc3IP4zx2zjd7/Vbg+ry34RcfmB/q8IcCDWbGvj5uz2bvvq2sbian21vjk/P/fCwosL1xeuza6sNerF34ExfvSZ33x4r/TBA+2/OCh+0f922j/k9X/2mO3/4J1bdz7RXex7Z6ISP8+yK88Mfv+fyGeTD8bvffZ9vvgcyMv5a5i+9e2B8Z/61R+eGpZb3v7lIe2f6mv/+b72Xzlm+5/75vf/fMyHAgAnYHu3vb7YaNS3LBxciOojkcaju5CPO0tPI4kk8oV376taLD+x7sIbxT622OjtbQ+1wd7wu73+u+LgaJzJl9AXAQAA43Vv0N9fk5STEAAAAAAAAAAAAAAAAAAAAJxBR94GbFhVGhH31nznB4fcjaw/prvWAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPov8FAAD//w5a0qg=") 9m16.856305677s ago: executing program 5 (id=889): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "9026e4", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}, 0x0) 9m16.856228507s ago: executing program 34 (id=889): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@ipv6={0x86dd, @generic={0x8, 0x6, "9026e4", 0x0, 0x33, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local}}}}, 0x0) 7m4.333050628s ago: executing program 2 (id=2547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03fff500000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071756f7461000000100002800c0001400000000000000000a41400000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000781403800c0000800800034000000002"], 0x1548}}, 0x0) 7m4.309034263s ago: executing program 2 (id=2548): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) fchdir(r7) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') openat$cgroup_freezer_state(r7, &(0x7f0000000100), 0x2, 0x0) r8 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r8, 0x2000413f, 0x20adde, 0x2, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r11) write(r5, &(0x7f0000004200)='t', 0x1) socket$nl_route(0x10, 0x3, 0x0) sendfile(r5, r4, 0x0, 0x3ffff) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 7m2.965750599s ago: executing program 2 (id=2575): io_submit(0x0, 0x1, &(0x7f0000002680)=[0x0]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@nombcache}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0x460b8000}}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x88fb, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xca, 0x0, 0x1000}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file1\x00', 0x7ffe) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 7m2.763850741s ago: executing program 2 (id=2578): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}, {0x5, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x3ff, 0x8}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xe}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x11, 0x2, 0x6, 0xa, 0x13, 0xc, 0x9, 0xd, 0x3, 0x9, 0xd, 0x1, 0xc, 0x6, 0x10, 0x10], 0x1, [0x10, 0x3, 0xff, 0x4, 0xacc9, 0xfffd, 0x200, 0x6, 0x3, 0x2, 0x1, 0x5, 0x0, 0x7, 0x4, 0x9], [0x4, 0x6, 0x2, 0x8001, 0x1, 0x8, 0x5, 0x0, 0x1, 0x6d5, 0xfff, 0x7, 0xffff, 0xa, 0x5, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x8, 0x0, 0x401, 0x4000, r1, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x92800, 0x20) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x9}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x29188000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m2.318867256s ago: executing program 2 (id=2588): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe70, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0xe, 0x2}, [{0xdc8, 0xffffffff, 0xfffffffd, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x8009, 0x4, 0x5, 0x3, 0x983c3b9}, {0x14, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x4391}, {0x8ce, 0x8, 0x101, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x5}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xd, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x5, 0x8}, {0x7fffffff, 0x401, 0x0, 0xffffffff, 0x380000, 0x2}, {0x9, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x1}, {0x6, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x6f8, 0x7fffffff, 0x2, 0x6, 0x0, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x20000004, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x2d, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x72b42cb3, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4c}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0xffffffff, 0x2, 0x8002000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffdfa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x10, 0x2, 0xfffffffd, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x9, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x9, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x6}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0x5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x4000002, 0x7, 0x5}, {0x80e0470, 0x9, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7ffffffd, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x2, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x5, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0xffffffff, 0xffff, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0xfffffffe, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x6}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0xb}, {0x200, 0x9, 0x0, 0xfff, 0x3, 0xf}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0xfffd, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x8, 0xb, 0x8b0, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x100, 0x56, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4}, {0x1}, {0x4, 0x33b46010c087959a}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0xb92f7acd6c055d88}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe70}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) (async) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_debug_messages', 0x20042, 0x9a) write$tcp_mem(r3, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) (async) accept4$x25(r3, 0x0, &(0x7f00000004c0), 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x5, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0xfffffffffffffff7, 0x6}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r7, &(0x7f00000003c0)=ANY=[], 0xfce1) 7m1.955511898s ago: executing program 2 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m1.955430928s ago: executing program 35 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m44.615157309s ago: executing program 6 (id=3421): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0xbff}, @ib={0x1b, 0x38e, 0x0, {"00000000000000000400"}, 0x0, 0x3ffffffc, 0x8}}}, 0x118) 5m44.610467918s ago: executing program 6 (id=3422): r0 = socket$inet6(0xa, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7ff, 0xffffffff, 0xa, 0x8, 0xf661, 0x8, 0x2b934b7e, {0x0, @in6={{0xa, 0x4e23, 0x8, @local, 0x1}}, 0x1, 0x8, 0xbef1, 0xc, 0x4}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x4}, &(0x7f0000000340)=0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x4) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0001000000060010000900000008000100aa", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000017c0), 0x0, 0x80) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000a0000000000000a07000000080000000000000b0400000009000000010000130c"], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x80000000, 0x93}, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000dc0)={{r5, &(0x7f0000000540)='\x00', 0x20000, &(0x7f0000000580)={@align=0x1, {0x10, 0xfff9, 0xfffffff8, 0x3e9000000000}}, 0x4, &(0x7f00000005c0), &(0x7f0000000680)=0x24bf}, 0x6, &(0x7f0000000d00)=[{0x2, 0x8, &(0x7f00000006c0)='\x00', &(0x7f0000000700)="d1b3e6a51295f8a00bf3f771eda574ff7cc6f0f647b9b3cedabb730f78daabd428019851f077e81fc84aa08b4d38a5437df255a34061707e", 0x38, 0x2}, {0x1, 0x1, &(0x7f0000000740)='{#+{\x00', &(0x7f0000000780)="cb8ba3e760c09898fe8adec6d9c6a0a7efb81a773135fe50db724ca6a3844f529afd3126a77f3e4223282bee29dfb8f3088a178906b70fc331708b15b32308196c399545ece94c959cd1ed1e52ab24237528598d182df3303df261b923e3948b3d5764637f3f51b05a56d006cc0f70868409647c3051ac1129a6a4153cdd7c53f0c32046f0bcfaad66d58f589761c21a8e641e50e6ca0a534bbc543b0a47e09fbcab5be5f61ea1bdcf7a748b3b72f92e275b4303bdfbaea28e022b98045e20754548ec79c9ef39670244e31258ac8660fddccfe98c5132ce251f433e9468", 0xde, 0x14}, {0x1, 0xfb1, &(0x7f0000000880)='*\x99//\xe9#@\x00', &(0x7f00000008c0)="72e8eafa8661123abdfe0c599e7a3b65c2f2995d1dd6d41a2fea0b7ff54ff5d59f072a96891fa18f876f459bea697c55c0d8a171fb816d", 0x37, 0x8}, {0x2, 0x5, &(0x7f0000000980)='GPL\x00', &(0x7f00000009c0)="27356e0893320698e0a6224f3fe05c05ce3eae244c673dc89e3b0fcccfeb19993532925bee40358faec0df8ace659dfc19fa56e1999c40eed6c5ba6ce01487fe6266dd62bdcb184eefa692d77437aaa3654ae0b6f1b6582d57fe488ab10ec50748545208bc261f59928ffd7e5d7187ff69b3f33cd4f69d757c987a26619b2ff1012276d2a2654cd37c2ab551676cb938f6711e83b6953d22d0bd41bb3ebc89c4041cd0e87435548d616688a9c2981f6705f1ec45e04ff2fe1dd8ca8e14c44f576c0a721c5325d0573b338b85d49ab87d3af162fddedcace3efee65e55b843f192c", 0xe1, 0x8}, {0x2, 0xd, &(0x7f0000000ac0)='\x00', &(0x7f0000000b00)="a15a214c7c88d2bc1a054c71b387f961c8e13795811b05467e76d75374db128de284a09512cccace7d23802efa2cd703055b4553b6c51684deae4b09c047467ff659a1c84405cc741afa3ace0719a98dbdbfb6172f52d39ad444c5f1c31f0045525755a5540a1216c5e705fa3551acc5613ddc37bc7b79dc5e1fefaded698ee6397a0f1cb3d6ed3a581feed5f80c8b9e96102bda9ae861f06cef7aae555e801a8305087ed70fab70092a88b36afd5af6", 0xb0, 0x10}, {0x1, 0x7, &(0x7f0000000bc0)='@/\')#-\x00', &(0x7f0000000c00)="c256df47937577b0490685c2a35d7054831d49261e6c5d8c1dc3ff5ad52ab891ac4154e7b7a8036fe7f59adebe85e0ba7efd94f61b5007f14c5bb9e0e37879ca187276405e0e263c1635e0993bc92190087d18803c75e3ad12564ef2a5773af32fa39ee9ad0d8cadf07bccd8a46270e93fe5b813651e90a5abb1c2d5b732433a3f8739c201cffbeea241e3d49a275aeb40d3f995b56cfa60cbb3334cea37fcc7a349f373cbb643a8599d13032adc1847884a64f5f75422404958cf1bc828cffc3da452d85539e92cdaa527df85e7f09506c975786a51e08bb81b4c32d1f4af11af84e21bad8fd39321ee114edd", 0xed, 0x10}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000000)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000e40)=0xffffffffffffffff) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000000010104000700000000000000000000240001801400018008000100e000000108000200e00000010c00028005000100000000000800034000000406"], 0x40}}, 0x0) (async, rerun: 64) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000380)={0x9, 0x9, 0x5, 0x1f, 0x2}) (async, rerun: 64) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4}) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5m44.444110407s ago: executing program 6 (id=3426): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$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") prctl$PR_GET_THP_DISABLE(0x2a) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x25e, &(0x7f0000000540)="$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") (async) prctl$PR_GET_THP_DISABLE(0x2a) (async) 5m44.333836296s ago: executing program 6 (id=3428): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x450e82, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@generic={0x63, 0x1, 0x0, 0x9}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m43.19118374s ago: executing program 6 (id=3439): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000983a00", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673", 0xd}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="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", 0x111}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a2", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{0x0}], 0x1}}], 0x3, 0x2090) 5m42.173441417s ago: executing program 6 (id=3451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000002140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 5m42.110407216s ago: executing program 36 (id=3451): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000002140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}}, 0x0) 25.620981143s ago: executing program 4 (id=6941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100000000000000000021bf000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a010400000000000000000100fff50900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653004000000000100000028000000000a05000000000000000000010000080900010073797a310000000008000240"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 25.459501653s ago: executing program 4 (id=6942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000040000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800a00010071756f7461000000100002800c0001400000000000000000a41400000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000781403800c0000800800034000000002"], 0x1548}}, 0x0) 25.404387352s ago: executing program 4 (id=6943): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x88c, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x2, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x1, 0x0, 0x100000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xaa84911, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x3, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x40000, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1401, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0xfffffffe, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x319e, 0xfb18, 0x6, 0x9, 0x0, 0x484a, 0x0, 0x2, 0xffffffff, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfbfffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x5a62]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0xff, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x88c}}, 0x0) 25.215648036s ago: executing program 4 (id=6944): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080), 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x2c}}, 0x20000000) r3 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r5 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r5, r5, 0x13) ptrace(0x10, r5) ptrace$setsig(0x4203, r5, 0x560, &(0x7f0000000080)={0x1b, 0x3, 0x3ff}) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x78) fallocate(r6, 0x0, 0x0, 0x1001ed) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000740)={0xc, r3, 0x6, 0x0, 0xa697, 0x3}) 25.039377933s ago: executing program 4 (id=6945): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000740)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @loopback}], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x10, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, r7, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa4}]}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000680)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "76a8e2", 0x44, 0x3a, 0x1, @remote, @empty, {[@fragment={0x2e, 0x0, 0x8, 0x1, 0x0, 0x1c, 0x66}], @mlv2_query={0x82, 0x0, 0x0, 0x563b, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5, 0x0, 0x0, 0x4, 0x2, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}}}}, 0x0) iopl(0x6) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/148, 0x94, 0x1, &(0x7f0000000840)=""/73, 0x49}, 0x0) unshare(0x2040400) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x62, 0x4) listen(r1, 0x2) 24.731376815s ago: executing program 4 (id=6948): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x4, 0xfffffffffffffffb}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) 24.726409104s ago: executing program 37 (id=6948): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x4, 0xfffffffffffffffb}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff00000b"], 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x24040800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) 19.319967412s ago: executing program 1 (id=7007): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2cd4f4a847077766646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="2a000000000000001000"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="040000000200"/28], 0x50) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r4, &(0x7f0000000400)=ANY=[@ANYBLOB="6cff03000000000000656d00d93b327f34e3d1164b0f322623a35fd0a8bf57433bf14fd6ac2ef520f2a91a1dacb844479da65d403b249a0ae8e398a7efffe97bbe881e206030"], 0xc) 18.370061282s ago: executing program 1 (id=7018): r0 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB='\a'], 0x14) read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) r5 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x5}) fchdir(r6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000040)={r8, 0x7, 0x3, 0x8}, &(0x7f0000000080)=0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x10000006) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x0) 16.022980929s ago: executing program 1 (id=7045): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@mpls_delroute={0x58, 0x19, 0x20, 0x709d28, 0x25dfdbff, {0x1c, 0xb4, 0x14, 0x7, 0xff, 0x2, 0x0, 0xa, 0x200}, [@RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x0, 0xb}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x38}, @RTA_MULTIPATH={0xc, 0x9, {0xff, 0xc, 0x6, r1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xa}, @RTA_MULTIPATH={0xc, 0x9, {0xaa, 0x8, 0x3, r1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 15.81810718s ago: executing program 1 (id=7047): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RREADDIR(r6, &(0x7f0000014c80)={0x1001d, 0x29, 0x2, {0xffffffef, [{{0x80, 0x2, 0x8}, 0x3, 0x0, 0xfffa, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1001d) sendfile(r6, 0xffffffffffffffff, 0x0, 0x8) r7 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x112) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000010900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) perf_event_open(&(0x7f00000003c0)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9ec4, 0x0, 0x0, 0x9}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0xd, 0x7, 0xd1, 0x3, @tick=0xb8, {0x7, 0x1}, {0x9, 0x40}, @note={0x6, 0x20, 0x7, 0x40, 0x8}}, {0x4, 0x7f, 0xff, 0x7, @time={0x2}, {0x9, 0x2}, {0x0, 0x6}, @quote={{0x3, 0x55}, 0x100, &(0x7f0000000080)={0x40, 0xff, 0xff, 0x8, @tick=0x7fff, {}, {0x8, 0x6}, @note={0x5, 0x0, 0x7f, 0xfa, 0x1}}}}, {0x4, 0x5, 0xfe, 0x0, @time={0x8, 0x569}, {0x8, 0x24}, {0x10, 0x5}, @time=@time={0x5, 0x6}}, {0x5, 0xa, 0x0, 0x3, @tick=0x2, {0xfe, 0xfb}, {0x3, 0x5}, @raw8={"d05f455a95fbfb55ef1f5244"}}, {0x80, 0xed, 0x6, 0x7, @time={0x80000000, 0x4}, {0x0, 0xc0}, {0x0, 0x8}, @result={0x8000, 0x100}}, {0x71, 0x3, 0x25, 0x9, @tick=0x5, {0x6, 0xfe}, {0x10, 0x8}, @result={0x8000, 0x80000000}}], 0xa8) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) unshare(0x40000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) 14.807494329s ago: executing program 1 (id=7058): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0xfffffffc, 0x5, 0x2000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) kexec_load(0x3, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x116094000, 0x41000000}], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 14.544393199s ago: executing program 1 (id=7062): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xa, 0x522, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_clone(0x8006a000, 0x0, 0x0, 0x0, 0x0, 0x0) 14.479554937s ago: executing program 38 (id=7062): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0xa, 0x522, &(0x7f0000000c00)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) syz_clone(0x8006a000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.211549865s ago: executing program 0 (id=7160): r0 = socket$rxrpc(0x21, 0x2, 0xa) openat$vcsa(0xffffffffffffff9c, 0x0, 0xb6202, 0x0) r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7496, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000340), 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000440)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 5.014890308s ago: executing program 0 (id=7164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811f8ff", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000400), &(0x7f0000000440)=r6}, 0x20) syz_emit_ethernet(0xd74, &(0x7f0000000a40)={@local, @random="7f2a5602d17c", @void, {@generic={0xa00, "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"}}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x24}}, 0x48804) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x250, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1e8, 0x250, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth0_vlan\x00', {0xb, 0x2, 0x2f, 0xb2, 0x6, 0x8, 0x8, 0x18}, {0xf2}}}, @common=@unspec=@state={{0x28}, {0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xb, 0xb, 0x4468, 'syz1\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x6, 0xf93b, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) 4.060456408s ago: executing program 9 (id=7172): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40}, 0x40000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$ptp(r3, &(0x7f0000000300)=""/212, 0xd4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)=0x4) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000007380)='S', 0x1}], 0x1, &(0x7f0000005e80)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x4000000}, 0x8841) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x1c) fcntl$setsig(r4, 0xa, 0x19) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) r6 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x1d, &(0x7f00000006c0)={0x38, 0xffffffff, 0x2}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSACTIVE(r7, 0x40047459, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r8, @ANYBLOB=',\x00']) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r10, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xa8, r10, 0x403, 0x70bd26, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x48090}, 0x11) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a800008100000086dd"], 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 4.055452277s ago: executing program 8 (id=7173): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0xed}, 0x94) 4.045073135s ago: executing program 8 (id=7175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2cd4f4a847077766646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="2a000000000000001000"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="040000000200"/28], 0x50) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="6cff03000000000000656d00d93b327f34e3d1164b0f322623a35fd0a8bf57433bf14fd6ac2ef520f2a91a1dacb844479da65d403b249a0ae8e398a7efffe97bbe881e206030"], 0xc) 3.547095151s ago: executing program 9 (id=7177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x4, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x8, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") socket$inet6(0xa, 0x1, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000340)='affs\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x6, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@noop, @rr={0x7, 0x3, 0x19}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r3 = fsopen(&(0x7f00000003c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xa) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xdc) write(r5, &(0x7f0000000a00)="c7", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) io_getevents(r6, 0xfffffffffffffff9, 0x0, 0x0, 0x0) syz_emit_ethernet(0xc6, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "d38453", 0x90, 0x2f, 0x0, @remote, @private0, {[@dstopts={0x2c, 0x11, '\x00', [@generic={0x7}, @hao={0xc9, 0x10, @mcast1}, @generic={0x2, 0x72, "ddde6d343fd3ae0d0bf96c041507b77a1a7f5f9f7eb5ab7ece510a4c71f3575a0ceda8b4199810016fc458ed9ff8c6cb94edeae5aa6462a6a07bdf0710db5250e925ba0c82a7e976b6e02db2ee3a550a7de82897de78ba1418d871c4afbf29bdbc724c8a6a539ec459337f7c2355fbe90a1c"}]}]}}}}}, 0x0) 3.098761836s ago: executing program 8 (id=7178): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000700)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@minixdf}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@minixdf}]}, 0xfe, 0x253, &(0x7f00000009c0)="$eJzs3T9oJFUcB/DvzO7euXeLntoI4h8QEQ2EsxNszkbhQI5DRFDhRMRGOYXzDrvEysZCa5VUNkHsjJaSJtgoglXUFLERNFgYLLRY2Z0N5M9qzG7ckcznA5OZybyZ3xt2vm+3ebsBGutckgtJWknmknSSFLsb3Fst50a7S921K0m//9SvxbBdtV/ZOe9sksUkjyRZLYu80k5urDy3+fv6Ew+8c71z/0crz3ZnepMjW5sbT25/eOntTy8+fOPrb3++VORCenvu6/gVY/7XLpLb/oti/xNFu+4e8G9cfvOT7wa5vz3JfcP8d1KmevHevXZqtZOHPvi7c9/75Zs7Z9lX4Pj1+53Be+BiH2icMkkvRTmfpNouy/n56jP8960z5auvXXtj7uXu9asv1T1SAWOdOvopvWTj8c9Pf3Z2X/5/alX5B06uQf6fvrz8w2B7u1V3b4CZuKtaDfI/98LCg5F/aBz5h+aSf2gu+Yfmkn9oLvmH5pJ/OME6/3xY/qG55B+aS/6huXbnHwBolv7pSWYN33L8E5GBmat7/AEAAAAAAAAAAAAAAAAAAA5a6q5d2VkmvUZxxPZfvp9sPZakPa5+a/h7xMlNw79nfisGzfbUak/a0ZHn75nyAlP6uObZ1zf/WG/9r+6ut/7C1WTxrSTn2+2Dz18xev4md+shxzsvTlngiPbn89FnZlt/vz+X661/cT35YjD+nB83/pS5Y7geP/70Dv+K5UO9/seUFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBm/goAAP//yfxr/Q==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = fsopen(&(0x7f0000000140)='binfmt_misc\x00', 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000001ff0)={0x1d, r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2062, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x29, 0x0, 0xff, 0x0, 0x8, 0x40008, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x1, @perf_config_ext={0x9, 0x26}, 0x0, 0x5ab2, 0x800000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x5452, &(0x7f00000002c0)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x11\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r1, 0x0, 0x0) fchdir(r10) 3.040911875s ago: executing program 0 (id=7179): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2000000) 2.879073194s ago: executing program 0 (id=7180): unshare(0x20000680) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000380), 0x8, 0x40000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000019c0)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)=[{&(0x7f0000000440)={0x18, 0x41, 0x2, 0x70bd2a, 0x25dfdbfe, "", [@typed={0x8, 0x12e, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000000ec0)={0x518, 0x15, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xcb, 0xde, 0x0, 0x1, [@generic="f3757fe510f1fdc30756556c3c8f7763a596d6afd0d5ca95ff83df379780dd84c32827821b98e550b2d2823d644c59347b4e1d480b343f9982a22600902e", @generic="13836a1f4b27", @typed={0x8, 0x152, 0x0, 0x0, @pid}, @generic="a2ae2af550b1da495394c85e13404579bf759d6a30518ab071790f1f7500eee386250ef8ced0497cb26a412289ddbe942d2225e6af89aa0af99b0e71c77a4b07869a289d2102c742dc0693278419a4dbf4872d490e2f5f7552636c176f708cc4653efea9c643e5f6d5238c7f9f6a5b0e496413b3f02c99b1309b03"]}, @nested={0x14f, 0x6f, 0x0, 0x1, [@generic="6a7edca6f237b0c5f9dce724a300c51e8f3574380e8824cf27847744bee948b32a58cf690716af30e1c459fa8228ca87c3b5da190f3771b01ce5af5a6da070b564ea02230e54bd10a7020b6564d26c2a8a916dd1dbc591831cbb52d05633ac930f06097dbbd69fee37ca848fd02ee2ea30179680768583c1714ac1929dc45fbfeec945daf185ea5104e7ea3bcf06bad9463aaedba32960c6aa1607107c172579756786e28b9be0248ab20360c97134d869893a8f5cd8265b8dfd7cc8617e", @typed={0xc, 0xfe, 0x0, 0x0, @u64=0xd65a}, @typed={0x7, 0x37, 0x0, 0x0, @str='acl'}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x8001}, @typed={0x8, 0x117, 0x0, 0x0, @fd=r4}, @generic="95111f85a67f6d02d007cfb4b78beb9395f0bcc28cd3deddecbbd815d4b5bb32c7cacaefe226aaea6662c4f786330996354269769ce108d1c411968c57820f9694512836dbab98582805c5c41b75919edb0caa513b758b8446a1bcd84ff10fce3b11682dad"]}, @generic="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", @generic="5d79349e6296e0726c39db11b55acfb59e", @generic="4e3af8022177ee577476fbe2a6ab76eaca90f4e84f475205fbcc007624f3cc7c7b0aa5757ffb417c327147a8445b072d5a9f839ab96206c7dca19e93f0552832567111b5d5f306424be91caba8df5c3f0d771690629245000f74c10099151d1f504ea4b4f32b3d21696b84a4f1bc69df81a08fe46e935b71bb4b8f0b6420b19990498bca5aa4c149b63408968d898dc84963", @generic="3d89e04f5079a4b6", @typed={0x8, 0x83, 0x0, 0x0, @u32=0x9}, @typed={0x4, 0xe7}, @nested={0x68, 0x154, 0x0, 0x1, [@typed={0x14, 0x10f, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x117}, @nested={0x4, 0x14e}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@empty}, @generic, @nested={0x4, 0x103}, @generic="ccd2fcc5d7d90bf33b00ee01ce7ef13d3fc812016ba080a87058cabfe77508c2cfd926cc451b000442e2380bc038b81397199587", @nested={0x4, 0x21}, @nested={0x4, 0xdb}]}, @nested={0xc9, 0xd9, 0x0, 0x1, [@generic="2a27fd628a601006e925b96069ce8945d31dfb40d41a199bfa4d104b03bd3ea25ff606d1800e94a93f5826b74e50eeb2bf93cfe265626f0a25ba1d4828050c495d345c75f909d78489ff08e827d2e9ed9a1393105f80c3f1bdce39c5cfc4e70ed68055628d32a38cca4c8172595e441c0df5fbaa627353dc3b3767b2384a562c467b2f635dc1ff83e835cd60cb9554cc9121b5dd810c5e1d295f5024673098a7ecb3336a71f0284d2746c7de069e13bd16", @typed={0xc, 0x15a, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x32}, @nested={0x4, 0x15c}]}]}, 0x518}, {&(0x7f0000000580)={0x140, 0x29, 0x12, 0x70bd27, 0x25dfdbfb, "", [@generic="d7c9fd193e60f6273c27cd57987883a905c5b725f4fdd8ae54dc83642f5fd6e9cacac1068f42e8197621c854ec93e5bc204469", @typed={0x8, 0x7, 0x0, 0x0, @str='GPL\x00'}, @generic="0a7deb8e0d42cc4a333134d88a9851496ca91d75931ef5a4da4dad9d1bfe260f037f17b4503d2dd13f6fc8a93e58438091cbe56ef25355255a960d3cb3020666c32a0441f0fce0a4849b9fd84188df0c96cca80713ff98d158387ac6710d3789d833a2985af3a3ce1b3d98d67ec135f42667e03c88b5dd472f0ef395b15f5eebb95bef05b450628269f8b57df12b82336f954397d561f4066303f9aecace65ada64b179b8097637c453b361d95e0f55c2204644fe9aef3ec1b4b287d1610ac47ff5043989b0b83d6e0d6b0a36c2612c9ec1a0ddfe7647cefdf5804190451751d82e5dc72e07123b5aa30747ad7ee0cacf911507ba1"]}, 0x140}, {&(0x7f0000000840)={0xe0, 0x31, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@generic="d3cecf8bf14b3cc27947cf337d8599081a5d3bb77c2661d1430a435331ceeb377ae28a7386e7e0b83987634cf3029b92ae4b11e55d2b66c19935a68f67b1fb229bc1cdc4a4e48ae514690bc5b2df988897da40604daf5ea74b1de992235c4bb17207e00d5dbe8d97b64a89f512e0147f2ac8a26851dacd6c54e764be6259908c9aea1c3100d41d71fe63d3f3049758492ad3c3cf8e03975f876283cc23f99dc1c2cc6aa267b53dcca9908d75557836d53ab4f952c790d426d67419941529711fe9fff90250f8321badde642972ce5b24"]}, 0xe0}, {&(0x7f0000001740)=ANY=[@ANYBLOB="e00000002200100026bd7000fbdbdf250c00ec00aa0000000000000008006e00640101012800058008002500", @ANYRES32=0x0, @ANYBLOB="1400cf0000000000000000000000ffffac1414aa04003f000400fb808ab1abe80c8a4ace45c05618e318e5e45b53636c0531ac86197e2135fad5b60e4cab236a1df8cbd3a166783c7eeac98e4ee4752381130c0002007f000000000000000800a800", @ANYRES32=0x0, @ANYBLOB="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"], 0xe0}], 0x5, &(0x7f0000001640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r7, r3, r6, r8]}}], 0xa0, 0x48805}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) ioctl$TIOCGWINSZ(r0, 0x5413, 0xfffffffffffffffd) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x0, 0x1) unshare(0x10000000) 2.549482192s ago: executing program 9 (id=7181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x600082, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff19f6, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback=r0, 0x2e, 0x1, 0xa, &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0]}, 0x40) 2.492547611s ago: executing program 3 (id=7182): r0 = perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x9, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x500, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000700)}, 0x40, 0x100, 0xffff7d79, 0x6, 0x3, 0x0, 0x5d, 0x0, 0x5, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x18) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0xfc, 0x0, 0x5, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000980), 0x4}, 0x106200, 0x10004, 0x81, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, r0, 0xb) recvmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000180)=""/218, 0xda}, {&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f00000003c0)=""/230, 0xe6}], 0x4}, 0x2}, {{&(0x7f00000004c0)=@rc, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000000540)=""/31, 0x1f}, {&(0x7f0000000580)=""/153, 0x99}], 0x3, &(0x7f0000000680)=""/97, 0x61}, 0x7f}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)}], 0x1, &(0x7f0000000780)=""/90, 0x5a}, 0x5}], 0x3, 0x200, &(0x7f00000008c0)) sendto$l2tp(r0, &(0x7f00000009c0)="38f166e3c646d4a9b4efe9895a37d2902137487f5d232a124818445c7a1832dc4813faf3c1d04e87d478adf4b67374ee7a4cb9c47f3ae3238e191cd24d1c4a02dc5eacce1ad84eb7e8b12c9eccf1f90f195e31f9d0ea73fe9ec1abf6c6a33a51e69c5f073ecae1edf02f3237b50bcbe1f83d764df12ff770149ef454c7027e6c6c88286574b0370c36c87232146141db31734ff0839a340fb930198ab63cb85621a0d8c1d986f6db5f5197250c1df597c2", 0xb1, 0x40000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) close(r2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000b00)=@assoc_value={0x0, 0x7ff}, &(0x7f0000000b40)=0x8) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000a80)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 2.367370038s ago: executing program 7 (id=7183): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_int(r0, 0x1, 0x1e, 0x0, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000004c0)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000180)="20a136e958a55a4593bba0034b66baa921bf6d62685a891c12d13137e939aa5c990a935f40dd2576edf5e4de33ea725a530a9098ebb992320c7315d1403223d978c7d50761f06637b422eb29276c81f3e50641065b99f694675b675682b7077dc68ec9d926431bd1fa3e6895c888f350d5e1", 0x72}, {&(0x7f0000000580)="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", 0x104}], 0x2, 0x0, 0x0, 0x48041}}], 0x1, 0x20000001) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000001000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x5) 2.228851561s ago: executing program 3 (id=7184): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000850000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 2.159726728s ago: executing program 8 (id=7185): io_setup(0x4, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff070000", 0x4}]) 2.159408738s ago: executing program 7 (id=7186): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private0, 0x4}, {0xa, 0xff9d, 0x7, @loopback={0x9d}}, r1, 0x800}}, 0x48) 2.131791393s ago: executing program 3 (id=7187): openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 2.130902513s ago: executing program 0 (id=7188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2cd4f4a847077766646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',\x00']) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="2a000000000000001000"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="040000000200"/28], 0x50) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="6cff03000000000000656d00d93b327f34e3d1164b0f322623a35fd0a8bf57433bf14fd6ac2ef520f2a91a1dacb844479da65d403b249a0ae8e398a7efffe97bbe881e206030"], 0xc) 2.024421213s ago: executing program 3 (id=7189): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f14, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x43, 0x10000, 0x0, 0xffffffffffffffff, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) add_key(&(0x7f0000000140)='keyring\x00', 0x0, &(0x7f0000002300)="86fa", 0x2, 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000001a00)={&(0x7f0000001200)={0xa, 0x4e24, 0xffffff80, @empty, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2f}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2f, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}}}], 0x38}, 0x4004) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 1.95948176s ago: executing program 7 (id=7190): close(0x3) 1.95922078s ago: executing program 7 (id=7191): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x27, 0x37, 0x0, &(0x7f0000000440)="f8adb26caa4d29dcc8007f5b86dd98a2f72a5c0f19285018150148d9798a841725ca087205d49db28d4ce25a5fb57710fd281d21dec8c7", 0x0, 0x4003, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.788947969s ago: executing program 8 (id=7192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000340), 0x0}, 0x20) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) vmsplice(r6, &(0x7f0000000380)=[{&(0x7f0000000000)="9b", 0x1}], 0x1, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 1.788774879s ago: executing program 3 (id=7193): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) chown(&(0x7f0000000080)='./file0\x00', r1, r3) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x36]}}]}) 1.74683043s ago: executing program 7 (id=7194): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfe, 0x0, 0x8087, 0x406, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x6}, 0x100b28, 0x6, 0xffffffff, 0x7, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000001c0)={'team_slave_1\x00', @ifru_settings={0xde7, 0x5, @fr_pvc_info=0x0}}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r2, 0x100) dup(r2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f17000000050020000000000001000000002e0061612e"], &(0x7f0000005bc0)=""/255, 0xfffffffffffffd06, 0xff, 0x9, 0xfff}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x1, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000100), 0x5}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0xffff3729, 0x0, 0xc0}, r1, 0x3, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000840)={0xffffffffffffffff, 0x8, {0x0, 0x0, 0x0, 0x10001, 0x5, 0x0, 0x1, 0xa, 0xd, "db7b1ba5c659c40f8aa9c295137ce63e35fe0c2f77a8a0e2135245110a306bd040efbdb5ca1da4eba558f263e9db6bbef1301dd75a1c16952705158c211e6c03", "f7a7d9681a1e1cdcf6b99695e3c4445ecc54561c6f9e44de8fe14ef3aff94fd3a6feb6c549564ebe55c571294a6bfc9a329f572ca635689e904729ce969ccae1", "ac83915ff295d2958ed6439c909377db1c064439480c2a7c100aa7d3b7126870", [0x100000001, 0x7]}}) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x37}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000e04e00"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r5, 0x0, 0x20004899) 1.493476342s ago: executing program 3 (id=7195): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) process_vm_writev(0x0, &(0x7f0000001c80), 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {0x0, 0x0, 0x0, 0x80000000}}}, 0xb8}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) syz_pidfd_open(r6, 0x0) 1.123461663s ago: executing program 0 (id=7196): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) rename(0x0, &(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000000000)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x200000000000000) ioprio_set$uid(0x3, 0x0, 0x0) 906.261891ms ago: executing program 9 (id=7197): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000080000000700000008000a40000000000900020073797a3100000000090001"], 0x1548}}, 0x0) 856.549782ms ago: executing program 9 (id=7198): unshare(0x2a060380) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 315.42068ms ago: executing program 7 (id=7199): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", 'i}oz', "ffca69dbc7b44302"}, 0x28) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x88}}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@dots}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x245, &(0x7f0000001200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x3, 0xff, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) 290.795715ms ago: executing program 9 (id=7200): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000064560000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000b0008500000005000000bca9000000000000b50901000000eaff9400000000000000b509000002000000639a04fe00000000b5090000fcffffffc39a04fee1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f03801ffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 8 (id=7201): socket$nl_route(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x641b, 0x10100, 0x1, 0x1}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x80) r0 = syz_io_uring_setup(0x5bf, &(0x7f0000000580)={0x0, 0x1954, 0x300, 0x2000004}, 0x0, 0x0) syz_io_uring_setup(0x6dae, &(0x7f00000001c0)={0x0, 0x49f8, 0x10, 0x2, 0x3e, 0x0, r0}, 0x0, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000150050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 631.695253][T27968] __x64_sys_bpf+0x41/0x50 [ 631.695284][T27968] x64_sys_call+0x10cb/0x3020 [ 631.695448][T27968] do_syscall_64+0x12c/0x370 [ 631.695520][T27968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.695543][T27968] RIP: 0033:0x7fa2950ec629 [ 631.695561][T27968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.695635][T27968] RSP: 002b:00007fa293b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 631.695663][T27968] RAX: ffffffffffffffda RBX: 00007fa295365fa0 RCX: 00007fa2950ec629 [ 631.695679][T27968] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 631.695761][T27968] RBP: 00007fa293b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 631.695773][T27968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.695784][T27968] R13: 00007fa295366038 R14: 00007fa295365fa0 R15: 00007ffc4d728d78 [ 631.695801][T27968] [ 631.892631][T27969] netlink: 'syz.4.6585': attribute type 29 has an invalid length. [ 631.908430][T22401] EXT4-fs unmount: 31 callbacks suppressed [ 631.908445][T22401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.908907][T27969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6585'. [ 631.995009][T27979] 9p: Bad value for 'rfdno' [ 631.994960][ T28] audit: type=1400 audit(1772046492.947:4379): avc: denied { mounton } for pid=27978 comm="syz.7.6590" path="/file0" dev="autofs" ino=93544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 632.087529][ T28] audit: type=1400 audit(1772046492.993:4380): avc: denied { read } for pid=27975 comm="syz.1.6588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 632.150214][T27993] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.169847][ T28] audit: type=1400 audit(1772046493.078:4381): avc: denied { setopt } for pid=27990 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 632.200083][T27993] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 632.225268][ T28] audit: type=1400 audit(1772046493.078:4382): avc: denied { write } for pid=27990 comm="syz.4.6595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 632.333457][T28004] set_capacity_and_notify: 1 callbacks suppressed [ 632.333475][T28004] loop1: detected capacity change from 0 to 128 [ 632.395744][T28004] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.445770][T28004] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 632.498390][T28004] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.6599: checksumming directory block 0 [ 632.545150][T28004] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.6599: checksumming directory block 0 [ 632.579872][T22401] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 632.725397][T28018] loop1: detected capacity change from 0 to 2048 [ 632.764490][T28018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.800352][T28018] netlink: 'syz.1.6605': attribute type 5 has an invalid length. [ 632.850564][T28018] ip6erspan0: entered promiscuous mode [ 632.905237][T28029] loop8: detected capacity change from 0 to 512 [ 632.915376][T28031] loop9: detected capacity change from 0 to 512 [ 632.924574][T28031] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 632.929414][T28029] EXT4-fs: Ignoring removed nobh option [ 632.944285][T28029] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 632.967079][T28031] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6610: bg 0: block 255: padding at end of block bitmap is not set [ 632.983592][T22401] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.021862][T28029] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6609: iget: bad i_size value: 38620345925642 [ 633.057299][T28031] fserror_report: 1 callbacks suppressed [ 633.057314][T28031] loop9: lost filesystem error report for type 5 error -117 [ 633.066403][T28031] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 633.066483][T28029] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 633.073833][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 633.073856][ C1] EXT4-fs (loop9): initial error at time 1772046493: ext4_validate_block_bitmap:441 [ 633.073877][ C1] EXT4-fs (loop9): last error at time 1772046493: ext4_validate_block_bitmap:441 [ 633.074200][T28040] netlink: 'syz.4.6613': attribute type 27 has an invalid length. [ 633.099688][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 633.120491][T28031] loop9: lost filesystem error report for type 5 error -117 [ 633.124717][ C1] EXT4-fs (loop8): initial error at time 1772046493: ext4_orphan_get:1391: inode 15 [ 633.124748][ C1] EXT4-fs (loop8): last error at time 1772046493: ext4_orphan_get:1391: inode 15 [ 633.157092][T28029] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6609: couldn't read orphan inode 15 (err -117) [ 633.173458][T28029] loop8: lost filesystem error report for type 5 error -117 [ 633.179406][T28029] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.200262][T28031] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6610: invalid indirect mapped block 1 (level 1) [ 633.213541][T28041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.213568][T28031] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 633.230908][T28031] EXT4-fs (loop9): 1 truncate cleaned up [ 633.239196][T28029] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.6609: path /158/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 633.240457][T28031] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.280984][T17270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.353390][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.652182][T28076] loop4: detected capacity change from 0 to 512 [ 633.664017][T28078] loop7: detected capacity change from 0 to 256 [ 633.698218][T28076] EXT4-fs: Ignoring removed nobh option [ 633.712013][T28076] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 633.718806][T28053] lo speed is unknown, defaulting to 1000 [ 633.737628][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6623'. [ 633.746778][T28079] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6623'. [ 633.766481][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 633.785363][T28076] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6621: iget: bad i_size value: 38620345925642 [ 633.818604][T25350] bridge_slave_1: left allmulticast mode [ 633.826661][T28079] netlink: 'syz.7.6623': attribute type 6 has an invalid length. [ 633.834408][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 633.847254][T28076] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 633.847652][T28076] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6621: couldn't read orphan inode 15 (err -117) [ 633.856787][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 633.856814][ C1] EXT4-fs (loop4): initial error at time 1772046494: ext4_orphan_get:1391: inode 15 [ 633.856847][ C1] EXT4-fs (loop4): last error at time 1772046494: ext4_orphan_get:1391: inode 15 [ 633.901420][T25350] bridge_slave_1: left promiscuous mode [ 633.910177][T25350] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.917320][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 633.935149][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 633.949770][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 633.962887][T25350] bridge_slave_0: left allmulticast mode [ 633.969699][T25350] bridge_slave_0: left promiscuous mode [ 633.976437][T25350] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.983747][T28076] loop4: lost filesystem error report for type 5 error -117 [ 633.986188][T28076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.010324][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 634.025055][T28078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=28078 comm=syz.7.6623 [ 634.043101][T28076] forcing mempool usage for bio_alloc_bioset+0x453/0x9a0 [ 634.069813][T28076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.6621: bg 0: block 5: invalid block bitmap [ 634.093557][T28076] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 634.106246][T28076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 634.106246][T28076] [ 634.115946][T28076] EXT4-fs (loop4): Total free blocks count 0 [ 634.122173][T28076] EXT4-fs (loop4): Free/Dirty block details [ 634.154272][T28076] EXT4-fs (loop4): free_blocks=0 [ 634.159441][T28076] EXT4-fs (loop4): dirty_blocks=1 [ 634.164523][T28076] EXT4-fs (loop4): Block reservation details [ 634.180962][T28076] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 634.209368][T26222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.259713][T25350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.289266][T25350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.299142][T25350] bond0 (unregistering): Released all slaves [ 634.306908][T25350] bond1 (unregistering): Released all slaves [ 634.355445][T28114] loop8: detected capacity change from 0 to 512 [ 634.356930][T28115] FAULT_INJECTION: forcing a failure. [ 634.356930][T28115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.397714][T28115] CPU: 1 UID: 0 PID: 28115 Comm: syz.4.6627 Tainted: G W syzkaller #0 PREEMPT(full) [ 634.397753][T28115] Tainted: [W]=WARN [ 634.397761][T28115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.397780][T28115] Call Trace: [ 634.397787][T28115] [ 634.397801][T28115] __dump_stack+0x1d/0x30 [ 634.397829][T28115] dump_stack_lvl+0x95/0xd0 [ 634.397858][T28115] dump_stack+0x15/0x1b [ 634.397900][T28115] should_fail_ex+0x263/0x280 [ 634.397926][T28115] should_fail+0xb/0x20 [ 634.397962][T28115] should_fail_usercopy+0x1a/0x20 [ 634.398014][T28115] _copy_from_user+0x1c/0xb0 [ 634.398124][T28115] snd_seq_ioctl+0x125/0x2f0 [ 634.398183][T28115] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 634.398209][T28115] __se_sys_ioctl+0xce/0x140 [ 634.398242][T28115] __x64_sys_ioctl+0x43/0x50 [ 634.398329][T28115] x64_sys_call+0x1563/0x3020 [ 634.398356][T28115] do_syscall_64+0x12c/0x370 [ 634.398429][T28115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.398453][T28115] RIP: 0033:0x7f42597ec629 [ 634.398471][T28115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.398546][T28115] RSP: 002b:00007f425815d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.398568][T28115] RAX: ffffffffffffffda RBX: 00007f4259a66090 RCX: 00007f42597ec629 [ 634.398650][T28115] RDX: 00002000000000c0 RSI: 00000000c0a85322 RDI: 0000000000000007 [ 634.398664][T28115] RBP: 00007f425815d090 R08: 0000000000000000 R09: 0000000000000000 [ 634.398685][T28115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.398732][T28115] R13: 00007f4259a66128 R14: 00007f4259a66090 R15: 00007fff447917b8 [ 634.398750][T28115] [ 634.609449][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.609889][T28114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.652524][T28053] chnl_net:caif_netlink_parms(): no params data found [ 634.652842][T28114] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.733892][ T28] audit: type=1400 audit(1772046495.501:4383): avc: denied { create } for pid=28135 comm="syz.9.6631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 634.759324][T28114] tmpfs: Bad value for 'nr_inodes' [ 634.778365][T25350] hsr_slave_0: left promiscuous mode [ 634.784164][T25350] hsr_slave_1: left promiscuous mode [ 634.784883][ T28] audit: type=1400 audit(1772046495.510:4384): avc: denied { bind } for pid=28135 comm="syz.9.6631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 634.801981][T25350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.808893][ T28] audit: type=1400 audit(1772046495.510:4385): avc: denied { write } for pid=28135 comm="syz.9.6631" path="socket:[94719]" dev="sockfs" ino=94719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 634.839553][ T28] audit: type=1400 audit(1772046495.529:4386): avc: denied { mounton } for pid=28113 comm="syz.8.6628" path="/164/file0/file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 634.871107][ T28] audit: type=1400 audit(1772046495.557:4387): avc: denied { setattr } for pid=28113 comm="syz.8.6628" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 634.874125][T25350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.931727][ T28] audit: type=1400 audit(1772046495.585:4388): avc: denied { ioctl } for pid=28140 comm="syz.9.6632" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 634.962471][ T28] audit: type=1400 audit(1772046495.688:4389): avc: denied { append } for pid=28150 comm="syz.4.6634" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 635.020625][T25350] team0 (unregistering): Port device team_slave_1 removed [ 635.034004][T25350] team0 (unregistering): Port device team_slave_0 removed [ 635.049642][T28158] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6635'. [ 635.127471][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.164437][T28163] xt_TCPMSS: Only works on TCP SYN packets [ 635.182159][T28053] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.201031][T28053] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.221942][T28053] bridge_slave_0: entered allmulticast mode [ 635.230310][T28053] bridge_slave_0: entered promiscuous mode [ 635.237875][T28053] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.245060][T28053] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.252501][T28053] bridge_slave_1: entered allmulticast mode [ 635.264203][T28053] bridge_slave_1: entered promiscuous mode [ 635.326932][T28053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.347630][T28175] loop7: detected capacity change from 0 to 128 [ 635.359768][T28053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.365143][ T28] audit: type=1400 audit(1772046496.090:4390): avc: denied { shutdown } for pid=28176 comm="syz.8.6643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 635.400070][T28175] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 635.423371][T28053] team0: Port device team_slave_0 added [ 635.440171][T28053] team0: Port device team_slave_1 added [ 635.442613][T28175] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.470019][T28053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.477303][T28053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.503445][T28053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.514657][T28192] netlink: 'syz.8.6645': attribute type 27 has an invalid length. [ 635.534063][T28053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.541397][T28053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.567573][T28053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.608577][T28186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.616911][T28186] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.626351][T28186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 635.682294][T28053] hsr_slave_0: entered promiscuous mode [ 635.695454][T28053] hsr_slave_1: entered promiscuous mode [ 635.702983][T17270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.713294][T28053] debugfs: 'hsr0' already exists in 'hsr' [ 635.719218][T28053] Cannot create hsr debugfs directory [ 636.052841][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6652'. [ 636.061355][T28231] xt_hashlimit: size too large, truncated to 1048576 [ 636.069538][T28236] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6652'. [ 636.090177][T28238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6654'. [ 636.115098][T28242] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6655'. [ 636.145857][T28242] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6655'. [ 636.199222][T28248] loop9: detected capacity change from 0 to 512 [ 636.232396][T28248] EXT4-fs: Ignoring removed nobh option [ 636.265251][T28248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 636.280942][T28053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 636.296526][T28248] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.6657: iget: bad i_size value: 38620345925642 [ 636.317634][T28053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 636.339256][T28248] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 636.339687][T28248] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6657: couldn't read orphan inode 15 (err -117) [ 636.360727][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 636.360746][ C1] EXT4-fs (loop9): initial error at time 1772046497: ext4_orphan_get:1391: inode 15 [ 636.360779][ C1] EXT4-fs (loop9): last error at time 1772046497: ext4_orphan_get:1391: inode 15 [ 636.396258][T28053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 636.424113][T28053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 636.483205][T28248] loop9: lost filesystem error report for type 5 error -117 [ 636.488348][T28248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.515149][T28261] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 636.568574][T28053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.589621][T28053] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.602377][T25353] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.609568][T25353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.641160][T25353] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.648380][T25353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.692197][T28287] ucma_write: process 452 (syz.8.6661) changed security contexts after opening file descriptor, this is not allowed. [ 636.718758][T28248] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.6657: bg 0: block 5: invalid block bitmap [ 636.734717][T28053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.747114][T28248] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 636.762619][T28248] EXT4-fs (loop9): This should not happen!! Data will be lost [ 636.762619][T28248] [ 636.773187][T28248] EXT4-fs (loop9): Total free blocks count 0 [ 636.779411][T28248] EXT4-fs (loop9): Free/Dirty block details [ 636.786839][T28248] EXT4-fs (loop9): free_blocks=0 [ 636.804869][T28248] EXT4-fs (loop9): dirty_blocks=1 [ 636.814745][T28248] EXT4-fs (loop9): Block reservation details [ 636.841046][T28248] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 636.862640][T28300] loop8: detected capacity change from 0 to 512 [ 636.884272][T28300] EXT4-fs: Ignoring removed nobh option [ 636.915912][T28300] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 636.925057][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.945342][T28298] FAULT_INJECTION: forcing a failure. [ 636.945342][T28298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.971605][T28300] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6663: iget: bad i_size value: 38620345925642 [ 636.986548][T28053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.073554][T28298] CPU: 1 UID: 0 PID: 28298 Comm: syz.7.6662 Tainted: G W syzkaller #0 PREEMPT(full) [ 637.073595][T28298] Tainted: [W]=WARN [ 637.073603][T28298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.073616][T28298] Call Trace: [ 637.073625][T28298] [ 637.073663][T28298] __dump_stack+0x1d/0x30 [ 637.073690][T28298] dump_stack_lvl+0x95/0xd0 [ 637.073734][T28298] dump_stack+0x15/0x1b [ 637.073756][T28298] should_fail_ex+0x263/0x280 [ 637.073780][T28298] should_fail+0xb/0x20 [ 637.073800][T28298] should_fail_usercopy+0x1a/0x20 [ 637.073849][T28298] _copy_to_user+0x20/0xa0 [ 637.073875][T28298] bpf_test_finish+0x157/0x510 [ 637.073904][T28298] bpf_prog_test_run_skb+0xc51/0xef0 [ 637.073981][T28298] ? __fget_files+0x184/0x1c0 [ 637.074008][T28298] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 637.074066][T28298] bpf_prog_test_run+0x204/0x340 [ 637.074141][T28298] __sys_bpf+0x52e/0x7e0 [ 637.074206][T28298] __x64_sys_bpf+0x41/0x50 [ 637.074238][T28298] x64_sys_call+0x10cb/0x3020 [ 637.074279][T28298] do_syscall_64+0x12c/0x370 [ 637.074312][T28298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.074335][T28298] RIP: 0033:0x7f78e559c629 [ 637.074354][T28298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.074414][T28298] RSP: 002b:00007f78e3fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.074439][T28298] RAX: ffffffffffffffda RBX: 00007f78e5815fa0 RCX: 00007f78e559c629 [ 637.074454][T28298] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 637.074514][T28298] RBP: 00007f78e3fef090 R08: 0000000000000000 R09: 0000000000000000 [ 637.074526][T28298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.074537][T28298] R13: 00007f78e5816038 R14: 00007f78e5815fa0 R15: 00007ffe6922e1c8 [ 637.074555][T28298] [ 637.086824][T28300] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 637.350792][T28300] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6663: couldn't read orphan inode 15 (err -117) [ 637.359993][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 637.360015][ C0] EXT4-fs (loop8): initial error at time 1772046497: ext4_orphan_get:1391: inode 15 [ 637.360047][ C0] EXT4-fs (loop8): last error at time 1772046497: ext4_orphan_get:1391: inode 15 [ 637.433992][T28300] loop8: lost filesystem error report for type 5 error -117 [ 637.434484][T28300] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.450529][T28053] veth0_vlan: entered promiscuous mode [ 637.467080][T28300] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.6663: path /178/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 637.477191][T28053] veth1_vlan: entered promiscuous mode [ 637.518147][T28053] veth0_macvtap: entered promiscuous mode [ 637.530150][T28053] veth1_macvtap: entered promiscuous mode [ 637.540256][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.553894][T28053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.564095][T28339] FAULT_INJECTION: forcing a failure. [ 637.564095][T28339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.595588][T28344] debugfs: 'ttyS3' already exists in 'caif_serial' [ 637.598980][T28339] CPU: 1 UID: 0 PID: 28339 Comm: syz.4.6666 Tainted: G W syzkaller #0 PREEMPT(full) [ 637.599051][T28339] Tainted: [W]=WARN [ 637.599059][T28339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.599071][T28339] Call Trace: [ 637.599078][T28339] [ 637.599086][T28339] __dump_stack+0x1d/0x30 [ 637.599119][T28339] dump_stack_lvl+0x95/0xd0 [ 637.599179][T28339] dump_stack+0x15/0x1b [ 637.599200][T28339] should_fail_ex+0x263/0x280 [ 637.599273][T28339] should_fail+0xb/0x20 [ 637.599292][T28339] should_fail_usercopy+0x1a/0x20 [ 637.599315][T28339] _copy_to_user+0x20/0xa0 [ 637.599357][T28339] snd_seq_ioctl+0x23f/0x2f0 [ 637.599405][T28339] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 637.599434][T28339] __se_sys_ioctl+0xce/0x140 [ 637.599541][T28339] __x64_sys_ioctl+0x43/0x50 [ 637.599570][T28339] x64_sys_call+0x1563/0x3020 [ 637.599596][T28339] do_syscall_64+0x12c/0x370 [ 637.599703][T28339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.599725][T28339] RIP: 0033:0x7f42597ec629 [ 637.599741][T28339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.599763][T28339] RSP: 002b:00007f425813c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.599824][T28339] RAX: ffffffffffffffda RBX: 00007f4259a66180 RCX: 00007f42597ec629 [ 637.599846][T28339] RDX: 00002000000000c0 RSI: 00000000c0a85322 RDI: 0000000000000007 [ 637.599860][T28339] RBP: 00007f425813c090 R08: 0000000000000000 R09: 0000000000000000 [ 637.599874][T28339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.599888][T28339] R13: 00007f4259a66218 R14: 00007f4259a66180 R15: 00007fff447917b8 [ 637.599908][T28339] [ 637.601789][T28053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.831588][T24012] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.871460][T24012] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.902539][T25349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.935562][T28361] set_capacity_and_notify: 1 callbacks suppressed [ 637.935648][T28361] loop9: detected capacity change from 0 to 164 [ 637.970777][T25349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.174831][T28382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6615'. [ 638.214634][T28381] lo speed is unknown, defaulting to 1000 [ 638.261828][T28389] FAULT_INJECTION: forcing a failure. [ 638.261828][T28389] name failslab, interval 1, probability 0, space 0, times 0 [ 638.305458][T28389] CPU: 1 UID: 0 PID: 28389 Comm: syz.9.6679 Tainted: G W syzkaller #0 PREEMPT(full) [ 638.305491][T28389] Tainted: [W]=WARN [ 638.305498][T28389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.305509][T28389] Call Trace: [ 638.305516][T28389] [ 638.305524][T28389] __dump_stack+0x1d/0x30 [ 638.305551][T28389] dump_stack_lvl+0x95/0xd0 [ 638.305576][T28389] dump_stack+0x15/0x1b [ 638.305599][T28389] should_fail_ex+0x263/0x280 [ 638.305622][T28389] ? rdma_resolve_ip+0x4d/0x4b0 [ 638.305720][T28389] should_failslab+0x8c/0xb0 [ 638.305740][T28389] __kmalloc_cache_noprof+0x5f/0x410 [ 638.305766][T28389] ? __pfx_addr_handler+0x10/0x10 [ 638.305854][T28389] rdma_resolve_ip+0x4d/0x4b0 [ 638.305884][T28389] rdma_resolve_addr+0x544/0x1350 [ 638.305913][T28389] ? _parse_integer_limit+0x170/0x190 [ 638.306003][T28389] ucma_resolve_ip+0x283/0x370 [ 638.306039][T28389] ? __pfx_ucma_resolve_ip+0x10/0x10 [ 638.306082][T28389] ucma_write+0x1c9/0x260 [ 638.306119][T28389] ? __pfx_ucma_write+0x10/0x10 [ 638.306149][T28389] vfs_write+0x269/0x9f0 [ 638.306176][T28389] ? __rcu_read_unlock+0x4e/0x70 [ 638.306248][T28389] ? __fget_files+0x184/0x1c0 [ 638.306275][T28389] ksys_write+0xdc/0x1a0 [ 638.306306][T28389] __x64_sys_write+0x40/0x50 [ 638.306373][T28389] x64_sys_call+0x27e1/0x3020 [ 638.306394][T28389] do_syscall_64+0x12c/0x370 [ 638.306427][T28389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.306476][T28389] RIP: 0033:0x7fa2950ec629 [ 638.306494][T28389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.306513][T28389] RSP: 002b:00007fa293b3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 638.306534][T28389] RAX: ffffffffffffffda RBX: 00007fa295365fa0 RCX: 00007fa2950ec629 [ 638.306550][T28389] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000003 [ 638.306564][T28389] RBP: 00007fa293b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 638.306579][T28389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.306595][T28389] R13: 00007fa295366038 R14: 00007fa295365fa0 R15: 00007ffc4d728d78 [ 638.306616][T28389] [ 638.613937][T28398] loop1: detected capacity change from 0 to 512 [ 638.656989][T28406] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6685'. [ 638.689338][T28398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.708071][T28398] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.732005][T28413] loop9: detected capacity change from 0 to 1024 [ 638.762696][T28414] lo speed is unknown, defaulting to 1000 [ 638.776732][T28053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.795559][T28413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 638.829462][T28413] System zones: 0-1, 3-36 [ 638.842622][T28413] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.927002][ C1] sd 0:0:1:0: [sda] tag#2995 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 638.937400][ C1] sd 0:0:1:0: [sda] tag#2995 CDB: Read(6) 08 00 00 00 00 00 [ 639.011409][T28433] loop1: detected capacity change from 0 to 128 [ 639.019643][T28433] vfat: Unknown parameter '€' [ 639.035116][T28436] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6684: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 639.056052][T28413] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6684: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 639.106238][T28413] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6684: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 639.154353][T28413] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.6684: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 639.211458][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.366806][ T28] audit: type=1326 audit(1772046499.832:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.9.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2950ec629 code=0x7ffc0000 [ 639.447002][ T28] audit: type=1326 audit(1772046499.832:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28470 comm="syz.9.6692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2950ec629 code=0x7ffc0000 [ 639.486056][T28480] lo speed is unknown, defaulting to 1000 [ 639.683740][T28485] loop4: detected capacity change from 0 to 512 [ 639.770550][T28485] EXT4-fs: Ignoring removed nobh option [ 639.828598][T28485] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.860108][T28485] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6697: iget: bad i_size value: 38620345925642 [ 639.883577][T25350] Bluetooth: hci0: Frame reassembly failed (-84) [ 639.890248][T28492] loop1: detected capacity change from 0 to 1024 [ 639.896682][T28485] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 639.898087][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 639.914015][ C1] EXT4-fs (loop4): initial error at time 1772046500: ext4_orphan_get:1391: inode 15 [ 639.923431][ C1] EXT4-fs (loop4): last error at time 1772046500: ext4_orphan_get:1391: inode 15 [ 639.930459][T28485] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6697: couldn't read orphan inode 15 (err -117) [ 639.955351][T28485] loop4: lost filesystem error report for type 5 error -117 [ 639.955985][T28485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.965004][T28492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 639.978771][T28485] FAULT_INJECTION: forcing a failure. [ 639.978771][T28485] name failslab, interval 1, probability 0, space 0, times 0 [ 640.000996][T28485] CPU: 1 UID: 0 PID: 28485 Comm: syz.4.6697 Tainted: G W syzkaller #0 PREEMPT(full) [ 640.001024][T28485] Tainted: [W]=WARN [ 640.001030][T28485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 640.001043][T28485] Call Trace: [ 640.001049][T28485] [ 640.001056][T28485] __dump_stack+0x1d/0x30 [ 640.001137][T28485] dump_stack_lvl+0x95/0xd0 [ 640.001165][T28485] dump_stack+0x15/0x1b [ 640.001186][T28485] should_fail_ex+0x263/0x280 [ 640.001229][T28485] should_failslab+0x8c/0xb0 [ 640.001251][T28485] __kmalloc_noprof+0xb8/0x4e0 [ 640.001269][T28485] ? copy_splice_read+0xc2/0x6c0 [ 640.001298][T28485] copy_splice_read+0xc2/0x6c0 [ 640.001330][T28485] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 640.001519][T28485] splice_direct_to_actor+0x28f/0x670 [ 640.001538][T28485] ? __pfx_direct_splice_actor+0x10/0x10 [ 640.001558][T28485] do_splice_direct+0x119/0x1a0 [ 640.001656][T28485] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 640.001677][T28485] do_sendfile+0x382/0x650 [ 640.001698][T28485] __x64_sys_sendfile64+0x105/0x150 [ 640.001722][T28485] x64_sys_call+0x2dc4/0x3020 [ 640.001775][T28485] do_syscall_64+0x12c/0x370 [ 640.001804][T28485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.001848][T28485] RIP: 0033:0x7f42597ec629 [ 640.001864][T28485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.001884][T28485] RSP: 002b:00007f4258247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 640.001904][T28485] RAX: ffffffffffffffda RBX: 00007f4259a65fa0 RCX: 00007f42597ec629 [ 640.001956][T28485] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000008 [ 640.001968][T28485] RBP: 00007f4258247090 R08: 0000000000000000 R09: 0000000000000000 [ 640.002068][T28485] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 640.002083][T28485] R13: 00007f4259a66038 R14: 00007f4259a65fa0 R15: 00007fff447917b8 [ 640.002102][T28485] [ 640.289520][T28502] loop7: detected capacity change from 0 to 8192 [ 640.310900][T28508] loop8: detected capacity change from 0 to 512 [ 640.324659][T26222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.364770][T28508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 640.400656][T28508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.413630][T28520] ip6tnl1: entered promiscuous mode [ 640.418989][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 640.419004][ T28] audit: type=1400 audit(1772046500.814:4398): avc: denied { create } for pid=28518 comm="syz.4.6704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 640.430761][T28508] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.465180][ T28] audit: type=1400 audit(1772046500.814:4399): avc: denied { write } for pid=28518 comm="syz.4.6704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 640.486742][ T28] audit: type=1400 audit(1772046500.889:4400): avc: denied { getopt } for pid=28507 comm="syz.8.6702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 640.509101][ T28] audit: type=1400 audit(1772046500.917:4401): avc: denied { getopt } for pid=28507 comm="syz.8.6702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 640.550974][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.577276][T28528] loop4: detected capacity change from 0 to 128 [ 640.592656][T28528] EXT4-fs: test_dummy_encryption option not supported [ 640.603420][T28530] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6706'. [ 640.622292][ T28] audit: type=1400 audit(1772046501.011:4402): avc: denied { write } for pid=28529 comm="syz.8.6706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 640.704960][T28544] loop4: detected capacity change from 0 to 164 [ 640.810824][T28552] netlink: 'syz.8.6715': attribute type 27 has an invalid length. [ 640.861001][T28552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.869074][T28552] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.878901][T28552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 641.465648][T28595] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6730'. [ 641.494034][T25327] Bluetooth: hci1: Frame reassembly failed (-84) [ 641.533394][T28603] EXT4-fs: inline encryption not supported [ 641.541282][T28603] EXT4-fs: Ignoring removed nobh option [ 641.548071][T28603] EXT4-fs: Invalid want_extra_isize 3 [ 641.549670][T28593] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.611431][T28613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6737'. [ 641.699735][T28618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.709212][T28618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.056596][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6741'. [ 642.073128][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6741'. [ 642.090229][T24291] Bluetooth: hci0: command 0x1003 tx timeout [ 642.106560][T28625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.115005][T19545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 642.129977][T28625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.561530][T28632] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6744'. [ 642.572684][T28632] netlink: 236 bytes leftover after parsing attributes in process `syz.8.6744'. [ 642.747734][T28053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.826536][T25327] Bluetooth: hci0: Frame reassembly failed (-84) [ 642.871199][T28638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.075668][T28642] EXT4-fs: Ignoring removed i_version option [ 643.117136][T28642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.129833][T28642] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.155960][T28636] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6747'. [ 643.228098][T17270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.569119][T28656] set_capacity_and_notify: 5 callbacks suppressed [ 643.569253][T28656] loop7: detected capacity change from 0 to 1024 [ 643.620767][T28656] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 643.640279][T28656] System zones: 0-1, 3-36 [ 643.657439][T28656] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6752: bad orphan inode 134217728 [ 643.687068][T28656] loop7: lost filesystem error report for type 5 error -117 [ 643.703445][T24291] Bluetooth: hci1: command 0x1003 tx timeout [ 643.703575][ T3562] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 643.733501][T28656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.751482][T28662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6754'. [ 643.825291][T28665] loop8: detected capacity change from 0 to 512 [ 643.843466][T28665] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 643.858254][T28665] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6755: bg 0: block 255: padding at end of block bitmap is not set [ 643.909031][T28665] loop8: lost filesystem error report for type 5 error -117 [ 643.909307][T28665] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 643.925287][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 643.925322][ C0] EXT4-fs (loop8): initial error at time 1772046504: ext4_validate_block_bitmap:441 [ 643.925347][ C0] EXT4-fs (loop8): last error at time 1772046504: ext4_validate_block_bitmap:441 [ 643.956739][T28665] loop8: lost filesystem error report for type 5 error -117 [ 643.956909][T28665] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.6755: invalid indirect mapped block 1 (level 1) [ 643.977569][T28665] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 643.977922][T28665] EXT4-fs (loop8): 1 truncate cleaned up [ 643.993319][T28665] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.329171][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.498993][T17270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.510740][T28676] loop9: detected capacity change from 0 to 256 [ 644.558308][T28678] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 644.580324][T28676] FAT-fs (loop9): Directory bread(block 64) failed [ 644.581819][T28678] loop7: detected capacity change from 0 to 512 [ 644.597738][T28676] FAT-fs (loop9): Directory bread(block 65) failed [ 644.608421][T28678] EXT4-fs (loop7): bad s_min_extra_isize: 2304 [ 644.612192][T28676] FAT-fs (loop9): Directory bread(block 66) failed [ 644.632875][T28676] FAT-fs (loop9): Directory bread(block 67) failed [ 644.655859][T28680] loop7: detected capacity change from 0 to 128 [ 644.662499][T28676] FAT-fs (loop9): Directory bread(block 68) failed [ 644.677910][T28680] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 644.679425][T28676] FAT-fs (loop9): Directory bread(block 69) failed [ 644.696866][T28680] ext4 filesystem being mounted at /563/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.721353][T28680] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.6760: checksumming directory block 0 [ 644.740782][T28676] FAT-fs (loop9): Directory bread(block 70) failed [ 644.751796][T28676] FAT-fs (loop9): Directory bread(block 71) failed [ 644.772372][T28676] FAT-fs (loop9): Directory bread(block 72) failed [ 644.791745][T28676] FAT-fs (loop9): Directory bread(block 73) failed [ 644.799064][T17270] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 644.912422][T25327] bio_check_eod: 36 callbacks suppressed [ 644.912506][T25327] kworker/u8:21: attempt to access beyond end of device [ 644.912506][T25327] loop9: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 644.943619][T25327] kworker/u8:21: attempt to access beyond end of device [ 644.943619][T25327] loop9: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 644.969334][T25327] kworker/u8:21: attempt to access beyond end of device [ 644.969334][T25327] loop9: rw=1, sector=1864, nr_sectors = 64 limit=256 [ 644.986627][T19545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 644.987155][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 645.261587][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.309752][T28697] loop8: detected capacity change from 0 to 512 [ 645.340279][T28697] EXT4-fs: Ignoring removed nobh option [ 645.360366][T28697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 645.392919][T28697] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6766: iget: bad i_size value: 38620345925642 [ 645.409730][T28708] loop9: detected capacity change from 0 to 128 [ 645.418737][T28697] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 645.424358][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 645.429595][T28697] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6766: couldn't read orphan inode 15 (err -117) [ 645.433492][ C1] EXT4-fs (loop8): initial error at time 1772046505: ext4_orphan_get:1391: inode 15 [ 645.461106][ C1] EXT4-fs (loop8): last error at time 1772046505: ext4_orphan_get:1391: inode 15 [ 645.470460][T28697] loop8: lost filesystem error report for type 5 error -117 [ 645.475607][T28708] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.498477][T28697] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.526121][T28697] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.6766: path /206/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 645.527556][T28708] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.575398][T28053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.595721][T28708] EXT4-fs error (device loop9): __ext4_find_entry:1626: inode #2: comm syz.9.6771: checksumming directory block 0 [ 645.621512][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.741956][T26893] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 645.788236][T28726] ipvlan2: entered promiscuous mode [ 645.834709][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6777'. [ 646.095276][T28739] FAULT_INJECTION: forcing a failure. [ 646.095276][T28739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.108874][T28739] CPU: 0 UID: 0 PID: 28739 Comm: syz.1.6782 Tainted: G W syzkaller #0 PREEMPT(full) [ 646.108921][T28739] Tainted: [W]=WARN [ 646.108927][T28739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.108939][T28739] Call Trace: [ 646.108946][T28739] [ 646.108952][T28739] __dump_stack+0x1d/0x30 [ 646.108976][T28739] dump_stack_lvl+0x95/0xd0 [ 646.108998][T28739] dump_stack+0x15/0x1b [ 646.109036][T28739] should_fail_ex+0x263/0x280 [ 646.109060][T28739] should_fail+0xb/0x20 [ 646.109081][T28739] should_fail_usercopy+0x1a/0x20 [ 646.109104][T28739] _copy_to_user+0x20/0xa0 [ 646.109152][T28739] simple_read_from_buffer+0xb5/0x130 [ 646.109171][T28739] proc_fail_nth_read+0x10e/0x150 [ 646.109281][T28739] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 646.109304][T28739] vfs_read+0x1ab/0x7f0 [ 646.109335][T28739] ? __rcu_read_unlock+0x4e/0x70 [ 646.109354][T28739] ? __fget_files+0x184/0x1c0 [ 646.109427][T28739] ? mutex_lock+0x57/0x90 [ 646.109451][T28739] ksys_read+0xdc/0x1a0 [ 646.109506][T28739] __x64_sys_read+0x40/0x50 [ 646.109565][T28739] x64_sys_call+0x2886/0x3020 [ 646.109628][T28739] do_syscall_64+0x12c/0x370 [ 646.109655][T28739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.109708][T28739] RIP: 0033:0x7f881310cece [ 646.109763][T28739] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 646.109783][T28739] RSP: 002b:00007f8811ba6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 646.109806][T28739] RAX: ffffffffffffffda RBX: 00007f8811ba76c0 RCX: 00007f881310cece [ 646.109863][T28739] RDX: 000000000000000f RSI: 00007f8811ba70a0 RDI: 0000000000000004 [ 646.109956][T28739] RBP: 00007f8811ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 646.109970][T28739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.110006][T28739] R13: 00007f88133c6038 R14: 00007f88133c5fa0 R15: 00007fff52990e08 [ 646.110028][T28739] [ 646.333655][T28747] loop9: detected capacity change from 0 to 128 [ 646.350518][T28747] EXT4-fs: Ignoring removed nobh option [ 646.387858][T28747] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 646.414003][T28747] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 646.477632][T28761] netlink: 'syz.4.6790': attribute type 27 has an invalid length. [ 646.489866][T28764] loop1: detected capacity change from 0 to 128 [ 646.538153][T28761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.546203][T28761] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.558327][T26893] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.574242][T28761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 646.594446][T28770] loop7: detected capacity change from 0 to 256 [ 646.613351][ T28] audit: type=1400 audit(1772046506.624:4403): avc: denied { map } for pid=28763 comm="syz.1.6791" path="/dev/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 646.657177][ T28] audit: type=1400 audit(1772046506.624:4404): avc: denied { execute } for pid=28763 comm="syz.1.6791" path="/dev/net/tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 646.695198][T28774] EXT4-fs: inline encryption not supported [ 646.701850][T28774] EXT4-fs: Ignoring removed nobh option [ 646.708161][T28774] EXT4-fs: Ignoring removed bh option [ 646.712302][ T5920] GPT:first_usable_lbas don't match. [ 646.713645][T28774] EXT4-fs: Invalid want_extra_isize 3 [ 646.728591][ T5920] GPT:34 != 290 [ 646.732374][ T5920] GPT: Use GNU Parted to correct GPT errors. [ 646.744522][ T5920] loop4: p1 p2 p3 [ 646.757007][T28772] GPT:first_usable_lbas don't match. [ 646.762506][T28772] GPT:34 != 290 [ 646.783546][T28772] GPT: Use GNU Parted to correct GPT errors. [ 646.797829][T28772] loop4: p1 p2 p3 [ 646.811754][T28780] FAULT_INJECTION: forcing a failure. [ 646.811754][T28780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.825847][T28778] EXT4-fs: Ignoring removed oldalloc option [ 646.832117][T28778] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 646.842309][T28780] CPU: 0 UID: 0 PID: 28780 Comm: syz.7.6798 Tainted: G W syzkaller #0 PREEMPT(full) [ 646.842339][T28780] Tainted: [W]=WARN [ 646.842345][T28780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.842356][T28780] Call Trace: [ 646.842363][T28780] [ 646.842373][T28780] __dump_stack+0x1d/0x30 [ 646.842397][T28780] dump_stack_lvl+0x95/0xd0 [ 646.842416][T28780] dump_stack+0x15/0x1b [ 646.842434][T28780] should_fail_ex+0x263/0x280 [ 646.842502][T28780] should_fail+0xb/0x20 [ 646.842539][T28780] should_fail_usercopy+0x1a/0x20 [ 646.842587][T28780] _copy_from_user+0x1c/0xb0 [ 646.842610][T28780] ___sys_sendmsg+0xc1/0x1e0 [ 646.842632][T28780] ? path_openat+0x1b01/0x2050 [ 646.842677][T28780] __sys_sendmmsg+0x185/0x320 [ 646.842708][T28780] __x64_sys_sendmmsg+0x57/0x70 [ 646.842755][T28780] x64_sys_call+0x27aa/0x3020 [ 646.842802][T28780] do_syscall_64+0x12c/0x370 [ 646.842830][T28780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.842850][T28780] RIP: 0033:0x7f78e559c629 [ 646.842864][T28780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.842900][T28780] RSP: 002b:00007f78e3fef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 646.842918][T28780] RAX: ffffffffffffffda RBX: 00007f78e5815fa0 RCX: 00007f78e559c629 [ 646.842931][T28780] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000003 [ 646.842943][T28780] RBP: 00007f78e3fef090 R08: 0000000000000000 R09: 0000000000000000 [ 646.843005][T28780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.843016][T28780] R13: 00007f78e5816038 R14: 00007f78e5815fa0 R15: 00007ffe6922e1c8 [ 646.843034][T28780] [ 647.050858][T28778] EXT4-fs (loop1): 1 truncate cleaned up [ 647.066247][T28778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.093107][T28778] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28778 comm=syz.1.6797 [ 647.239464][ T6137] udevd[6137]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 647.250662][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 647.264504][T26932] udevd[26932]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 647.269908][ T28] audit: type=1400 audit(1772046507.139:4405): avc: denied { map } for pid=28777 comm="syz.1.6797" path="/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 647.312811][T26932] udevd[26932]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 647.332675][ T6137] udevd[6137]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 647.334629][T28790] syzkaller0: entered promiscuous mode [ 647.348197][T28790] syzkaller0: entered allmulticast mode [ 647.354869][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 647.355397][T28053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.399422][ T28] audit: type=1400 audit(1772046507.354:4406): avc: denied { ioctl } for pid=28789 comm="syz.8.6802" path="socket:[96176]" dev="sockfs" ino=96176 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 647.458172][T28803] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 647.486636][T28803] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6807: bg 0: block 255: padding at end of block bitmap is not set [ 647.521290][T28800] __nla_validate_parse: 1 callbacks suppressed [ 647.521318][T28800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6805'. [ 647.548138][T28803] loop4: lost filesystem error report for type 5 error -117 [ 647.548397][T28803] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 647.555811][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 647.555829][ C1] EXT4-fs (loop4): initial error at time 1772046507: ext4_validate_block_bitmap:441 [ 647.555849][ C1] EXT4-fs (loop4): last error at time 1772046507: ext4_validate_block_bitmap:441 [ 647.556961][T28800] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.585345][T28803] loop4: lost filesystem error report for type 5 error -117 [ 647.591594][T28800] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.598595][T28811] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6808'. [ 647.627157][T28803] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6807: invalid indirect mapped block 1 (level 1) [ 647.641899][T28803] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 647.642459][T28803] EXT4-fs (loop4): 1 truncate cleaned up [ 647.657857][T28803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.714664][T28807] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6808'. [ 647.730494][T28807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28807 comm=syz.7.6808 [ 648.867771][T26222] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.219253][T28895] lo speed is unknown, defaulting to 1000 [ 650.231380][T28897] set_capacity_and_notify: 4 callbacks suppressed [ 650.231398][T28897] loop8: detected capacity change from 0 to 1024 [ 650.284282][T28898] IPv6: NLM_F_CREATE should be specified when creating new route [ 650.301803][T28897] EXT4-fs: Mount option(s) incompatible with ext2 [ 650.382251][T28903] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6822'. [ 650.443855][ T28] audit: type=1400 audit(1772046510.207:4407): avc: denied { append } for pid=28908 comm="syz.7.6825" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 650.476046][T28897] loop8: detected capacity change from 0 to 512 [ 650.501933][T28897] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 650.531911][T28897] EXT4-fs (loop8): 1 truncate cleaned up [ 650.549801][T28897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.596130][T28914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.628244][T28914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.660707][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.873453][T25331] Bluetooth: hci0: Frame reassembly failed (-84) [ 650.894155][T28941] loop1: detected capacity change from 0 to 1024 [ 650.917577][T28941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.931021][ T28] audit: type=1400 audit(1772046510.665:4408): avc: denied { getopt } for pid=28942 comm="syz.9.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 650.963507][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6840'. [ 651.008110][T28964] dummy0: entered promiscuous mode [ 651.014960][ T28] audit: type=1400 audit(1772046510.731:4409): avc: denied { setopt } for pid=28942 comm="syz.9.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 651.043103][T28964] dummy0: entered allmulticast mode [ 651.052866][T28949] lo speed is unknown, defaulting to 1000 [ 651.095601][T28959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6840'. [ 651.208238][T28986] loop7: detected capacity change from 0 to 256 [ 651.247275][T28986] FAT-fs (loop7): Directory bread(block 64) failed [ 651.269673][T28986] FAT-fs (loop7): Directory bread(block 65) failed [ 651.291699][T28986] FAT-fs (loop7): Directory bread(block 66) failed [ 651.305930][T28986] FAT-fs (loop7): Directory bread(block 67) failed [ 651.321266][T28986] FAT-fs (loop7): Directory bread(block 68) failed [ 651.338185][T28986] FAT-fs (loop7): Directory bread(block 69) failed [ 651.353130][T28986] FAT-fs (loop7): Directory bread(block 70) failed [ 651.366604][T28986] FAT-fs (loop7): Directory bread(block 71) failed [ 651.373787][T28986] FAT-fs (loop7): Directory bread(block 72) failed [ 651.380632][T28986] FAT-fs (loop7): Directory bread(block 73) failed [ 651.989049][T29035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.007584][T29035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.131862][T29046] loop9: detected capacity change from 0 to 128 [ 652.142301][T29046] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 652.210543][T29046] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.237668][T26893] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 652.251886][T29055] xt_hashlimit: size too large, truncated to 1048576 [ 652.325070][T29053] loop7: detected capacity change from 0 to 512 [ 652.450231][T29053] EXT4-fs (loop7): 1 orphan inode deleted [ 652.477809][T29053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.564657][T29071] loop9: detected capacity change from 0 to 512 [ 652.661291][T29090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6860'. [ 652.784450][T29071] EXT4-fs (loop9): 1 orphan inode deleted [ 652.805669][T29071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.873426][T29112] loop8: detected capacity change from 0 to 1024 [ 652.904241][T29112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.943406][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.105550][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 653.105598][T19545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 653.582803][T29132] lo speed is unknown, defaulting to 1000 [ 653.893512][T29136] loop4: detected capacity change from 0 to 1024 [ 653.968886][T17270] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.001472][T29136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.102235][T29136] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.6866: Allocating blocks 497-513 which overlap fs metadata [ 654.115324][T29144] netlink: 'syz.8.6869': attribute type 13 has an invalid length. [ 654.118769][T29136] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.6866: Allocating blocks 497-513 which overlap fs metadata [ 654.148864][T29144] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6869'. [ 654.152193][T29135] EXT4-fs (loop4): pa ffff888107c49070: logic 48, phys. 177, len 21 [ 654.165938][T29135] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 654.211151][T29144] syz_tun: refused to change device tx_queue_len [ 654.225075][T29144] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 654.836476][T29178] loop4: detected capacity change from 0 to 128 [ 654.871726][T29178] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.907432][T29182] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6883'. [ 655.010846][T29188] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6885'. [ 655.033711][T29172] EXT4-fs (loop9): 1 orphan inode deleted [ 655.190254][T29194] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.230013][T29194] FAULT_INJECTION: forcing a failure. [ 655.230013][T29194] name failslab, interval 1, probability 0, space 0, times 0 [ 655.255584][T29194] CPU: 1 UID: 0 PID: 29194 Comm: syz.8.6888 Tainted: G W syzkaller #0 PREEMPT(full) [ 655.255689][T29194] Tainted: [W]=WARN [ 655.255696][T29194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.255710][T29194] Call Trace: [ 655.255717][T29194] [ 655.255724][T29194] __dump_stack+0x1d/0x30 [ 655.255753][T29194] dump_stack_lvl+0x95/0xd0 [ 655.255774][T29194] dump_stack+0x15/0x1b [ 655.255824][T29194] should_fail_ex+0x263/0x280 [ 655.255848][T29194] should_failslab+0x8c/0xb0 [ 655.255870][T29194] kmem_cache_alloc_noprof+0x66/0x400 [ 655.255891][T29194] ? do_getname+0x2e/0x1c0 [ 655.255929][T29194] ? __rcu_read_unlock+0x4e/0x70 [ 655.255951][T29194] do_getname+0x2e/0x1c0 [ 655.255975][T29194] getname_flags+0x1d/0x30 [ 655.255997][T29194] do_sys_openat2+0x60/0x130 [ 655.256080][T29194] __x64_sys_creat+0x65/0x90 [ 655.256108][T29194] x64_sys_call+0x2ea0/0x3020 [ 655.256212][T29194] do_syscall_64+0x12c/0x370 [ 655.256247][T29194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.256274][T29194] RIP: 0033:0x7f5b0737c629 [ 655.256292][T29194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.256312][T29194] RSP: 002b:00007f5b05dcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 655.256334][T29194] RAX: ffffffffffffffda RBX: 00007f5b075f5fa0 RCX: 00007f5b0737c629 [ 655.256347][T29194] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000e00 [ 655.256362][T29194] RBP: 00007f5b05dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 655.256376][T29194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.256432][T29194] R13: 00007f5b075f6038 R14: 00007f5b075f5fa0 R15: 00007ffe05f88bb8 [ 655.256453][T29194] [ 655.257939][T29190] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 655.463884][T29190] System zones: 0-1, 3-36 [ 655.505778][T29190] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.6886: bad orphan inode 134217728 [ 655.525201][T29202] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.538904][T29198] EXT4-fs (loop1): 1 orphan inode deleted [ 655.565715][T29190] loop7: lost filesystem error report for type 5 error -117 [ 655.567240][T29202] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.6890: checksumming directory block 0 [ 655.574606][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 655.574627][ C1] EXT4-fs (loop7): initial error at time 1772046770: ext4_orphan_get:1417 [ 655.574663][ C1] EXT4-fs (loop7): last error at time 1772046770: ext4_orphan_get:1417 [ 655.725723][T29207] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6891'. [ 655.756951][T29207] x_tables: duplicate underflow at hook 2 [ 655.917156][T29210] geneve2: entered promiscuous mode [ 655.938303][T25347] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.952318][T25347] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.996738][T29215] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6893'. [ 656.005811][T25347] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.040857][T25347] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.107644][ T28] audit: type=1400 audit(1772046771.502:4410): avc: denied { setopt } for pid=29216 comm="syz.8.6894" lport=45097 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 656.175380][T29228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6897'. [ 656.194040][T29231] set_capacity_and_notify: 5 callbacks suppressed [ 656.194057][T29231] loop9: detected capacity change from 0 to 128 [ 656.210362][T29231] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 656.239669][T29231] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 656.259445][T25347] Bluetooth: hci0: Frame reassembly failed (-84) [ 656.266778][ T28] audit: type=1400 audit(1772046771.623:4411): avc: denied { create } for pid=29233 comm="syz.8.6900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 656.275371][T29237] loop4: detected capacity change from 0 to 1024 [ 656.388550][ T28] audit: type=1400 audit(1772046771.623:4412): avc: denied { connect } for pid=29233 comm="syz.8.6900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 656.409142][ T28] audit: type=1400 audit(1772046771.623:4413): avc: denied { create } for pid=29233 comm="syz.8.6900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 656.434587][ T28] audit: type=1400 audit(1772046771.623:4414): avc: denied { ioctl } for pid=29233 comm="syz.8.6900" path="socket:[97686]" dev="sockfs" ino=97686 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 656.467395][ T28] audit: type=1400 audit(1772046771.623:4415): avc: denied { write } for pid=29233 comm="syz.8.6900" path="socket:[97685]" dev="sockfs" ino=97685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 656.492543][ T28] audit: type=1400 audit(1772046771.623:4416): avc: denied { override_creds } for pid=29233 comm="syz.8.6900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 657.072768][T29271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=29271 comm=syz.7.6912 [ 657.230626][T29278] loop9: detected capacity change from 0 to 128 [ 657.263645][T29283] loop8: detected capacity change from 0 to 4096 [ 657.282848][T29278] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 657.379436][T29294] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6914'. [ 657.429976][T29278] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.6914: No space for directory leaf checksum. Please run e2fsck -D. [ 657.482162][T29278] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.6914: Directory block failed checksum [ 657.502704][T29300] syzkaller1: entered promiscuous mode [ 657.514232][T29300] syzkaller1: entered allmulticast mode [ 657.561488][T29288] lo speed is unknown, defaulting to 1000 [ 657.571826][T29304] loop9: detected capacity change from 0 to 1024 [ 657.586534][T29304] EXT4-fs: inline encryption not supported [ 657.603221][T29304] EXT4-fs: Ignoring removed nobh option [ 657.617348][T29304] EXT4-fs: Ignoring removed bh option [ 657.623136][T29304] EXT4-fs: Invalid want_extra_isize 3 [ 657.628997][T29308] C: renamed from team_slave_0 [ 657.641559][T29308] netlink: 'syz.8.6922': attribute type 3 has an invalid length. [ 657.649399][T29308] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6922'. [ 657.672300][T29308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 657.724013][T29313] loop8: detected capacity change from 0 to 1024 [ 657.730726][T29311] 9p: Bad value for 'rfdno' [ 657.849750][T29313] EXT4-fs: inline encryption not supported [ 657.855718][T29313] EXT4-fs: Ignoring removed nobh option [ 657.866277][T29313] EXT4-fs: dax option not supported [ 657.867699][T29288] chnl_net:caif_netlink_parms(): no params data found [ 657.939034][T25347] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 658.051743][T25347] gretap0 (unregistering): left promiscuous mode [ 658.160951][T29324] loop1: detected capacity change from 0 to 128 [ 658.223989][T25347] bond0 (unregistering): left promiscuous mode [ 658.249103][T29324] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.289370][T25347] bond0 (unregistering): Released all slaves [ 658.322904][T29324] FAULT_INJECTION: forcing a failure. [ 658.322904][T29324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.345465][T25347] bond1 (unregistering): Released all slaves [ 658.357191][T29324] CPU: 1 UID: 0 PID: 29324 Comm: syz.1.6925 Tainted: G W syzkaller #0 PREEMPT(full) [ 658.357222][T29324] Tainted: [W]=WARN [ 658.357230][T29324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.357243][T29324] Call Trace: [ 658.357250][T29324] [ 658.357274][T29324] __dump_stack+0x1d/0x30 [ 658.357314][T29324] dump_stack_lvl+0x95/0xd0 [ 658.357337][T29324] dump_stack+0x15/0x1b [ 658.357368][T29324] should_fail_ex+0x263/0x280 [ 658.357462][T29324] should_fail+0xb/0x20 [ 658.357472][T29324] should_fail_usercopy+0x1a/0x20 [ 658.357486][T29324] strncpy_from_user+0x27/0x250 [ 658.357502][T29324] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 658.357526][T29324] do_getname+0x59/0x1c0 [ 658.357538][T29324] getname_flags+0x1d/0x30 [ 658.357550][T29324] do_sys_openat2+0x60/0x130 [ 658.357565][T29324] __x64_sys_creat+0x65/0x90 [ 658.357588][T29324] x64_sys_call+0x2ea0/0x3020 [ 658.357603][T29324] do_syscall_64+0x12c/0x370 [ 658.357628][T29324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.357645][T29324] RIP: 0033:0x7f881314c629 [ 658.357656][T29324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.357669][T29324] RSP: 002b:00007f8811ba7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 658.357682][T29324] RAX: ffffffffffffffda RBX: 00007f88133c5fa0 RCX: 00007f881314c629 [ 658.357771][T29324] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000200000000e00 [ 658.357778][T29324] RBP: 00007f8811ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 658.357786][T29324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.357794][T29324] R13: 00007f88133c6038 R14: 00007f88133c5fa0 R15: 00007fff52990e08 [ 658.357867][T29324] [ 658.360570][T25347] bond2 (unregistering): Released all slaves [ 658.422933][T19545] Bluetooth: hci0: command 0x1003 tx timeout [ 658.433244][T25347] bond3 (unregistering): Released all slaves [ 658.435980][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 658.567719][T29335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.574843][T25343] bond0: (slave bond_slave_0): interface is now down [ 658.581737][T25343] bond0: (slave bond_slave_1): interface is now down [ 658.590709][T25344] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 658.603705][T25344] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 658.641481][T29347] loop8: detected capacity change from 0 to 128 [ 658.652364][T29345] loop1: detected capacity change from 0 to 1024 [ 658.659763][T25344] bond0: now running without any active interface! [ 658.667230][T25347] tipc: Disabling bearer [ 658.673238][T25345] Bluetooth: hci0: Frame reassembly failed (-84) [ 658.684507][T29350] loop9: detected capacity change from 0 to 512 [ 658.691295][T29350] EXT4-fs: Ignoring removed nobh option [ 658.692488][T29347] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.697187][T25347] tipc: Left network mode [ 658.712375][T29350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 658.756054][T29347] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.6929: checksumming directory block 0 [ 658.756410][T29350] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.6930: iget: bad i_size value: 38620345925642 [ 658.794603][T29350] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 658.795652][T29350] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6930: couldn't read orphan inode 15 (err -117) [ 658.797164][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 658.816644][T29350] loop9: lost filesystem error report for type 5 error -117 [ 658.823086][ C0] EXT4-fs (loop9): initial error at time 1772046774: ext4_orphan_get:1391: inode 15 [ 658.839776][ C0] EXT4-fs (loop9): last error at time 1772046774: ext4_orphan_get:1396 [ 658.855243][T29350] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.9.6930: path /106/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 658.880668][T29358] EXT4-fs: Ignoring removed nobh option [ 658.890941][T29358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 658.901238][T29358] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.6931: iget: bad i_size value: 38620345925642 [ 658.913998][T29358] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 658.914182][T29358] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.6931: couldn't read orphan inode 15 (err -117) [ 658.923404][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 658.923452][ C0] EXT4-fs (loop8): initial error at time 1772046774: ext4_orphan_get:1391: inode 15 [ 658.923490][ C0] EXT4-fs (loop8): last error at time 1772046774: ext4_orphan_get:1391: inode 15 [ 658.928758][T29288] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.967359][T29358] loop8: lost filesystem error report for type 5 error -117 [ 658.974049][T29358] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.8.6931: path /245/file1/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 658.979583][T29288] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.011451][T29288] bridge_slave_0: entered allmulticast mode [ 659.018442][T29288] bridge_slave_0: entered promiscuous mode [ 659.031128][T29288] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.038802][T29288] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.046607][T29288] bridge_slave_1: entered allmulticast mode [ 659.055058][T29288] bridge_slave_1: entered promiscuous mode [ 659.309622][T29288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.355239][T29288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.386040][T29288] team0: Port device team_slave_0 added [ 659.394620][T29288] team0: Port device team_slave_1 added [ 659.407252][T25347] IPVS: stop unused estimator thread 0... [ 659.443205][T29288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.478915][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.536494][T29288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.579584][T29288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.616223][T29288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.648169][T29288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.687457][T29288] hsr_slave_0: entered promiscuous mode [ 659.693511][T29288] hsr_slave_1: entered promiscuous mode [ 659.699752][T29288] debugfs: 'hsr0' already exists in 'hsr' [ 659.705488][T29288] Cannot create hsr debugfs directory [ 659.872960][T29397] 9p: Bad value for 'rfdno' [ 660.323812][T29419] lo speed is unknown, defaulting to 1000 [ 660.521980][T29429] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 660.580938][T29288] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 660.600492][T29288] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 660.621870][T29288] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 660.633314][T26222] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 660.647435][T26222] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 660.662321][T29288] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 660.711335][T25347] Bluetooth: hci1: Frame reassembly failed (-84) [ 660.719891][ T28] audit: type=1400 audit(1772046775.814:4417): avc: denied { checkpoint_restore } for pid=29406 comm="syz.9.6940" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 660.748034][ T28] audit: type=1400 audit(1772046775.814:4418): avc: denied { setattr } for pid=29406 comm="syz.9.6940" name="TIPC" dev="sockfs" ino=98990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 660.807526][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 660.820741][T29463] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 660.846521][T29288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.874604][T25347] Bluetooth: hci0: Frame reassembly failed (-84) [ 660.875593][T29288] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.891829][T25347] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.898958][T25347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.917523][T25347] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.924638][T25347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.049726][T29288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.133181][T25344] bridge_slave_1: left allmulticast mode [ 661.149378][T25344] bridge_slave_1: left promiscuous mode [ 661.156638][T25344] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.164956][T25344] bridge_slave_0: left allmulticast mode [ 661.170687][T25344] bridge_slave_0: left promiscuous mode [ 661.176369][T25344] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.236402][T25344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.245814][T25344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.254728][T25344] bond0 (unregistering): Released all slaves [ 661.261989][T25344] bond1 (unregistering): Released all slaves [ 661.304898][T29490] lo speed is unknown, defaulting to 1000 [ 661.328658][T25344] hsr_slave_0: left promiscuous mode [ 661.335351][T25344] hsr_slave_1: left promiscuous mode [ 661.341045][T25344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.349613][T25344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.414318][T25344] team0 (unregistering): Port device team_slave_1 removed [ 661.428561][T25344] team0 (unregistering): Port device team_slave_0 removed [ 661.520022][T29288] veth0_vlan: entered promiscuous mode [ 661.537865][T29288] veth1_vlan: entered promiscuous mode [ 661.569114][T29288] veth0_macvtap: entered promiscuous mode [ 661.581823][T29288] veth1_macvtap: entered promiscuous mode [ 661.591321][T29490] chnl_net:caif_netlink_parms(): no params data found [ 661.608209][T29288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.636743][T29288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.684261][T25349] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.709898][T25349] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.728267][T29490] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.737176][T29490] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.744367][T29490] bridge_slave_0: entered allmulticast mode [ 661.754501][T29490] bridge_slave_0: entered promiscuous mode [ 661.784070][T25349] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.891677][T25349] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.904990][T29490] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.919152][T29490] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.933598][T29490] bridge_slave_1: entered allmulticast mode [ 661.945996][T29490] bridge_slave_1: entered promiscuous mode [ 662.038617][T29490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.049627][T29490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.070478][T29490] team0: Port device team_slave_0 added [ 662.081306][T29490] team0: Port device team_slave_1 added [ 662.131618][T29490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.147034][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.173739][T29490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.184813][T29579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6952'. [ 662.194018][T29579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6952'. [ 662.204213][T29490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.218296][T29490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.252197][T29490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.291781][T29490] hsr_slave_0: entered promiscuous mode [ 662.298102][T29490] hsr_slave_1: entered promiscuous mode [ 662.376123][T29586] set_capacity_and_notify: 4 callbacks suppressed [ 662.376159][T29586] loop7: detected capacity change from 0 to 512 [ 662.433249][T29490] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.520546][T29490] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.542321][T29595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6954'. [ 662.551119][T29586] EXT4-fs (loop7): 1 orphan inode deleted [ 662.612825][T29595] lo speed is unknown, defaulting to 1000 [ 662.649002][T29586] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 662.660492][T29490] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.758655][T29490] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.800684][T29612] 9p: Bad value for 'rfdno' [ 662.848552][T29490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 662.857663][T29490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 662.864937][T19545] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 662.876994][T29490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 662.886331][T29490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 662.972082][T29490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.991639][T29621] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6956'. [ 663.017869][T29621] macvlan2: entered promiscuous mode [ 663.023727][T29621] macvlan2: entered allmulticast mode [ 663.029182][T29621] veth0_virt_wifi: entered allmulticast mode [ 663.035972][T24291] Bluetooth: hci0: command 0x1003 tx timeout [ 663.062724][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 663.077455][T29490] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.095462][T29626] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.138449][T29626] bridge_slave_1: left allmulticast mode [ 663.138494][T29626] bridge_slave_1: left promiscuous mode [ 663.138890][T29626] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.150286][T29626] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 663.175431][T25344] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.175565][T25344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.194815][T25344] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.194848][T25344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.415263][T29490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.418171][T29629] loop1: detected capacity change from 0 to 1024 [ 663.441084][T29629] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 663.441173][T29629] System zones: 0-1, 3-36 [ 663.442739][T29629] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.6957: bad orphan inode 134217728 [ 663.442767][T29629] loop1: lost filesystem error report for type 5 error -117 [ 663.500383][T29490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.670380][T29490] veth0_vlan: entered promiscuous mode [ 663.684778][T29490] veth1_vlan: entered promiscuous mode [ 663.749997][T29490] veth0_macvtap: entered promiscuous mode [ 663.757300][T29490] veth1_macvtap: entered promiscuous mode [ 663.768111][T29490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 663.777113][T29490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.846766][T25343] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.909679][T25343] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.928709][T25344] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.020637][T25344] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.565906][T29676] loop9: detected capacity change from 0 to 128 [ 664.602203][T29676] loop9: detected capacity change from 0 to 1024 [ 664.609667][T29676] EXT4-fs: Ignoring removed bh option [ 664.624731][T29676] EXT4-fs mount: 39 callbacks suppressed [ 664.624747][T29676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.645459][T29676] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.662377][T29682] loop8: detected capacity change from 0 to 1024 [ 664.739278][T29687] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6973'. [ 664.748358][ T28] audit: type=1400 audit(1772046779.574:4419): avc: denied { read } for pid=29675 comm="syz.9.6970" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 664.792371][ T28] audit: type=1400 audit(1772046779.574:4420): avc: denied { open } for pid=29675 comm="syz.9.6970" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 664.879019][T29698] loop8: detected capacity change from 0 to 256 [ 664.894466][ T28] audit: type=1400 audit(1772046779.687:4421): avc: denied { ioctl } for pid=29675 comm="syz.9.6970" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 665.083043][T29701] loop7: detected capacity change from 0 to 512 [ 665.098928][T29714] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.6983'. [ 665.228404][T29701] EXT4-fs (loop7): 1 orphan inode deleted [ 665.260734][T29701] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.290015][T29725] batadv0: entered promiscuous mode [ 665.306092][T29725] vlan2: entered promiscuous mode [ 665.327456][T29727] loop3: detected capacity change from 0 to 1024 [ 665.344860][T29732] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.6991'. [ 665.392169][T29727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 665.403161][T29727] System zones: 0-1, 3-36 [ 665.423756][T29727] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6989: bad orphan inode 134217728 [ 665.439752][T29727] loop3: lost filesystem error report for type 5 error -117 [ 665.455398][T29738] loop8: detected capacity change from 0 to 128 [ 665.495399][T29738] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 665.517982][T29727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.541856][T29738] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.621879][T29745] loop1: detected capacity change from 0 to 256 [ 665.690569][T29738] lo speed is unknown, defaulting to 1000 [ 665.700307][T29743] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.976656][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.127242][T25647] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 666.217664][T29490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.259721][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.334563][T25343] Bluetooth: hci0: Frame reassembly failed (-84) [ 666.430565][T29781] 9p: Bad value for 'rfdno' [ 666.495355][T29775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.530433][T25344] Bluetooth: hci1: Frame reassembly failed (-84) [ 666.538018][T29783] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.824106][T29808] EXT4-fs (loop8): 1 orphan inode deleted [ 666.883849][T29808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.040715][ T28] audit: type=1400 audit(1772046781.660:4422): avc: denied { getopt } for pid=29804 comm="syz.8.7015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 667.619876][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.743398][T29818] set_capacity_and_notify: 6 callbacks suppressed [ 667.743430][T29818] loop8: detected capacity change from 0 to 2048 [ 667.798777][ T5920] loop8: p1 < > p2 p3 p4 [ 667.803137][ T5920] loop8: partition table partially beyond EOD, truncated [ 667.810338][ T5920] loop8: p1 start 4096 is beyond EOD, truncated [ 667.816596][ T5920] loop8: p2 start 4294508544 is beyond EOD, truncated [ 667.823433][ T5920] loop8: p3 size 134217728 extends beyond EOD, truncated [ 667.836447][T29818] loop8: p1 < > p2 p3 p4 [ 667.840800][T29818] loop8: partition table partially beyond EOD, truncated [ 667.848121][T29818] loop8: p1 start 4096 is beyond EOD, truncated [ 667.856212][T29818] loop8: p2 start 4294508544 is beyond EOD, truncated [ 667.863000][T29818] loop8: p3 size 134217728 extends beyond EOD, truncated [ 667.890564][ T2999] loop8: p1 < > p2 p3 p4 [ 667.902446][ T2999] loop8: partition table partially beyond EOD, truncated [ 667.914104][ T2999] loop8: p1 start 4096 is beyond EOD, truncated [ 667.926402][ T2999] loop8: p2 start 4294508544 is beyond EOD, truncated [ 667.933651][ T2999] loop8: p3 size 134217728 extends beyond EOD, truncated [ 667.968657][ T6137] udevd[6137]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 667.986322][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 668.005262][ T6137] udevd[6137]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 668.016456][ T5920] udevd[5920]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 668.082453][T29842] 9p: Bad value for 'rfdno' [ 668.116377][T25349] Bluetooth: hci3: Frame reassembly failed (-84) [ 668.123957][T29845] loop8: detected capacity change from 0 to 1024 [ 668.162773][T29845] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.514903][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 668.675308][T29846] Bluetooth: hci1: command 0x1003 tx timeout [ 668.675453][T24291] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 669.085206][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.242272][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.273114][T29874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.292427][T29874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.307644][T29876] 9p: Bad value for 'rfdno' [ 669.420364][ T28] audit: type=1400 audit(1772046783.952:4423): avc: denied { write } for pid=29879 comm="syz.3.7042" path="socket:[100191]" dev="sockfs" ino=100191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 669.615997][T19545] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 669.616542][T24291] Bluetooth: hci2: command 0x1003 tx timeout [ 669.710257][T29889] loop1: detected capacity change from 0 to 256 [ 669.991793][T29896] batadv0: entered promiscuous mode [ 669.997063][T29896] vlan2: entered promiscuous mode [ 670.163608][T25347] Bluetooth: hci0: Frame reassembly failed (-84) [ 670.172637][T29902] loop3: detected capacity change from 0 to 1024 [ 670.226523][T29902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.295624][T29898] lo speed is unknown, defaulting to 1000 [ 670.301936][T24291] Bluetooth: hci3: command 0x1003 tx timeout [ 670.308930][T29816] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 670.738275][T29923] lo speed is unknown, defaulting to 1000 [ 670.883060][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.964375][T29930] loop8: detected capacity change from 0 to 256 [ 671.025034][T29928] loop9: detected capacity change from 0 to 512 [ 671.054583][T29928] EXT4-fs (loop9): 1 orphan inode deleted [ 671.063980][T29928] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.182245][T29936] loop7: detected capacity change from 0 to 512 [ 671.187545][ T28] audit: type=1400 audit(1772046785.608:4424): avc: denied { nlmsg_read } for pid=29933 comm="syz.7.7061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 671.215151][T29934] 9p: Bad value for 'rfdno' [ 671.218365][T29936] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 671.251512][T29936] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7061: bad orphan inode 131083 [ 671.276891][T29936] loop7: lost filesystem error report for type 5 error -117 [ 671.277773][T29936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 671.337288][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.404032][T25347] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.460894][T25347] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.515311][T29939] lo speed is unknown, defaulting to 1000 [ 671.538811][T25347] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.595756][T29953] lo speed is unknown, defaulting to 1000 [ 671.667393][T25347] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.839009][T29939] chnl_net:caif_netlink_parms(): no params data found [ 671.879797][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.898739][T25347] bridge_slave_1: left allmulticast mode [ 671.911333][T25347] bridge_slave_1: left promiscuous mode [ 671.918440][T25347] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.010834][T25347] bridge_slave_0: left allmulticast mode [ 672.024386][T25347] bridge_slave_0: left promiscuous mode [ 672.040053][T25347] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.216259][T25347] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.226565][T25347] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.236619][T25347] bond0 (unregistering): Released all slaves [ 672.332854][T25347] hsr_slave_0: left promiscuous mode [ 672.342624][T25347] hsr_slave_1: left promiscuous mode [ 672.348570][T25347] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.357383][T19545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 672.363537][T29816] Bluetooth: hci0: command 0x1003 tx timeout [ 672.380504][T25347] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.390041][T25347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.398203][T25347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.416246][T25347] veth1_macvtap: left promiscuous mode [ 672.426944][T25347] veth0_macvtap: left promiscuous mode [ 672.437166][T25347] veth1_vlan: left promiscuous mode [ 672.442683][T25347] veth0_vlan: left promiscuous mode [ 672.454700][T29984] loop8: detected capacity change from 0 to 1024 [ 672.470409][T29984] EXT4-fs: Ignoring removed bh option [ 672.495647][T29988] loop9: detected capacity change from 0 to 256 [ 672.508954][T29984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.536071][T29984] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.7070: Allocating blocks 497-513 which overlap fs metadata [ 672.571561][T25347] team0 (unregistering): Port device team_slave_1 removed [ 672.581295][T25347] team0 (unregistering): Port device team_slave_0 removed [ 672.608733][ T28] audit: type=1400 audit(1772046786.936:4425): avc: denied { watch } for pid=29983 comm="syz.8.7070" path="/283/file1" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 672.635513][T29993] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4222: comm syz.8.7070: Allocating blocks 497-513 which overlap fs metadata [ 672.652504][T29993] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5037: inode #15: block 64: len 64: ext4_ext_map_blocks returned -117 [ 672.695508][T25647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.706393][T29939] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.713543][T29939] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.744441][T29939] bridge_slave_0: entered allmulticast mode [ 672.768400][T29939] bridge_slave_0: entered promiscuous mode [ 672.799557][T29939] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.818655][T29939] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.833408][T29939] bridge_slave_1: entered allmulticast mode [ 672.843010][T29939] bridge_slave_1: entered promiscuous mode [ 672.883822][T30005] netlink: 'syz.7.7075': attribute type 27 has an invalid length. [ 672.901154][T30002] xt_hashlimit: size too large, truncated to 1048576 [ 672.911646][T29939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.962744][T29490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.015918][T30005] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.023139][T30005] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.147953][T30005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.170735][T30005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.274786][T30008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.301252][T30008] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.311884][T30008] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 673.353198][T29939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.398287][T25345] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.411830][T25345] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.436712][T25349] Bluetooth: hci0: Frame reassembly failed (-84) [ 673.463237][T30028] loop7: detected capacity change from 0 to 1024 [ 673.486314][T25345] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.504948][T25345] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.527090][T30028] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.544829][T29939] team0: Port device team_slave_0 added [ 673.551880][T30033] 9p: Bad value for 'rfdno' [ 673.559159][T29939] team0: Port device team_slave_1 added [ 673.604416][T29939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.611633][T29939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.639021][T29939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.650362][T29939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.661963][T29939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.705577][T29939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.806555][T30048] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7081'. [ 673.831529][T30052] loop8: detected capacity change from 0 to 256 [ 673.854150][T29939] hsr_slave_0: entered promiscuous mode [ 673.862529][T29939] hsr_slave_1: entered promiscuous mode [ 673.868459][T29939] debugfs: 'hsr0' already exists in 'hsr' [ 673.883555][T29939] Cannot create hsr debugfs directory [ 673.897085][T30048] bond2: entered promiscuous mode [ 673.902399][T30048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.926641][T30048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 673.933752][T30048] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 673.945901][T30048] bond2: (slave sit1): Error -95 calling set_mac_address [ 674.105029][T30067] lo speed is unknown, defaulting to 1000 [ 674.254806][T30075] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.331214][T30075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.351399][T30075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.420418][T29625] lo speed is unknown, defaulting to 1000 [ 674.448288][T29625] syz2: Port: 1 Link DOWN [ 674.475947][T24012] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.499525][T24012] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.528529][T24012] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.560416][T25344] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.569428][T30087] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7087'. [ 674.590556][T30087] bond0: entered promiscuous mode [ 674.595655][T30087] bond_slave_0: entered promiscuous mode [ 674.621089][T30087] bond_slave_1: entered promiscuous mode [ 674.642186][T30087] bond0: left promiscuous mode [ 674.649292][T30087] bond_slave_0: left promiscuous mode [ 674.655142][T30087] bond_slave_1: left promiscuous mode [ 674.749827][T30111] loop9: detected capacity change from 0 to 256 [ 674.825504][T30125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7095'. [ 674.829720][T29939] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 674.851321][T29939] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 674.863583][T29939] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 674.882450][T29939] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 675.129889][T29939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.148503][T29939] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.159772][T25346] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.166895][T25346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.198885][T29939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.209444][T29939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.272621][T25346] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.279734][T25346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.306604][T30166] loop9: detected capacity change from 0 to 2048 [ 675.392636][T30181] 9p: Bad value for 'rfdno' [ 675.422214][T30182] loop3: detected capacity change from 0 to 512 [ 675.428760][T29939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.550428][T30198] netlink: 112 bytes leftover after parsing attributes in process `syz.9.7104'. [ 675.603732][T19545] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 675.609833][T29816] Bluetooth: hci0: command 0x1003 tx timeout [ 675.619554][T29939] veth0_vlan: entered promiscuous mode [ 675.639757][T29939] veth1_vlan: entered promiscuous mode [ 675.686869][T29939] veth0_macvtap: entered promiscuous mode [ 675.710374][T29939] veth1_macvtap: entered promiscuous mode [ 675.730841][T29939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 675.750631][T29939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.768361][T25346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.789496][T25346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.799951][T25346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.815050][T25346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.006232][T30248] loop0: detected capacity change from 0 to 512 [ 676.021651][T30248] EXT4-fs: Ignoring removed nobh option [ 676.047556][T30248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 676.074558][T30248] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.7109: iget: bad i_size value: 38620345925642 [ 676.108092][T30248] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 676.108317][T30248] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7109: couldn't read orphan inode 15 (err -117) [ 676.117611][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 676.117632][ C0] EXT4-fs (loop0): initial error at time 1772046790: ext4_orphan_get:1391: inode 15 [ 676.117665][ C0] EXT4-fs (loop0): last error at time 1772046790: ext4_orphan_get:1391: inode 15 [ 676.180882][T30242] loop9: detected capacity change from 0 to 512 [ 676.214399][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.353084][T30248] loop0: lost filesystem error report for type 5 error -117 [ 676.353790][T30248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.403427][T30242] EXT4-fs (loop9): 1 orphan inode deleted [ 676.422359][T30242] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.443610][ T28] audit: type=1400 audit(1772046790.509:4426): avc: denied { block_suspend } for pid=30267 comm="syz.3.7111" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 676.612074][T30290] loop7: detected capacity change from 0 to 1024 [ 676.662759][T30290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.698591][T30268] loop3: detected capacity change from 0 to 8192 [ 676.714183][ T28] audit: type=1400 audit(1772046790.771:4427): avc: denied { read } for pid=30279 comm="syz.7.7113" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 676.727003][T30268] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 676.821718][T30299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30299 comm=syz.8.7114 [ 676.835825][T30299] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7114'. [ 676.845526][T30299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=30299 comm=syz.8.7114 [ 676.873995][T29939] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.079384][T30327] support for cryptoloop has been removed. Use dm-crypt instead. [ 677.174348][T30341] 9p: Bad value for 'rfdno' [ 677.185969][T30340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30340 comm=syz.3.7123 [ 677.335436][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.349007][T30364] netlink: 'syz.3.7125': attribute type 39 has an invalid length. [ 677.370206][T30370] FAULT_INJECTION: forcing a failure. [ 677.370206][T30370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.385532][T30370] CPU: 1 UID: 0 PID: 30370 Comm: syz.9.7126 Tainted: G W syzkaller #0 PREEMPT(full) [ 677.385565][T30370] Tainted: [W]=WARN [ 677.385609][T30370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.385623][T30370] Call Trace: [ 677.385630][T30370] [ 677.385639][T30370] __dump_stack+0x1d/0x30 [ 677.385673][T30370] dump_stack_lvl+0x95/0xd0 [ 677.385692][T30370] dump_stack+0x15/0x1b [ 677.385775][T30370] should_fail_ex+0x263/0x280 [ 677.385794][T30370] should_fail+0xb/0x20 [ 677.385813][T30370] should_fail_usercopy+0x1a/0x20 [ 677.385883][T30370] _copy_to_user+0x20/0xa0 [ 677.385904][T30370] simple_read_from_buffer+0xb5/0x130 [ 677.386059][T30370] proc_fail_nth_read+0x10e/0x150 [ 677.386089][T30370] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 677.386126][T30370] vfs_read+0x1ab/0x7f0 [ 677.386154][T30370] ? __rcu_read_unlock+0x4e/0x70 [ 677.386172][T30370] ? __fget_files+0x184/0x1c0 [ 677.386231][T30370] ? mutex_lock+0x57/0x90 [ 677.386329][T30370] ksys_read+0xdc/0x1a0 [ 677.386361][T30370] __x64_sys_read+0x40/0x50 [ 677.386473][T30370] x64_sys_call+0x2886/0x3020 [ 677.386499][T30370] do_syscall_64+0x12c/0x370 [ 677.386530][T30370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.386632][T30370] RIP: 0033:0x7fa2950acece [ 677.386649][T30370] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 677.386669][T30370] RSP: 002b:00007fa293b3efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 677.386691][T30370] RAX: ffffffffffffffda RBX: 00007fa293b3f6c0 RCX: 00007fa2950acece [ 677.386707][T30370] RDX: 000000000000000f RSI: 00007fa293b3f0a0 RDI: 0000000000000003 [ 677.386847][T30370] RBP: 00007fa293b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 677.386859][T30370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.386911][T30370] R13: 00007fa295366038 R14: 00007fa295365fa0 R15: 00007ffc4d728d78 [ 677.386928][T30370] [ 677.627689][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.693382][T30388] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7127'. [ 677.701448][T30389] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7129'. [ 677.823107][T30406] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7134'. [ 678.044009][T30431] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7138'. [ 678.203115][T30431] tmpfs: Too small a size for current use [ 678.404958][T30457] netlink: 64 bytes leftover after parsing attributes in process `syz.8.7143'. [ 678.539446][T30467] macvtap0: entered promiscuous mode [ 678.557311][T30467] bond0: entered promiscuous mode [ 678.578797][T30467] bond_slave_0: entered promiscuous mode [ 678.595389][T30467] bond_slave_1: entered promiscuous mode [ 678.632337][T30467] macvtap0: entered allmulticast mode [ 678.651462][T30467] bond0: entered allmulticast mode [ 678.660196][T30467] bond_slave_0: entered allmulticast mode [ 678.672714][T30467] bond_slave_1: entered allmulticast mode [ 678.679696][T30467] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 678.694970][T30467] bond0: left allmulticast mode [ 678.699924][T30467] bond_slave_0: left allmulticast mode [ 678.705505][T30467] bond_slave_1: left allmulticast mode [ 678.711107][T30467] bond0: left promiscuous mode [ 678.716158][T30467] bond_slave_0: left promiscuous mode [ 678.721614][T30467] bond_slave_1: left promiscuous mode [ 678.891447][T30497] loop3: detected capacity change from 0 to 512 [ 678.906720][T30497] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 679.024789][ T28] audit: type=1400 audit(1772046792.913:4428): avc: denied { ioctl } for pid=30494 comm="syz.8.7151" path="socket:[103331]" dev="sockfs" ino=103331 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.056156][ T28] audit: type=1400 audit(1772046792.913:4429): avc: denied { connect } for pid=30494 comm="syz.8.7151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.076872][ T28] audit: type=1400 audit(1772046792.913:4430): avc: denied { write } for pid=30494 comm="syz.8.7151" path="socket:[103331]" dev="sockfs" ino=103331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 679.084390][T30497] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7152: bg 0: block 255: padding at end of block bitmap is not set [ 679.126973][T30497] loop3: lost filesystem error report for type 5 error -117 [ 679.127223][T30497] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 679.134589][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 679.134613][ C1] EXT4-fs (loop3): initial error at time 1772046793: ext4_validate_block_bitmap:441 [ 679.134641][ C1] EXT4-fs (loop3): last error at time 1772046793: ext4_validate_block_bitmap:441 [ 679.168499][T30497] loop3: lost filesystem error report for type 5 error -117 [ 679.168756][T30497] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7152: invalid indirect mapped block 1 (level 1) [ 679.189335][T30497] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 679.255244][T30513] lo speed is unknown, defaulting to 1000 [ 679.704302][T30497] EXT4-fs (loop3): 1 truncate cleaned up [ 679.710445][T30497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.848884][T30531] 9p: Bad value for 'rfdno' [ 680.457260][T30555] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7159'. [ 680.673950][T30570] loop7: detected capacity change from 0 to 512 [ 680.795360][T30570] EXT4-fs: Ignoring removed nobh option [ 680.810476][T30570] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 680.815748][T30571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.839589][T30571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.953034][T30570] EXT4-fs (loop7): 1 truncate cleaned up [ 680.967866][T30570] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.085527][T30584] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 681.191363][T30590] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7167'. [ 681.252528][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.312356][T30594] loop7: detected capacity change from 0 to 512 [ 681.332111][T30594] EXT4-fs: Ignoring removed nobh option [ 681.353885][T30594] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 681.383028][T30594] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.7168: iget: bad i_size value: 38620345925642 [ 681.439928][T30594] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 681.440606][T30594] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7168: couldn't read orphan inode 15 (err -117) [ 681.461675][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 681.461693][ C0] EXT4-fs (loop7): initial error at time 1772046795: ext4_orphan_get:1391: inode 15 [ 681.461745][ C0] EXT4-fs (loop7): last error at time 1772046795: ext4_orphan_get:1391: inode 15 [ 681.537005][T30594] loop7: lost filesystem error report for type 5 error -117 [ 681.537550][T30594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.560970][T30594] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.7168: iget: bad i_size value: 38620345925642 [ 681.640168][T29490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.653356][T30606] netlink: 'syz.9.7172': attribute type 21 has an invalid length. [ 681.674097][T30613] 9p: Bad value for 'rfdno' [ 681.689998][T30606] netlink: 156 bytes leftover after parsing attributes in process `syz.9.7172'. [ 681.712059][T30615] loop3: detected capacity change from 0 to 164 [ 681.811391][T30606] 9p: Bad value for 'rfdno' [ 681.816125][ T28] audit: type=1400 audit(1772046795.532:4431): avc: denied { write } for pid=30593 comm="syz.7.7168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 682.156229][T30621] loop9: detected capacity change from 0 to 512 [ 682.223730][T30621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.278272][T30621] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 682.394602][T30624] loop3: detected capacity change from 0 to 512 [ 682.458626][T30624] EXT4-fs (loop3): 1 orphan inode deleted [ 682.468864][T30624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.530317][T30254] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 682.629463][T30631] loop8: detected capacity change from 0 to 128 [ 682.652000][T30631] EXT4-fs: quotafile must be on filesystem root [ 682.867340][ T28] audit: type=1400 audit(1772046796.533:4432): avc: denied { mount } for pid=30630 comm="syz.8.7178" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 683.159967][T26893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.217602][T29490] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.300957][T29288] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.592096][T30657] 9p: Bad value for 'rfdno' [ 683.596880][T30656] qrtr: Invalid version 255 [ 683.994381][T30670] tmpfs: Too few inodes for current use [ 684.808695][T30678] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7197'. [ 684.857765][T30681] batadv0: entered promiscuous mode [ 685.406237][T30687] loop7: detected capacity change from 0 to 512 [ 685.778246][ C1] ================================================================== [ 685.786369][ C1] BUG: KCSAN: data-race in __perf_event_overflow / __perf_event_set_bpf_prog [ 685.795146][ C1] [ 685.797466][ C1] write to 0xffff888104130418 of 8 bytes by task 30697 on cpu 0: [ 685.805167][ C1] __perf_event_set_bpf_prog+0x419/0x470 [ 685.810798][ C1] perf_ioctl+0x92e/0x15d0 [ 685.815221][ C1] __se_sys_ioctl+0xce/0x140 [ 685.819820][ C1] __x64_sys_ioctl+0x43/0x50 [ 685.824403][ C1] x64_sys_call+0x1563/0x3020 [ 685.829070][ C1] do_syscall_64+0x12c/0x370 [ 685.833664][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.839566][ C1] [ 685.841875][ C1] read to 0xffff888104130418 of 8 bytes by interrupt on cpu 1: [ 685.849412][ C1] __perf_event_overflow+0x252/0x920 [ 685.854697][ C1] perf_swevent_hrtimer+0x28d/0x310 [ 685.859880][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 685.865076][ C1] hrtimer_interrupt+0x269/0x810 [ 685.870016][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 685.875908][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 685.881542][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.887510][ C1] __import_iovec+0x7/0x530 [ 685.892007][ C1] import_iovec+0x60/0x80 [ 685.896328][ C1] ___sys_recvmsg+0x394/0x3b0 [ 685.901005][ C1] do_recvmmsg+0x1ef/0x560 [ 685.905412][ C1] __x64_sys_recvmmsg+0xe5/0x170 [ 685.910350][ C1] x64_sys_call+0x80f/0x3020 [ 685.914940][ C1] do_syscall_64+0x12c/0x370 [ 685.919525][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.925405][ C1] [ 685.927718][ C1] value changed: 0x0000000000000000 -> 0xffffc90001f7d000 [ 685.934810][ C1] [ 685.937118][ C1] Reported by Kernel Concurrency Sanitizer on: [ 685.943257][ C1] CPU: 1 UID: 0 PID: 30682 Comm: syz.3.7195 Tainted: G W syzkaller #0 PREEMPT(full) [ 685.954189][ C1] Tainted: [W]=WARN [ 685.957987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.968140][ C1] ================================================================== [ 685.983475][T30681] vlan2: entered promiscuous mode